Brocade Communications Systems FCX Series User Manual download pdf (Page 37)

Version 1.1, 05/19/2014

GSS CCT Evaluation Technical Report Page 37 of 53

Document: AAR-BrocadeFastIron8010

2.6 PROTECTION OF THE TSF (FPT)

2.6.1 EXTENDED: PROTECTION OF ADMINISTRATOR PASSWORDS

(FPT_APW_EXT.1)

2.6.1.1 FPT_APW_EXT.1.1

TSS Assurance Activities: None Defined

Guidance Assurance Activities: None Defined

Testing Assurance Activities: None Defined

2.6.1.2 FPT_APW_EXT.1.2

TSS Assurance Activities: None Defined

Guidance Assurance Activities: None Defined

Testing Assurance Activities: None Defined

Component Assurance Activities: The evaluator shall examine the TSS to determine that it details all

authentication data that are subject to this requirement, and the method used to obscure the plaintext password

data when stored. The TSS shall also detail passwords are stored in such a way that they are unable to be viewed

through an interface designed specifically for that purpose, as outlined in the application note in the NDPP.

Section 6.6 states that the TOE does not offer any interfaces that will disclose to any user a plain text password.

Additionally, locally defined passwords are not stored in plaintext form.

1 2 ... 32 33 34 35 36 37 38 39 40 41 42 ... 52 53

No comments

Brocade Communications Systems FCX Series User Manual Page 37