tion requires prior approval.

 

® TUV, TUEV and TUV are registered trademarks. Any use or appli

Certificate

Standard

Certificate number

Certificate holder
and developer

Product and
assurance level

Project number

Evaluation facility

®

Common Criteria Recognition
‘Arrangement for components
up to EAL2

 

SOGIS Mutual Recognition
Agreement for components up
[7

Validity

a
PRODUCTS

RvACO78
Accredited by the Dutch
Council for Accreditation

www.tuv.com/nl

Common Criteria for Information Technology Security Evaluation (CC),
Version 3.1 Revision 5 (ISO/IEC 15408)

CC-20-200735

TÜV Rheinland Nederland B.V. certifies:

IDEMIA

2 Place Samuel de Champlain, 92400 Courbevoie, France

CombICAO Applet in SSCD configuration on Cosmo V9

Assurance Package:
= EAL5 ALC_DVS.2 and AVA_VAN.5

Protection Profile Conformance:

= Protection profiles for secure signature creation device — Part 2: Device with key generation,
registered under the reference BSI-CC-PP-0059-2009-MA-01, Version 2.0.1 - 23/01/2012

“Protection profiles for secure signature creation device — Part 3: Device with key import,
registered under the reference BSI-CC-PP-0075, Version 1.0.2 - 24/07/2012

. Protection profiles for secure signature creation device — Part 4: Extension for device with
key generation and trusted communication with certificate generation application, registered
under the reference BSI-CC-PP-0071, Version 1.0.1 - 14/11/12

200735

 

Brightsight BV located in Delft, the Netherlands

Applying the Common Methodology for Information Technology Security
Evaluation (CEM), Version 3.1 Revision 5 (ISO/IEC 18045)

‘The Designated Body from The Netherlands under Article 30(2) and 39(2) of Regulation 910/2014 declares that:

+ The IT product identified in this certificate is a Qualified Signature/Seal Creation Device (QSCD) where data
is held in an entirely but not necessarily exclusively user managed environment.

© The IT product meets the requirements laid down in Annex II of Regulation (EU) No 910/2014 OF THE
EUROPEAN PARLIAMENT AND OF THE COUNCIL of 23 July 2014.

* Conformity of the IT product with the above mentioned requirements has been certified with an evaluation
process that fulfils the requirements of Article 30(3.(a)) and the standards listed in the Annex of
COMMISSION IMPLEMENTING DECISION (EU) 2016/650 of 25 April 2016.

The IT product identified in this certificate has been evaluated at an accredited and licensed/approved
evaluation facility using the Common Methodology for IT Security Evaluation version 3.1 Revision 5 for
conformance to the Common Criteria for IT Security Evaluation version 3.1 Revision 5. This certificate
applies only to the specific version and release of the product in its evaluated configuration and in
conjunction with the complete certification report. The evaluation has been conducted in accordance with
the provisions of the Netherlands scheme for certification in the area of IT security [NSCIB] and the
conclusions of the evaluation facility in the evaluation technical report are consistent with the evidence
adduced. This certificate is not an endorsement of the IT product by TUV Rheinland Nederland B.V. or by
other organisation that recognises or gives effect to this certificate, and no warranty of the IT product by
TUV Rheinland Nederland B.V. or by any other organisation that recognises or gives effect to this
certificate, is either expressed or implied.

Date of 1% issue : 07-01-2020
Certificate expiry : 07-01-2025

  

TÜV Rheinland Nederland B.V.
Westervoortsedijk 73, 6827 AV Arnhem
P.O. Box 2220, NL-6802 CE Arnhem
The Netherlands

TÜVRheinland®

Precisely Right.