Ärendetyp: 6 Diarienummer: 17FMV5964-26:1
HEMLIG/
enligt Offentlighets- och sekretesslagen
(2009:400)
2018-06-15
Country of origin: Sweden
Försvarets materielverk
Swedish Certification Body for IT Security
Certification Report - HP NAMS
Issue: 1.0, 2019-Dec-18
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
2 (23)
Table of Contents
1 Executive Summary 3
2 Identification 5
3 Security Policy 7
3.1 Auditing 7
3.2 Cryptography 7
3.3 Identification and Authentication 7
3.4 Data Protection and Access Control 8
3.5 Protection of the TSF 8
3.6 TOE Access Protection 8
3.7 Trusted Channel Communication and Certificate Management 9
3.8 Security Management 9
4 Assumptions and Clarification of Scope 10
4.1 Assumptions 10
4.2 Clarification of Scope 10
5 Architectural Information 12
6 Documentation 13
7 IT Product Testing 14
7.1 Developer Testing 14
7.2 Evaluator Testing 14
7.3 Penetration Testing 14
8 Evaluated Configuration 15
9 Results of the Evaluation 16
10 Evaluator Comments and Recommendations 18
11 Glossary 19
12 Bibliography 21
Appendix A Scheme Versions 23
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
3 (23)
1 Executive Summary
The Target of Evaluation, TOE, is the FutureSmart 4.6.3 firmware for the network
single-function (SFP) printer model series:
HP PageWide Enterprise Color 556,
HP PageWide Managed Color E55650,
HP LaserJet Enterprise M607 / M608 / M609,
HP LaserJet Managed E60055 / E60065 / E60075,
HP PageWide Enterprise Color 765,
HP PageWide Managed Color E75160,
HP LaserJet Enterprise Color M652 / M653,
HP LaserJet Managed Color E65050 / E65060.
These SFPs provide functions for network printing, storing, and retreiving of docu-
ments. The evaluated security features include self-testing, administrator and user
identification, authentication, encrypted network communication (IPSec), encrypted
storage of files, access control, audit etc.
The ST claims demonstrable conformance to the IEEE Std 2600.1-2009 Protection
Profile for Hardcopy Devices, Operational Environment A, v1.0 [PP2600A], including
the DSR, PRT, and SMI packages.
The evaluation has been performed by atsec information security AB in their prem-
ises in Danderyd, Sweden, to some extent in the approved foreign location in Austin,
Texas, USA, and the developer's premises in Boise, Idaho, USA, and was completed
on the 3rd of December 2019.
The evaluation was conducted in accordance with the requirements of Common Cri-
teria, version 3.1, release 5, and the Common Methodology for IT Security Evalua-
tion, version 3.1, release 5. The evaluation conforms to evaluation assurance level
EAL 3, augmented by ALC_FLR.2.
atsec information security AB is a licensed evaluation facility for Common Criteria un-
der the Swedish Common Criteria Evaluation and Certification Scheme. atsec infor-
mation security AB is is also accredited by the Swedish accreditation body SWEDAC
according to ISO/IEC 17025 for Common Criteria evaluation.
The certifier monitored the activities of the evaluator by reviewing all successive ver-
sions of the evaluation reports. The certifier determined that the evaluation results
confirm the security claims in the Security Target [ST], and have been reached in
agreement with the requirements of the Common Criteria and the Common Method-
ology for the evaluation assurance level EAL 3 + ALC_FLR.2.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
4 (23)
The certification results only apply to the version of the product indicated in the cer-
tificate, and on the condition that all the stipulations in the Security Target are met.
This certificate is not an endorsement of the IT product by CSEC or any other organisa-
tion that recognises or gives effect to this certificate, and no warranty of the IT prod-
uct by CSEC or any other organisation that recognises or gives effect to this certificate
is either expressed or implied.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
5 (23)
2 Identification
Certified product versions (system firmware, JetDirect firmware, model series):
2405268_022711 JSI24050246 HP PageWide Enterprise Color 556
2405268_022711 JSI24050246 HP PageWide Managed Color E55650
2405268_022708 JSI24050246 HP LaserJet Enterprise M607
2405268_022708 JSI24050246 HP LaserJet Enterprise M608
2405268_022708 JSI24050246 HP LaserJet Enterprise M609
2405268_022708 JSI24050246 HP LaserJet Managed E60055
2405268_022708 JSI24050246 HP LaserJet Managed E60065
2405268_022708 JSI24050246 HP LaserJet Managed E60075
Certification Identification
Certification ID CSEC2017008
Name and version of the
certified IT product
FutureSmart 4.6.3 firmware for the MFP model series listed
below
Security Target HP PageWide Enterprise Color 556,
HP PageWide Managed Color E55650,
HP LaserJet Enterprise M607 / M608 / M609,
HP LaserJet Managed E60055 / E60065 / E60075,
HP PageWide Enterprise Color 765,
HP PageWide Managed Color E75160,
HP LaserJet Enterprise Color M652 / M653,
HP LaserJet Managed Color E65050 / E65060
Security Target
Assurance packages EAL 3 + ALC_FLR.2
Sponsor HP Inc.
Developer HP Inc.
ITSEF atsec information security AB
Common Criteria version 3.1 release 5
CEM version 3.1 release 5
QMS version 1.23
Scheme Notes Release 14.0
Recognition Scope CCRA, SOGIS, and EA/MLA
Certification date 2019-12-18
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
6 (23)
2405268_022745 JSI24050246 HP PageWide Enterprise Color 765
2405268_022745 JSI24050246 HP PageWide Managed Color E75160
2405268_022697 JSI24050246 HP LaserJet Enterprise Color M652
2405268_022697 JSI24050246 HP LaserJet Enterprise Color M653
2405268_022697 JSI24050246 HP LaserJet Managed Color E65050
2405268_022697 JSI24050246 HP LaserJet Managed Color E65060
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
7 (23)
3 Security Policy
The TOE provides the following security services:
- Auditing
- Cryptography
- Identification and authentication
- Protection of the TSF
- TOE access protection
- Trusted channel communication and certificate management
- User and access management
A brief description of each security policy is given below. A more detailed description
is given in the ST.
3.1 Auditing
The TOE performs auditing of security relevant functions. Both the Jetdirect Inside
Firmware and System Firmware generate audit records. The TOE connects and sends
audit records to an external syslog server for long-term storage and audit review.
3.2 Cryptography
The TOE uses IPsec to protect its communications channels. The QuickSec crypto-
graphic library, which is part of the Operational Environment, implements the crypto-
graphic algorithms for IPsec. Please note that the TOE's usage of IPSec is tested dur-
ing the evaluation.
The TOE supports key derivation and decryption for printing encrypted stored print
jobs. Both the key derivation function and decryption algorithm used by the TOE for
this are included in the TOE.
3.3 Identification and Authentication
The TOE supports multiple Control Panel sign in methods, both local
and remote methods:
● Local sign in method:
- Local Device Sign In (Local Administrator account only)
● Remote sign in methods:
- LDAP Sign In
- Windows Sign In (via Kerberos)
The Control Panel allows both non-administrative users (U.NORMAL)
and administrative users (U.ADMINISTRATOR) to sign in.
The TOE also uses IPsec to identify and mutually authenticate the
following user types:
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
8 (23)
● Administrative Computer (U.ADMINISTRATOR)
● Network Client Computer (U.NORMAL)
3.4 Data Protection and Access Control
The TOE controls user access to functions available at the Control Panel using permis-
sions. Each Control Panel application and protected feature has an associated per-
mission. A permission is configured to either grant or deny access. Permissions are
defined in Permission Sets (a.k.a. User Roles) which are assigned to users. To execute
a Control Panel application or protected feature, the applicable permission must be
configured to grant access in the Permission Set applied to a user.
Users control access to print (non-encrypted) jobs that they place in Job Storage by
assigning Job PINs to these jobs.
The TOE also can store and decrypt encrypted stored print jobs received from a client
computer that has the HP Universal Printer Driver installed. A stored print job is first
encrypted by the client computer and protected with a user-specified Job Encryption
Password. The job is sent encrypted to the TOE and stored encrypted by the TOE.
To print or delete an encrypted stored print job at the Control Panel, a non-adminis-
trative user must provide the correct Job Encryption Password for the encrypted
stored print job. An administrative user can delete an encrypted stored print job at
the Control Panel without providing a Job Encryption Password but must provide the
correct Job Encryption Password to print the job.
3.5 Protection of the TSF
The TOE allows an administarot to restrict forwarding of data to an external inter-
face.
The TOE contains a suite of self tests to test specific security functionality of the TOE.
It contains data integrity checks for testing specific TSF Data of the TOE and for test-
ing the stored TOE executables.
The TOE contains a system clock that is used to generate reliable timestamps. In the
evaluated configuration, TOE can optionally be configured to synchronize its system
clock with a Network Time Protocol (NTP) server.
3.6 TOE Access Protection
The TOE supports an inactivity timeout for Control Panel sessions. If a logged in user
is inactive for longer than the specified period, the user is automatically logged off of
the TOE.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
9 (23)
3.7 Trusted Channel Communication and Certificate Manage-
ment
The TOE uses IPsec as means to provide trusted channel communications. IPsec uses
X.509v3 certificates, the Internet Security Association and Key Management Protocol
(ISAKMP), IKEv1, IKEv2 and Encapsulating Security Payload (ESP) to protect communi-
cations.
The IPsec and IKE cryptographic algorithms are all supplied by the QuickSec crypto-
graphic library. The QuickSec cryptographic library is part of the Operational Environ-
ment, but the TOE controls the usage of these algorithms.
In addition, the TOE provides certificate management functions used to manage
(add, replace, delete) X.509v3 certificates.
3.8 Security Management
Only administrators have the authority to manage the security functionality of the
TOE. They can manage the Administrator Access Code, IPsec certificates, IPsec/Fire-
wall address templates, service templates and rules, sign-in policy, and the system
clock.
Normal users can only manage user data that they have access to on the TOE.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
10 (23)
4 Assumptions and Clarification of Scope
4.1 Assumptions
The Security Target [ST] makes eight assumptions on the usage and the operational
environment of the TOE.
A.ACCESS.MANAGED
The TOE is located in a restricted or monitored environment that provides protection
from unmanaged access to the physical components and data interfaces of the TOE.
A.ADMIN.PC.SECURE
The administrative computer is in a physically secured and managed environment
and only the authorized administrator has access to it.
A.USER.PC.POLICY
User computers are configured and used in conformance with the organization's
security policies.
A.USER.TRAINING
TOE Users are aware of the security policies and procedures of their organization,
and are trained and competent to follow those policies and procedures.
A.ADMIN.TRAINING
Administrators are aware of the security policies and procedures of their organiza-
tion, are trained and competent to follow the manufacturer's guidance and docu-
mentation, and correctly configure and operate the TOE in accordance with those
policies and procedures.
A.ADMIN.TRUST
Administrators do not use their privileged access rights for malicious purposes.
A.EMAILS.PROTECTED
For emails received by the SMTP gateway from the TOE, the transmission of emails
between the SMTP gateway and the email’s destination is protected.
A.SERVICES.RELIABLE
When the TOE uses any of the network services DNS, Kerberos, LDAP, NTP, SMTP,
syslog, and/or WINS, these services provide reliable information and responses to the
TOE.
4.2 Clarification of Scope
The Security Target contains six threats, which have been considered during the eval-
uation.
T.DOC.DIS
User Document Data may be disclosed to unauthorized persons.
T.DOC.ALT
User Document Data may be altered by unauthorized persons.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
11 (23)
T.FUNC.ALT
User Function Data may be altered by unauthorized persons.
T.PROT.ALT
TSF Protected Data may be altered by unauthorized persons.
T.CONF.DIS
TSF Confidential Data may be disclosed to unauthorized persons.
T.CONF.ALT
TSF Confidential Data may be altered by unauthorized persons.
The Security Target contains seven Organisational Security Policies (OSPs), which
have been considered during the evaluation.
P.USER.AUTHORIZATION
To preserve operational accountability and security, users will be authorized to use
the TOE only as permitted by the TOE owner.
P.SOFTWARE.VERIFICATION
To detect corruption of the executable code in the TSF, procedures will exist to self-
verify executable code in the TSF.
P.ADMIN.PASSWORD
To restrict access to administrative tasks, the Device Administrator Password will be
set in the evaluated configuration so that it is required to perform security-relevant
actions through the EWS and at the Control Panel.
P.AUDIT.LOGGING
To preserve operational accountability and security, records that provide an audit
trail of TOE use and security-relevant events will be created, maintained, and pro-
tected from unauthorized disclosure or alteration, and will be reviewed by author-
ized personnel.
P.INTERFACE.MANAGEMENT
To prevent unauthorized use of the external interfaces of the TOE, operation of those
interfaces will be controlled by the TOE and its IT environment.
P.REMOTE_PANEL.DISALLOWED
To preserve operational accountability and security, administrators must not use the
Remote Control-Panel feature.
P.USERNAME.CHARACTER_SET
To prevent ambiguous user names in the TOE's audit trail, the user names of the
LDAP and Windows Sign In users must only contain ASCII printable characters except
for the double quote (22 hex) and single quote (27 hex) characters (i.e., allowed ASCII
characters in hexadecimal: 20, 21, 23 - 26, 28 - 7E).
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
12 (23)
5 Architectural Information
TOE is the firmware of an SFP designed to be shared by many client computers
and human users. It performs the functions of printing, storing, and retrieving
documents. It can be connected to a wired local network through the embedded
Jetdirect Inside's built-in Ethernet, or to a USB device using its USB port (but the use
of which must be disabled in the evaluated configuration).
In the diagram below, the unshaded parts show the Firmware parts that constitute
the TOE.
The Security Target [ST] contains further descripions of the product components and
the TOE.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
13 (23)
6 Documentation
For proper configuration of the TOE into the evaluated configuration, the following
guidance documents are available:
CCECG Common Criteria Evaluated Configuration Guide for HP
Single-Function Printers HP LaserJet Enterprise M607/M608/M609,
HP LaserJet Managed E60055/E60065/E60075, HP Color LaserJet
Enterprise M652/M653, HP Color LaserJet Managed E65060/E65060,
HP PageWide Enterprise Color 556, HP PageWide Enterprise Color
765, HP PageWide Managed Color E55650, HP PageWide Managed
Color E75160
556UG HP PageWide Enterprise Color 556 User Guide
556IG HP PageWide Enterprise Color 556 Installation Guide
M607/8/9UG HP LaserJet Enterprise M607, M608, M609 User guide
M607/8/9IG HP LaserJet Enterprise M607, M608, M609 Installation Guide
765UG HP PageWide Enterprise Color 765, HP PageWide Color 755
User Guide
765IG HP PageWide Enterprise Color 765 series HP PageWide Color 755
series Installation Guide
E75160UG HP PageWide Managed Color E75160, P75250 User guide
E75160IG HP PageWide Managed Color E75160 Series HP PageWide Managed
Color P75250 Series Installation Guide
M652/3UG HP Color LaserJet Enterprise M652, M653 User Guide
M652IG HP Color LaserJet Enterprise M652 Installation Guide
M653IG HP Color LaserJet Enterprise M653 Installation Guide
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
14 (23)
7 IT Product Testing
7.1 Developer Testing
The developers tested the TOE on four hardware models, covering all firmwares. All
these models were tested both automatically and manually. IPSec was tested on one
model. The developer tests cover all TSFI, all SFRs and all subsystems.
All test results were as expected.
The testing was performed in the developers premises in Boise, Idaho, USA.
7.2 Evaluator Testing
The evaluators tested the TOE on four hardware models, covering all firmwares, us-
ing the developer's automated testing equipment. Two of these models were also
tested manually. IPSec was tested on two models.
The evaluators re-ran a sample of manual developer tests as well as all automated
tests, and some customisations of the automated tests.
The evaluators automated testing was performed at the developer site in Boise,
Idaho, USA.
All test results were as expected.
7.3 Penetration Testing
The evaluators penetration tested the TOE on four hardware models, covering all
firmwares.
The testing was performed in the developers premises in Boise, Idaho, USA.
The evaluators examined all potential interfaces (UDP and TCP ports), for IP v4 and
for IP v6. Also, the SNMP port (UDP 161) was tested.
The evaluator determined that only UDP port 500 (ISAKMP) is available outside of
IPsec, which is the expected result. No open SNMP ports were discovered.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
15 (23)
8 Evaluated Configuration
The following items will need to be adhered to in the evaluated configuration:
• Device Administrator Password must be set as per P.ADMIN.PASSWORD
• Only one Administrative Computer is used to manage the TOE
• Third-party solutions are not installed on the TOE
• All stored jobs must be assigned a Job PIN or job encryption password
• Device USB and Host USB plug and play must be disabled
• Firmware upgrades sent as print jobs through P9100 interface must be disabled
• Jetdirect Inside management via telnet and FTP must be disabled
• Jetdirect XML Services must be disabled
• External file system access through PJL and PS must be disabled
• IPsec authentication using X.509v3 certificates must be enabled (IPsec
authentication using Kerberos or Pre-Shared Key is not supported)
• IPsec Authentication Headers (AH) must be disabled
• Device Guest permission set must have zero permissions enabled (this disables the
Guest role)
• SNMP support limited to:
- SNMPv1 read-only
- SNMPv2c read-only
- SNMPv3
• The Service PIN, used by a customer support engineer to access functions available
to HP support personnel, must be disabled
• Near Field Communication (NFC) must be disabled
• Wireless Direct Print must be disabled
• PJL device access commands must be disabled
• User names for the LDAP and Windows Sign In users must only contain the
characters defined in P.USERNAME.CHARACTER_SET • Remote Control-Panel use is
disallowed per P.REMOTE_PANEL.DISALLOWED
• Local Device Sign In accounts must not be created (i.e., only the Device
Administrator account is allowed as a Local Device Sign In account).
• Access must be blocked to the following Web Services (WS):
- Open Extensibility Platform device (OXPd) Web Services
- WS* Web Services
• User Access Codes use is disabled
• An IPv4 address must be statically assigned as per the instructions in TOE’s
configuration guidance [CCEGC]
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
16 (23)
9 Results of the Evaluation
The evaluators applied each work unit of the Common Methodology [CEM] within
the scope of the evaluation, and concluded that the TOE meets the security objec-
tives stated in the Security Target [ST] for an attack potential of Basic.
The certifier reviewed the work of the evaluator and determined that the evaluation
was conducted in accordance with the Common Criteria [CC].
The evaluators overall verdict is PASS.
The verdicts for the assurance classes and components are summarised in the follow-
ing table:
Assurance Class/Family Short name Verdict
Development ADV PASS
Security Architecture ADV_ARC.1 PASS
Functional Specification ADV_FSP.3 PASS
TOE Design ADV_TDS.2 PASS
Guidance Documents AGD PASS
Operational User Guidance AGD_OPE.1 PASS
Preparative Procedures AGD_PRE.1 PASS
Life-cycle Support ALC PASS
CM Capabilities ALC_CMC.3 PASS
CM Scope ALC_CMS.3 PASS
Delivery ALC_DEL.1 PASS
Development Security ALC_DVS.1 PASS
Life-cycle Definition ALC_LCD.1 PASS
Flaw Remediation ALC_FLR.2 PASS
Security Target Evaluation ASE PASS
ST Introduction ASE_INT.1 PASS
Conformance Claims ASE_CCL.1 PASS
Security Problem Definition ASE_SPD.1 PASS
Security Objectives ASE_OBJ.2 PASS
Extended Components Definition ASE_ECD.1 PASS
Security Requirements ASE_REQ.2 PASS
TOE Summary Specification ASE_TSS.1 PASS
Tests ATE PASS
Coverage ATE_COV.2 PASS
Depth ATE_DPT.1 PASS
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
17 (23)
Functional Tests ATE_FUN.1 PASS
Independent Testing ATE_IND.2 PASS
Vulnerability Assessment AVA PASS
Vulnerability Analysis AVA_VAN.2 PASS.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
18 (23)
10 Evaluator Comments and Recommendations
None.
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
19 (23)
11 Glossary
BEV Border Encryption Value
CC Common Critera
CSEC The Swedish Certification Body for IT Security
DNS Domain Name System
EAL Evaluated Assurance Level
ESP Encapsulating Security Payload (IPsec)
EWS Embedded Web Server
GUI Graphical User Interface
HCD Hardcopy Device
HTTP Hypertext Transfer Protocol
HTTPS HTTP Secure
IKE Internet Key Exchange (IPsec)
IP Internet Protocol
IPSec Internet Protocol Security
ISAKMP Internet Security Association Key Management Protocol (IPsec)
IPv4 Internet Protocol version 4
IPv6 Internet Protocol version 6
LDAP Lightweight Directory Access Protocol
MFP Multifunction Printer
NTS Network Time Service
OS Operating System
OXP Open Extensibility Platform
OXPd OXP device layer
PJL Printer Job Language
PP Protection Profile
PSTN Public Switched Telephone Network
REST Representational State Transfer (a.k.a. RESTful)
RESTful See REST
SED Self-Encrypting Drive
SFP Single Function
SHA Secure HashAlgorithm
SNMP Simple Network Management Protocol
ST Security Target
TCP Transmission Control Protocol
TLS Transport Layer Security
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
20 (23)
TOE Target of Evaluation
TSF TOE Security Functions
TSFI TSF Interface
UDP User Datagram Protocol
WS Web Services
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
21 (23)
12 Bibliography
ST HP PageWide Enterprise Color 556,
HP PageWide Managed Color E55650,
HP LaserJet Enterprise M607 / M608 / M609,
HP LaserJet Managed E60055 / E60065 / E60075,
HP PageWide Enterprise Color 765,
HP PageWide Managed Color E75160,
HP LaserJet Enterprise Color M652 / M653,
HP LaserJet Managed Color E65050 / E65060 Security Target,
HP Inc., 2019-08-05, document version 2.05
CCECG Common Criteria Evaluated Configuration Guide for HP
Single-Function Printers HP LaserJet Enterprise M607/M608/M609,
HP LaserJet Managed E60055/E60065/E60075, HP Color LaserJet
Enterprise M652/M653, HP Color LaserJet Managed E65060/E65060,
HP PageWide Enterprise Color 556, HP PageWide Enterprise Color
765, HP PageWide Managed Color E55650, HP PageWide Managed
Color E75160, HP Inc., 2019-06, edition 1
PP2600A 2600.1-PP, Protection Profile for Hardcopy Devices, Operational
Environment A, IEEE, June 2009, document version 1.0
556UG HP PageWide Enterprise Color 556 User Guide, HP Inc., 2016-05,
edition 1
556IG HP PageWide Enterprise Color 556 Installation Guide, HP Inc., 2016
M607/8/9UG HP LaserJet Enterprise M607, M608, M609 User guide, HP Inc.,
2017-08, edition 2
M607/8/9IG HP LaserJet Enterprise M607, M608, M609 Installation Guide, HP Inc.,
2017
765UG HP PageWide Enterprise Color 765, HP PageWide Color 755
User Guide, HP Inc., 2019-01, edition 4
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
22 (23)
765IG HP PageWide Enterprise Color 765 series HP PageWide Color 755
series Installation Guide, HP Inc., 2018
E75160UG HP PageWide Managed Color E75160, P75250 User guide, HP Inc.,
2018-03, edition 2
E75160IG HP PageWide Managed Color E75160 Series HP PageWide Managed
Color P75250 Series Installation Guide, HP Inc., 2018-03, edition1
M652/3UG HP Color LaserJet Enterprise M652, M653 User Guide, HP Inc.,
2017-05, edition 1
M652IG HP Color LaserJet Enterprise M652 Installation Guide, HP Inc., 2017
M653IG HP Color LaserJet Enterprise M653 Installation Guide, HP Inc., 2017
CCpart1 Common Criteria for Information Technology Security Evaluation,
Part 1, version 3.1 revision 5, CCMB-2017-04-001
CCpart2 Common Criteria for Information Technology Security Evaluation,
Part 2, version 3.1 revision 5, CCMB-2017-04-002
CCpart3 Common Criteria for Information Technology Security Evaluation,
Part 3, version 3.1 revision 5, CCMB-2017-04-003
CC CCpart1 + CCpart2 + CCpart3
CEM Common Methodology for Information Technology Security
Evaluation, version 3.1 revision 5, CCMB-2017-04-004
SP-002 SP-002 Evaluation and Certification, CSEC, 2019-09-24, document
version 31.0
SP-188 SP-188 Scheme Crypto Policy, CSEC, 2019-09-25, document
version 9.0
Swedish Certification Body for IT Security
Certification Report HP NAMS
17FMV5964-26:1 1.0 2019-12-18
23 (23)
Appendix A Scheme Versions
During the certification project, the following versions of the quality management
system (QMS) have been applicable since the certification application was received
2017-06-16:
QMS 1.20.4 valid from 2017-05-11
QMS 1.20.5 valid from 2017-06-28
QMS 1.21 valid from 2017-11-15
QMS 1.21.1 valid from 2018-03-09
QMS 1.21.2 valid from 2018-03-09 SIC!
QMS 1.21.3 valid from 2018-05-24
QMS 1.21.4 valid from 2018-09-13
QMS 1.21.5 valid from 2018-11-19
QMS 1.22 valid from 2019-02-01
QMS 1.22.1 valid from 2019-03-08
QMS 1.22.2 valid from 2019-05-02
QMS 1.22.3 valid from 2019-05-20
QMS 1.23 valid from 2019-10-14
In order to ensure consistency in the outcome of the certification, the certifier has
examined the changes introduced in each update of the quality management system.
The changes between consecutive versions are outlined in "Ändringslista CSEC QMS
1.23".
The certifier concluded that, from QMS 1.20.4 to the current QMS 1.23, there are no
changes with impact on the result of the certification.