’ HH MRA recognition for components CCRA recognition for components up to EAL 4 and ALC_FLR only up to EAL 2 and ALC_FLR only UICHN centro criptolögico nacional CERTIFICATE CCN-CC-45/2020 Huawei GaussDB 100 Version V300R001C00B300 Release 3da6647 Type of product Database Management System Conformance of functionality PP Conformance functionality Protection Profile Conformance Protection Profile for Database Management Systems (Base Package), Version 2.12, 23/03/2017 (BSI-CC-PP-0088-V2) Evaluation Facility DEKRA Testing and Certification S.A.U. Certification Report CCN-CC/2019-20/INF-3379 Expiration Date See Certification Report Pursuant to the authority vested in me under Act 11/2002 regulating the National Intelligence Centre, and under Article 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th regulating the National Cryptologic Centre, | hereby: Certify that the security of Huawei GaussDB 100 Version V300R001C00B300 Release 3da6647, developed by Huawei Technologies Co., Ltd., F4 F Area Administration Building, Headquarters of Huawei Technologies Co., Ltd. Bantian, Longgang District, Shenzhen, 518129, People Republic of China, has been evaluated using Common Methodology for Information Technology Security Evaluation/Common Criteria for Information Technology Security Evaluation version 3.1 release 5, and it has met the requirements of its Security Target identified as “Security Target of Huawei GaussDB 100 V300R001C00B300 (version: 0.6, date: 2020-10-10)”, for evaluation assurance level EAL2 + ALC_FLR.2. Madrid, 30° November 2020 Secretary of State Director @) This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the “Reglamento de Evaluaciön y Certificacién de la Seguridad de las T.I.C.” at PRE/2740/2007, September 19th. Nic The above-mentioned Security Target and Certification Report are available at the National Cryptologic Centre. This certificate will come into effect the following day that the associated certificate resolution signed by the Secretary of State Director of CCN is published in the Official State Gazette (B.O.E — https://www.boe.es). The IT product identified in this certificate has been evaluated at an accredited and licensed/approved evaluation facility using the Common Methodology for Information Technology Security Evaluation/Common Criteria for Information Technology Security Evaluation version 3.1 release 5 as listed in the Certification Report. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete Certification Report. The evaluation has been conducted in accordance with the provisions of the Spanish IT Security Evaluation and Certification Scheme, PRE/2740/2007 September the 19th, and the conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product by the Spanish Scheme or by any other organisation that recognises or gives effect to this certificate, and no warranty of the IT product by the Spanish Scheme or by any other organisation that recognises or gives effect to this certificate, is either expressed or implied.