&
ENNG

 

 

   

MRA racogr ponents CCRA recognition for components
up to EAL 4 and ALC_FLR only up to EAL2 and ALC_FLR only

(CKCIN

centro criptoldgico nacional

CERTIFICATE

CCN-CC-16/2019

Windows 10 and Windows Server 2019 version 1809

Type of product Operating System
Conformance of functionality PP Conformance functionality
Protection Profile Conformance General Purpose Operating Systems Protection Profile (version

4.2.1, 22/04/2019) and General Purpose Operating Systems
Protection Profile/Mobile Device Fundamentals Protection Profile
Extended Package (EP) Wireless Local Area Network (WLAN)
Clients (version 1.0, 08/02/2016)

Evaluation Facility Epoche & Espri S.L.U.

Certification Report CCN-CC/2018-61/INF-2795

Pursuant to the authority vested in me under Act 11/2002 regulating the National Intelligence Centre,
and under Article 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th regulating the National
Cryptologic Centre, | hereby:

Certify that the security of Windows 10 and Windows Server 2019 version 1809, developed by Microsoft
Corporation, 1 Microsoft Way, Redmond, WA 98052, United States of America, has been evaluated
using Common Methodology for Information Technology Security Evaluation/Common Criteria for
Information Technology Security Evaluation version 3.1 release 5, and it has met the requirements of its
Security Target identified as “Microsoft Windows 10, Windows Server 2019 (October 2018 Update)
Security Target. Version 0.04, mayo 2019.”, for evaluation assurance level PP compliant.

Madrid, 17 July 2019
Secretary-General
Acting Director

‘az Esteban Lopez

This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the
“Reglamento de Evaluacién y Certificacin de la Seguridad de las T.I.C.” at PRE/2740/2007, September 19th.

The above-mentioned Security Target and Certification Report are available at the National Cryptologic Centre.
 

 

 

The IT product identified in this certificate has been evaluated at an accredited and licensed/approved
evaluation facility using the Common Methodology for Information Technology Security
Evaluation/Common Criteria for Information Technology Security Evaluation version 3.1 release 5 and
CC Supporting Documents as listed in the Certification Report. This certificate applies only to the specific
version and release of the product in its evaluated configuration and in conjunction with the complete
Certification Report. The evaluation has been conducted in accordance with the provisions of the
Spanish IT Security Evaluation and Certification Scheme, PRE/2740/2007 September the 19th, and the
conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence
adduced. This certificate is not an endorsement of the IT product by the Spanish Scheme or by any other
organisation that recognises or gives effect to this certificate, and no warranty of the IT product by the
Spanish Scheme or by any other organisation that recognises or gives effect to this certificate, is either
expressed or implied.