Brocade Communications Systems FCX Series User Manual download pdf (Page 39)

Version 1.1, 05/19/2014

GSS CCT Evaluation Technical Report Page 39 of 53

Document: AAR-BrocadeFastIron8010

how a communication path is established between the TOE and the NTP server, and any configuration of the NTP

client on the TOE to support this communication.

The Administration Guide in the Configuring NTP section discusses using the set clock command to set the local

clock. In the same section, there is an extensive discusses about how to establish communication with an NTP

server and how to configure the client. Commands are provided for each topic and examples are given.

Testing Assurance Activities: Test 1: The evaluator uses the operational guide to set the time. The evaluator shall

then use an available interface to observe that the time was set correctly.

Test2: [conditional] If the TOE supports the use of an NTP server; the evaluator shall use the operational guidance

to configure the NTP client on the TOE, and set up a communication path with the NTP server. The evaluator will

observe that the NTP server has set the time to what is expected. If the TOE supports multiple protocols for

establishing a connection with the NTP server, the evaluator shall perform this test using each supported protocol

claimed in the operational guidance.

The evaluator set the local clock from the console and observed the time change. The evaluator then configured a

NTP server and had the appliance connect to the NTP server and update the time. The evaluator observed the time

update from the NTP server.

2.6.4 TSF TESTING (FPT_TST_EXT.1)

2.6.4.1 FPT_TST_EXT.1.1

TSS Assurance Activities: The evaluator shall examine the TSS to ensure that it details the self tests that are run by

the TSF on start-up; this description should include an outline of what the tests are actually doing (e.g., rather than

saying 'memory is tested', a description similar to 'memory is tested by writing a value to each memory location

and reading it back to ensure it is identical to what was written' shall be used). The evaluator shall ensure that the

TSS makes an argument that the tests are sufficient to demonstrate that the TSF is operating correctly.

Section 6.6 provides a discussion of the self-tests. When operating in FIPS mode, the power-on self-tests comply

with the FIPS 140-2 requirements for self-testing. The module performs Cryptographic algorithm known answer

tests, firmware integrity tests using DSA signature verification and conditional self-tests for DRBG, Hardware RNG,

Pair-wise consistency tests on generation of RSA keys, and a Firmware load test (DSA signature verification). Upon

failing any of its FIPS mode power-on self-tests, the TOE will refuse to boot.

Guidance Assurance Activities: The evaluator shall also ensure that the operational guidance describes the

possible errors that may result from such tests, and actions the administrator should take in response; these

possible errors shall correspond to those described in the TSS.

1 2 ... 34 35 36 37 38 39 40 41 42 43 44 ... 52 53

No comments

Brocade Communications Systems FCX Series User Manual Page 39