Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
National Information Assurance Partnership
Common Criteria Evaluation and Validation Scheme
Validation Report
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855
& ColorQube 9301, 9302, 9303
Report Number: CCEVS-VR-VID10499-2013
Dated: May 29, 2013
Version: 1.0
National Institute of Standards and Technology Department of Defense
Information Technology Laboratory National Security Agency
100 Bureau Drive 9800 Savage Road
Gaithersburg, MD 20899 Fort Meade, MD 20755-6940
®
TM
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
ACKNOWLEDGEMENTS
Validation Team
Dr. Jerry Myers, The Aerospace Corporation
Paul Bicknell, The MITRE Corporation
Common Criteria Testing Laboratory
Computer Sciences Corporation
7231 Parkway Drive
Hanover, Maryland 21076
Evaluators
John Daniels
Cheryl Dugan
Annette Nadeau
Huan Zhou
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
Contents
1. Executive Summary..................................................................................................... 4
1.1. Interpretations....................................................................................................... 4
2. IDENTIFICATION ..................................................................................................... 5
3. Security Policy............................................................................................................. 7
4. Security Problem Definition........................................................................................ 8
4.1. Assumptions......................................................................................................... 8
4.2. Threats.................................................................................................................. 8
4.3. Organizational Security Policies.......................................................................... 8
4.4. Clarification of Scope........................................................................................... 9
5. architectural information ........................................................................................... 10
5.1. Logical Scope and Boundary ............................................................................. 10
5.2. Physical Scope and Boundary............................................................................ 11
6. documentation ........................................................................................................... 14
7. IT PRODUCT TESTING.......................................................................................... 15
7.1. Developer testing................................................................................................ 15
7.2. Evaluation team independent testing.................................................................. 15
7.3. Vulnerability analysis......................................................................................... 16
8. evaluated configuration ............................................................................................. 17
9. Results of the Evaluation........................................................................................... 18
10. VALIDATOR COMMENTS/Recommendations.................................................. 19
11. Annexes.................................................................................................................. 20
12. Security Target....................................................................................................... 21
13. Glossary ................................................................................................................. 22
14. Bibliography .......................................................................................................... 23
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
1. EXECUTIVE SUMMARY
This report is intended to assist the end-user of this product and any security certification
Agent for the end-user with determining the suitability of this Information Technology
(IT) product in their environment. End-users should review both the Security Target
(ST), which is where specific security claims are made, in conjunction with this
Validation Report (VR), which describes how those security claims were evaluated.
This report documents the assessment by the National Information Assurance Partnership
(NIAP) validation team of the evaluation of the Xerox WorkCentre 5845, 5855, 5865,
5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301, 9302, 9303, the
target of evaluation (TOE), performed by Computer Sciences Corporation. It presents the
evaluation results, their justifications, and the conformance results. This report is not an
endorsement of the TOE by any agency of the U.S. government, and no warranty is either
expressed or implied.
The evaluation was performed by Computer Sciences Corporation (CSC) of Hanover,
MD in accordance with the United States evaluation scheme and completed on the 29th
of
May 2013. The information in this report is largely derived from the ST, the Evaluation
Technical Report (ETR) and the functional testing report. The ST was written by
Computer Sciences Corporation on behalf of Xerox. The evaluation was performed to
conform to the requirements of the Common Criteria for Information Technology
Security Evaluation, Version 3.1, Revision 3, dated July 2009 at Evaluation Assurance
Level 2 (EAL 2) augmented with ALC_FLR.3, and the Common Evaluation
Methodology for IT Security Evaluation (CEM), Version 3.1, Revision 3, dated July
2009.
The Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845,
7855 & ColorQube 9301, 9302, 9303 is a multi-function device (MFD) that copies,
prints, scans and faxes. The MFD contains an internal hard disk drive. Standard security
functions include SSL, IPSec, a host-based firewall, and an internal audit log. Users may
be authenticated to the network or locally at the device. The evaluated configuration
includes the Image Overwrite Security package. The Image Overwrite Security package
causes any temporary image files to be erased from the internal hard disk drive when
those files are no longer needed or on demand at the discretion of the system
administrator.
1.1.Interpretations
There are no applicable Common Criteria interpretations.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
2. IDENTIFICATION
The Common Criteria Evaluation and Validation Scheme (CCEVS) is a joint National
Security Agency (NSA) and National Institute of Standards and Technology (NIST)
effort to establish commercial facilities to perform trusted product evaluations. Under
this program, commercial testing laboratories called Common Criteria Testing
Laboratories (CCTLs) using the Common Evaluation Methodology (CEM) for
Evaluation Assurance Level (EAL) 1 through EAL 4 in accordance with National
Voluntary Laboratory Assessment Program (NVLAP) accreditation conduct security
evaluations.
The NIAP Validation Body assigns Validators to monitor the CCTLs to ensure quality
and consistency across evaluations. Developers of IT products desiring a security
evaluation contract with a CCTL and pay a fee for their product’s evaluation. Upon
successful completion of the evaluation, the product is added to NIAP’s Validated
Products List.
Table 1 provides information needed to completely identify the product, including:
 The Target of Evaluation (TOE): the fully qualified identifier of the product as
evaluated;
 The Security Target (ST), describing the security features, claims, and assurances
of the product;
 The conformance result of the evaluation;
 Any Protection Profile to which the product is conformant;
 The organizations participating in the evaluation.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
Table 1: Evaluation Identifiers
Item Identifier
Evaluation Scheme United States NIAP Common Criteria Evaluation and Validation Scheme
Target of Evaluation
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835,
7845, 7855 & ColorQube 9301, 9302, 9303
Protection Profile
U.S. Government Protection Profile for Hardcopy Devices Version (IEEE
Std. 2600.2-2009 Protection Profile, v1.0, 26 February 2010
Security Target
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835,
7845, 7855 & ColorQube 9301, 9302, 9303 Security Target, Version 1.0,
Revision 1.3, 12 April 2013
Dates of evaluation January 2012 to May 2013
Evaluation Technical Report
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835,
7845, 7855 & ColorQube 9301, 9302, 9303 Evaluation Technical Report,
Computer Sciences Corporation, v1.1, 6 May 2013
Conformance Result EAL 2 augmented with ALC_FLR.3
Common Criteria version Common Criteria for Information Technology Security Evaluation Version
3.1, Revision 3, July 2009
Common Evaluation
Methodology (CEM) version
CEM version 3.1R3, July 2009
Sponsor Xerox Corporation
Developer Xerox Corporation
Evaluators John Daniels, Cheryl Dugan, Annette Nadeau, Huan Zhou
Validation Team Dr. Jerry Myers, Paul Bicknell
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
3. SECURITY POLICY
The TOE enforces the following security policies:
 Information Flow Security. The TOE prevents unauthorized data flow between
the fax line interface and the network interface.
 User Data Protection – SSL. The TOE implements the Secure Sockets Layer
(SSL) protocol to protect communication via the Web Graphical User Interface
(GUI) and to protect workflow scanning communications to an SSL enabled
repository.
 User Data Protection – IPSec. The TOE implements Internet Protocol Security
(IPSec) to protect print client communications.
 IP Filtering. The TOE provides the ability for the system administrator to
configure IPv4 filtering rules.
 Network Management Security. The TOE implements Simple Network
Management Protocol v3 (SNMP) for management communications via the
SNMP interface.
 Privileged User Access Control. The TOE restricts management of security
functions to the authorized system administrator.
 User Access Control. The TOE enables system administrators to restrict access
to the print, copy, scan and fax functions to authorized users.
A complete list of the security functions of the TOE is provided in the Security Target.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
4. SECURITY PROBLEM DEFINITION
4.1.Assumptions
The ST identified the following security assumptions:
 The TOE is located in a restricted or monitored environment that provides
protection from unmanaged access to the physical components and data
interfaces of the TOE.
 TOE Users are aware of the security policies and procedures of their
organization, and are trained and competent to follow those policies and
procedures.
 Administrators are aware of the security policies and procedures of their
organization, are trained and competent to follow the manufacturer’s
guidance and documentation, and correctly configure and operate the TOE
in accordance with those policies and procedures.
 Administrators do not use their privileged access rights for malicious
purposes.
4.2.Threats
The ST identified the following threats addressed by the TOE:
 User Document Data may be disclosed to unauthorized persons
 User Document Data may be altered by unauthorized persons
 User Function Data may be altered by unauthorized persons
4.3.Organizational Security Policies
The ST identified the following OSPs addressed by the TOE:
 To preserve operational accountability and security, Users will be
authorized to use the TOE only as permitted by the TOE Owner
 To detect corruption of the executable code in the TOE Security Functions
(TSF), procedures will exist to self-verify executable code in the TSF
 To preserve operational accountability and security, records that provide
an audit trail of TOE use and security-relevant events will be created,
maintained, and protected from unauthorized disclosure or alteration, and
will be reviewed by authorized personnel
 To prevent unauthorized use of the external interfaces of the TOE,
operation of those interfaces will be controlled by the TOE and its IT
environment
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
4.4.Clarification of Scope
All evaluations (and all products) have limitations, as well as potential
misconceptions that need clarifying. This text covers some of the more important
limitations and clarifications of this evaluation. Note that:
 As with any evaluation, this evaluation only shows that the evaluated
configuration meets the security claims made, with a certain level of
assurance (EAL 2 augmented with ALC_FLR.3).
 This evaluation only covers the specific platforms and software version
identified in this document, and not any earlier or later versions released
or in process.
The following features are not included in the evaluated configuration:
 IPX. Network communication protocol.
 AppleTalk. Network communication protocol.
 Internet Fax. Allows users to scan documents at the control panel, send
them to destination email addresses, or receive and print emails with
attachments.
 Network Domain Security (NDS). Network authentication protocol.
 Server Message Block (SMB). Network authentication protocol.
 Network Accounting. Allows users to manage printer usage with detailed
cost analysis capabilities.
 Network Authorization. When configured, the printer references an
authorization server for authorization information, such as role, for the
authenticated user.
 Reprint Saved Jobs. The Reprint Saved Jobs feature allows users to save
print jobs on the printer so that you can print it at any time.
 Smart eSolutions. Suite of features that provide free services to enable
administration of metered billing and supplies replenishment plans for
printers on a network.
 Xerox Extensible Interface Platform (EIP). Allows independent software
vendors and partners to develop personalized and customized document
management solutions. These solutions can be integrated and accessed
directly from the printer control panel.
 McAfee Embedded Control. Allows monitoring of system files to detect
and prevent unauthorized modification or execution.
Please see http://www.xerox.com/information-security/product/enus.html for
more specific information about maintaining the security of this TOE.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
5. ARCHITECTURAL INFORMATION
5.1.Logical Scope and Boundary
The TOE logical scope and boundary consists of the security functions
provided/controlled by the TOE as follows:
 Image Overwrite. The TOE implements an image overwrite security
function to overwrite all temporary files created during processing of jobs.
 Information Flow Security. The TOE prevents unintentional
transmission of data between its interfaces and the network and/or PSTN
to which the TOE is connected.
 Authentication. The TOE can be configured to authenticate users against
an internal database via username and password.
 Network Identification. The TOE can be configured to authenticate users
against an external database via username and password or smartcard and
Personal Identification Number (PIN).
 Security Audit. The TOE generates audit logs that track events/actions
(e.g., copy/print/scan/fax job completion) to identified users.
 Network Security. The TOE supports the following secure
communication protocols: TLS for Web UI; SFTP and TLS for document
transfers to the remote file depository; IPsec for communication over IPv4
and IPv6; and Kerberos and TLS for remote authentication.
 Cryptographic Operations. The TOE utilizes digital signature generation
and verification (RSA), data encryption (TDES, AES), key establishment
(RSA) and cryptographic checksum generation and secure hash
computation (HMAC, SHA-1) in support of disk encryption, SFTP, TLS
and IPsec. The algorithms deployed meet the following standard: TDES –
FIPS 46-3 (CAVP Certificate No. 826 and CAVP Certificate No. 1174);
AES - FIPS 197 (CAVP Certificate No. 1131 and CAVP Certificate No.
1821); SHA-1, SHA-256 – FIPS 180-3 (CAVP Certificate No. 1599),
HMAC - FIPS 198 (CAVP Certificate No. 644 and CAVP Certificate No.
1076); RSA - FIPS186-3 (CAVP Certificate No. 914).
 User Data Protection – Disk Encryption. The TOE implements AES
data encryption to protect all areas of the hard drive where user jobs are
temporarily stored for processing. The algorithm deployed meets the
following standard: AES-FIPS-197 (CAVP Certificate No. 1131).
 User Data Protection – IP Filtering. The TOE provides the ability for
the system administrator to configure IPv4 filtering rules.
 Security Management. The security functions of the TOE are managed
by the system administrator from both the LUI and WebUI. User’s access
to the TOE functions, Job or Image Data stored inside the TOE is
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
restricted, in accordance with the applicable TOE Security Policies. The
TOE is capable of verifying the integrity of the TSF at the request of the
administrator.
The difference between the various models of the TOE is their supported paper
sizes and finishing options.
5.2.Physical Scope and Boundary
The Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835,
7845, 7855 & ColorQube 9301, 9302, 9303 is a multi-function device (MFD).
The physical boundary of the TOE consists of the MFD and optional fax
accessory, and accompanying user and administrator guidance listed in section 6.
In the evaluated configuration, the TOE is connected to the Public Switched
Telephone Network (PSTN) and the Local Area Network (LAN) as described in
the user guidance delivered with the TOE.
The following figures depict the TOE.
Figure 1: Xerox WorkCentre 5845/5855/5865/5875/5890
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
Figure 2: Xerox WorkCentre 7220/7225
Figure 3: Xerox WorkCentre 7830/7835/7845/7855
Figure 4: Xerox ColorQube 9301/9302/9303
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
The various software and firmware that comprise the TOE are listed in Table 2.
A system administrator can ensure that they have a TOE by printing a
configuration sheet and comparing the version numbers reported on the sheet to
the table below.
Table 2: Evaluated version
Model System Software
WorkCentre 5845 / 5855 / 5865 / 5875 / 5890 071.190.103.06400
WorkCentre 7220 / 7225 071.030.103.06400
WorkCentre
7830 / 7835 071.010.103.06400
7845 / 7855 071.040.103.06400
ColorQube 9301 / 9302 / 9303 071.180.203.06400
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
6. DOCUMENTATION
This section details the documentation that is (a) delivered to the customer, and (b)
was used as evidence for the evaluation of the Xerox WorkCentre 5845, 5855, 5865,
5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301, 9302, 9303.
Note that not all evidence is available to customers. The following table lists the
documentation available to the customer:
Table 3: Guidance documents
Title Version Date
Xerox WorkCentre
5845/5855/5865/5875/5890
System Administrator Guide
1.0 February 2013
Xerox WorkCentre 7220/7225
System Administrator Guide
1.0 April 2013
Xerox WorkCentre 7800 Series
System Administrator Guide
1.0 February 2013
Xerox ColorQube
9301/9302/9303 System
Administrator Guide
1.0 February 2013
Xerox WorkCentre
5845/5855/5865/5875/5890 User
Guide
1.0 January 2013
Xerox WorkCentre 7220/7225
User Guide
1.0 April 2013
Xerox WorkCentre 7800 Series
User Guide
1.0 February 2013
Xerox ColorQube
9301/9302/9303 ConnectKey
Controller User Guide
1.0 February 2013
Secure Installation and Operation
of Your Xerox WorkCentre 5845,
5855, 5865, 5875, 5890, 7220,
7225, 7830, 7835, 7845, 7855 &
ColorQube 9301, 9302, 9303
1.3 May 2013
The remaining evaluation evidence is described in the Evaluation Technical Report
developed by Computer Sciences Corporation.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
7. IT PRODUCT TESTING
This section describes the testing efforts of the developer and the evaluation team.
7.1.Developer testing
Test procedures were written by the developer and designed to be conducted
using manual interaction with the TOE interfaces. The developer tested all of the
interfaces to the TOE and in doing so tested all TSFs.
The developer tested the TOE consistent with the Common Criteria evaluated
configuration identified in the ST. The evaluation team analyzed the developer’s
testing to ensure adequate coverage for EAL 2. The evaluation team determined
that the developer’s actual test results matched the developer’s expected test
results.
The evaluators assessed that the test environment used by the developers was
appropriate and mirrored the test configuration during independent testing.
7.2.Evaluation team independent testing
The evaluation team conducted independent testing at the CCTL facility. The
TOE was delivered in accordance with the documented delivery procedures. The
evaluation team installed and configured the TOE according to vendor installation
instructions and the evaluated configuration as identified in the Security Target.
The evaluation team confirmed the technical accuracy of the setup and installation
guide during installation of the TOE. The evaluation team confirmed that the
TOE version delivered for testing was identical to the version identified in the ST.
The evaluation team used the developer’s test plan as a basis for creating the
Independent Test Plan. The evaluation team analyzed the developer’s test
procedures to determine their relevance and adequacy to test the security function
under test. The following items represent a subset of the factors considered in
selecting the functional tests to be conducted:
 Security functions that implement critical security features
 Security functions critical to the TOE’s security objectives
 Security functions that gave rise to suspicion regarding the behavior of the
security features during the documentation evidence evaluation
 Security functions not tested adequately in the vendor’s test plan and
procedures
The evaluation team repeated a sample of the developer’s test cases and designed
additional independent tests. The additional test coverage was determined based
on the analysis of the developer test coverage and the ST.
The evaluators examined the design evidence and selected an appropriate test
platform.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
Each TOE Security Function was exercised and the evaluation team verified that
each test passed.
7.3.Vulnerability analysis
The evaluation team performed a vulnerability analysis of the TOE evidence and
a search of publicly available information to identify potential vulnerabilities in
the TOE. Based on the results of this effort, the evaluation team conducted
penetration testing to determine if the identified potential vulnerabilities was
indeed exploitable.
The evaluation team concluded that the TOE does not contain exploitable
vulnerabilities in the intended environment and for the postulated attackers.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
8. EVALUATED CONFIGURATION
The following features are enabled in the evaluated configuration:
 IIO and ODIO (the Image Overwrite Security Package)
 HTTPS (TLS\SSL)
 User Authorization
The Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845,
7855 & ColorQube 9301, 9302, 9303 must be configured in accordance with the
guidance documents listed at section 6. In particular, Secure Installation and Operation of
Your Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845,
7855 & ColorQube 9301, 9302, 9303 v1.1 provides Common Criteria specific advice.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
9. RESULTS OF THE EVALUATION
The evaluation was carried out in accordance with the Common Criteria Evaluation
and Validation Scheme (CCEVS) processes and procedures. The TOE was evaluated
against the criteria contained in the Common Criteria for Information Technology
Security Evaluation, Version 3.1R3. The evaluation methodology used by the
evaluation team to conduct the evaluation is the Common Methodology for
Information Technology Security Evaluation, Version 3.1R3.
Computer Sciences Corporation (CSC) has determined that the product meets the
security criteria in the Security Target, which specifies an assurance level of EAL 2
augmented with ALC_FLR.3. A team of Validators, on behalf of the CCEVS
Validation Body, monitored the evaluation. The evaluation effort was finished on
May 6, 2013. A final Validation Oversight Review (VOR) was held on May 23, 2013
and final changes to the VR were completed on May 29, 2013.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
10. VALIDATOR COMMENTS/RECOMMENDATIONS
The validation team’s observations support the evaluation team’s conclusion that the
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845,
7855 & ColorQube 9301, 9302, 9303 meets the claims stated in the Security Target.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
11. ANNEXES
None
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
12. SECURITY TARGET
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845,
7855 & ColorQube 9301, 9302, 9303 Security Target, Version 1.0, Revision 1.3, 12
April 2013
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
13. GLOSSARY
 Common Criteria Testing Laboratory (CCTL): An IT security evaluation facility
accredited by the National Voluntary Laboratory Accreditation Program (NVLAP)
and approved by the CCEVS Validation Body to conduct Common Criteria-based
evaluations.
 Evaluation: The assessment of an IT product against the Common Criteria using the
Common Criteria Evaluation Methodology to determine whether or not the claims
made are justified; or the assessment of a protection profile against the Common
Criteria using the Common Evaluation Methodology to determine if the Profile is
complete, consistent, technically sound and hence suitable for use as a statement of
requirements for one or more TOEs that may be evaluated.
 Evaluation Evidence: Any tangible resource (information) required from the
sponsor or developer by the evaluator to perform one or more evaluation activities.
 Target of Evaluation (TOE): A group of IT products configured as an IT system, or
an IT product, and associated documentation that is the subject of a security
evaluation under the CC.
 Threat: Means through which the ability or intent of a threat agent to adversely
affect the primary functionality of the TOE, facility that contains the TOE, or
malicious operation directed towards the TOE. A potential violation of security.
 Validation: The process carried out by the CCEVS Validation Body leading to the
issue of a Common Criteria certificate.
 Validation Body: A governmental organization responsible for carrying out
validation and for overseeing the day-to-day operation of the NIAP Common Criteria
Evaluation and Validation Scheme.
 Vulnerabilities: A vulnerability is a hardware, firmware, or software flaw that
leaves an Automated Information System (AIS) open for potential exploitation. A
weakness in automated system security procedures, administrative controls, physical
layout, internal controls, and so forth, which could be exploited by a threat to gain
unauthorized access to information or disrupt critical processing.
Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 & ColorQube 9301,
9302, 9303 Validation Report, Version 1.0
14. BIBLIOGRAPHY
1.) Common Criteria for Information Technology Security Evaluation – Part 1:
Introduction and general model, dated July 2009, Version 3.1, Revision 3, CCMB-
2009-07-001.
2.) Common Criteria for Information Technology Security Evaluation – Part 2: Security
functional requirements, dated July 2009, Version 3.1, Revision 3, CCMB-2009-07-
002.
3.) Common Criteria for Information Technology Security Evaluation – Part 3: Security
assurance requirements, dated July 2009, Version 3.1, Revision 3, CCMB-2009-07-
003.
4.) Common Evaluation Methodology for Information Technology Security Evaluation,
dated July 2009, Version 3.1, Revision 3, CCMB-2009-07-004.
5.) Xerox WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845,
7855 & ColorQube 9301, 9302, 9303 Security Target, Version 1.0, Revision 1.3, 12
April 2013
6.) Computer Sciences Corporation (CSC) Evaluation Technical Report for Xerox
WorkCentre 5845, 5855, 5865, 5875, 5890, 7220, 7225, 7830, 7835, 7845, 7855 &
ColorQube 9301, 9302, 9303, Version 1.1, 6 May 2013.