When will SP 1,2,3,… be CC certified?

Generally, we do not certify every Service Pack (SP), just major product releases. For example, our customers have seen a long term commitment by Microsoft to certify each major release of Windows.

If a new SP’s ship date happens to line up with the conclusion of a Common Criteria (CC) evaluation, we try to include it, but it’s all about timing.

Also, there is no grandfathering of SPs or hotfixes in the CC scheme. This is a flaw in CC that still needs to be addressed.

Due to the great time and expense of CC validation of products with a rich set of real world features, such as Microsoft Windows, the level of granularity for evaluations that makes sense is at the major release level.