On May 4, 2010, at 3:16 PM, Bob Colbert wrote: Is there a website/letter that shows that Apple Hardware (specifically a MacMini) contains no non-volatile memory after a power down? Internal hard drives have been removed/stored separately. I know Dell can provide a "letter" guaranteeing this, but Im not sure if Apple does this as well.
Also, does any know when the Apple Security Configuration Guide for Snow Leopard is due out? How does the Apple SCG compare/contrast to the Common Criteria Guide?
Thanks.
----- Bob Colbert DE Technologies email@hidden
Bob,
Federal Government representatives can send an email message to " email@hidden" and request a Volatility Statement for Apple Products.
What is needed in the request is at least ONE of the following: • Product Serial Number (ie. W891302D7XZ) • Product Part Number (ie. MB449LL/A) • Product Model Number (ie. A1279)
Apple / NSA Security Configuration Guide for Snow Leopard is expected to be publicly available within the next week or two. Its prior release has been impacted by a few non-technical unexpected delays which have been addressed.
Common Criteria is a Certification of products against various Protection Profiles at an Evaluated Assurance Level. As of December 16, 2009, Mac OS X 10.6 and Mac OS X Server 10.6 were re-certified against CAPP at EAL3 augmented by ALC_FLR.3, CC part 3 conformant. Previously, Mac OS X 10.3.6 and Mac OS X Server 10.3.6 were also certified against CAPP at EAL3 in January, 2005.
The Common Criteria Admin Guides is generated and used for the proper understanding and to operate the TOE in its evaluated configuration. The Security Configuration Guides are a comprehensive overview and baseline configuration guidance for the reference product. These security configuration guides are maintained and vetted through a collaborative effort between Apple Inc. and the National Security Agency. These are two distinct guides with differing intent, however, the CC Admin Guide is referenced by the SCG.
- Shawn _____________________________________________________ Shawn Geddis - Security Consulting Engineer - Apple Enterprise
|