WIXLIB

Certification ReportEMC VNXe OE v3.1.1 with Unisphere andVNXe3200 HardwareIssued by:Communications Security EstablishmentCertification BodyCanadian Common Criteria Evaluation and Certification Scheme Government of Canada, Communications Security Establishment, 2015Document number:Version:Date:Pagination:383-4-330-CR1.015 July 2015i to iii, 1 to 10

CCS Certification ReportEMC CorporationVNXe3200 DISCLAIMERThe Information Technology (IT) product identified in this certification report, and itsassociated certificate, has been evaluated at an approved evaluation facility – establishedunder the Canadian Common Criteria Evaluation and Certification Scheme (CCS) – using theCommon Methodology for Information Technology Security Evaluation, Version 3.1 Revision4, for conformance to the Common Criteria for Information Technology Security Evaluation,Version 3.1 Revision 4. This certification report, and its associated certificate, applies only tothe identified version and release of the product in its evaluated configuration. The evaluationhas been conducted in accordance with the provisions of the CCS, and the conclusions of theevaluation facility in the evaluation report are consistent with the evidence adduced. Thisreport, and its associated certificate, are not an endorsement of the IT product by theCommunications Security Establishment, or any other organization that recognizes or giveseffect to this report, and its associated certificate, and no warranty for the IT product by theCommunications Security Establishment, or any other organization that recognizes or giveseffect to this report, and its associated certificate, is either expressed or implied.Version 1.015 July 2015- Page i of iii -

CCS Certification ReportEMC CorporationVNXe3200 FOREWORDThe Canadian Common Criteria Evaluation and Certification Scheme (CCS) provides athird-party evaluation service for determining the trustworthiness of Information Technology(IT) security products. Evaluations are performed by a commercial Common CriteriaEvaluation Facility (CCEF) under the oversight of the CCS Certification Body, which ismanaged by the Communications Security Establishment.A CCEF is a commercial facility that has been approved by the CCS Certification Body toperform Common Criteria evaluations; a significant requirement for such approval isaccreditation to the requirements of ISO/IEC 17025:2005, the General Requirements for theCompetence of Testing and Calibration Laboratories. Accreditation is performed under theProgram for the Accreditation of Laboratories - Canada (PALCAN), administered by theStandards Council of Canada.The CCEF that carried out this evaluation is EWA-Canada.By awarding a Common Criteria certificate, the CCS Certification Body asserts that theproduct complies with the security requirements specified in the associated security target. Asecurity target is a requirements specification document that defines the scope of theevaluation activities. The consumer of certified IT products should review the security target,in addition to this certification report, in order to gain an understanding of any assumptionsmade during the evaluation, the IT product's intended environment, the evaluated securityfunctionality, and the testing and analysis conducted by the CCEF.This certification report is associated with the certificate of product evaluation dated 15 July2015, and the security target identified in Section 4 of this report.The certification report, certificate of product evaluation and security target are posted on theCCS Certified Products list (CPL) and the Common Criteria portal (the official website of theCommon Criteria Project).This certification report makes reference to the following trademarks: VNXe and VNXe3200 are trademarks of EMC Corporation.Reproduction of this report is authorized provided the report is reproduced in its entirety.Version 1.015 July 2015- Page ii of iii -

CCS Certification ReportEMC CorporationVNXe3200 TABLE OF CONTENTSDisclaimer . iForeword . iiExecutive Summary . 11Identification of Target of Evaluation. 22TOE Description . 23Security Policy . 34Security Target . 35Common Criteria Conformance . 36Assumptions and Clarification of Scope . 46.16.2SECURE USAGE ASSUMPTIONS. 4ENVIRONMENTAL ASSUMPTIONS . 47Evaluated Configuration . 58Documentation . 59Evaluation Analysis Activities . 610 ITS Product Testing . 710.110.210.310.410.5ASSESSMENT OF DEVELOPER TESTS . 7INDEPENDENT FUNCTIONAL TESTING . 7INDEPENDENT PENETRATION TESTING . 7CONDUCT OF TESTING . 8TESTING RESULTS . 811 Results of the Evaluation . 812 Acronyms, Abbreviations and Initializations . 913 References . 10Version 1.015 July 2015- Page iii of iii -

CCS Certification ReportEMC CorporationVNXe3200 Executive SummaryEMC VNXe OE v3.1.1 with Unisphere and VNXe3200 Hardware (hereafter referred toas VNXe3200 ), from EMC Corporation, is the Target of Evaluation. The results of thisevaluation demonstrate that VNXe3200 meets the requirements of Evaluation AssuranceLevel (EAL) 2 augmented for the evaluated security functionality.VNXe3200 allows an organization to manage its storage needs separately from itsapplication and file servers. This allows for control over storage allocation, fault tolerance,and backups versus storage that is directly attached to individual application or file servers.The VNXe Operating Environment v3.1.1 provides Redundant Array of Independent Disks(RAID) and storage capabilities and provides administrators the ability to manage andconfigure the TOE via the Unified Element Manager Command Line Interface (UEMCLI)and the Unisphere Graphical User Interface (GUI). The VNXe3200 hardware platformincludes the back-end disk arrays. Together, these components provide Block and File accessto internal storage for external entities.EWA-Canada is the CCEF that conducted the evaluation. This evaluation was completed on15 July 2015 and was carried out in accordance with the rules of the Canadian CommonCriteria Evaluation and Certification Scheme (CCS).The scope of the evaluation is defined by the security target, which identifies assumptionsmade during the evaluation, the intended environment for VNXe3200 , and the securityfunctional/assurance requirements. Consumers are advised to verify that their operatingenvironment is consistent with that specified in the security target, and to give dueconsideration to the comments, observations and recommendations in this certificationreport.Communications Security Establishment, as the CCS Certification Body, declares that theVNXe3200 evaluation meets all the conditions of the Arrangement on the Recognition ofCommon Criteria Certificates and that the product will be listed on the CCS CertifiedProducts list (CPL) and the Common Criteria portal (the official website of the CommonCriteria Project).Version 1.015 July 2015- Page 1 of 10 -

CCS Certification Report1EMC CorporationVNXe3200 Identification of Target of EvaluationThe Target of Evaluation (TOE) for this EAL 2 evaluation is EMC VNXe OE v3.1.1with Unisphere and VNXe3200 Hardware (hereafter referred to as VNXe3200 ), fromEMC Corporation.2TOE DescriptionVNXe3200 allows an organization to manage its storage needs separately from itsapplication and file servers. This allows for control over storage allocation, fault tolerance,and backups versus storage that is directly attached to individual application or file servers.The VNXe Operating Environment v3.1.1 provides Redundant Array of Independent Disks(RAID) and storage capabilities and provides administrators the ability to manage andconfigure the TOE via the Unified Element Manager Command Line Interface (UEMCLI)and the Unisphere Graphical User Interface (GUI). The VNXe3200 hardware platformincludes the back-end disk arrays. Together, these components provide Block and File accessto internal storage for external entities.A diagram of the VNXe3200 architecture is as follows:Version 1.015 July 2015- Page 2 of 10 -

CCS Certification Report3EMC CorporationVNXe3200 Security PolicyVNXe3200 implements a role-based access control policy to control administrative accessto the system. In addition, VNXe3200 implements policies pertaining to the followingsecurity functional classes: 4Security AuditUser Data ProtectionIdentification and AuthenticationSecurity ManagementSecurity TargetThe ST associated with this Certification Report is identified below:EMC VNXe OE v3.1.1 with Unisphere and VNXe3200 Hardware Security Target,Version 1.2, July 8, 20155Common Criteria ConformanceThe evaluation was conducted using the Common Methodology for Information TechnologySecurity Evaluation, Version 3.1 Revision 4, for conformance to the Common Criteria forInformation Technology Security Evaluation, Version 3.1 Revision 4.VNXe3200 is:a. EAL 2 augmented, containing all security assurance requirements listed, as well as thefollowing: ALC FLR.2 - Flaw Reporting Proceduresb. Common Criteria Part 2 conformant; with security functional requirements based onlyupon functional components in Part 2;c. Common Criteria Part 3 conformant, with security assurance requirements based onlyupon assurance components in Part 3.Version 1.015 July 2015- Page 3 of 10 -

CCS Certification Report6EMC CorporationVNXe3200 Assumptions and Clarification of ScopeConsumers of VNXe3200 should consider assumptions about usage and environmentalsettings as requirements for the product’s installation and its operating environment. Thiswill ensure the proper and secure operation of the TOE.6.1Secure Usage AssumptionsThe following Secure Usage Assumptions are listed in the ST: There are one or more competent individuals assigned to manage the TOE and thesecurity of the information it contains. Administrators are non-hostile, appropriately trained, and follow all administratorguidance.6.2Environmental AssumptionsThe following Environmental Assumptions are listed in the ST: Physical security will be provided for the TOE and its environment. The IT environment provides the TOE with the necessary reliable timestamps.Version 1.015 July 2015- Page 4 of 10 -

CCS Certification Report7EMC CorporationVNXe3200 Evaluated ConfigurationThe evaluated configuration for VNXe3200 comprises EMC VNXe OperatingEnvironment v3.1.1 software (includes EMC VNXe Unisphere) and EMC VNXe UnisphereUEMCLI v3.0 running on the EMC VNXe3200 hardware platform.The TOE requires the following components in the operational environment: Management workstation used to access the Unisphere GUI via a web browser or theUEMCLILDAPv3-compatible ServerNTP ServerNIS ServerApplication Servers accessing Block storageClient Systems accessing File storageThe publication entitled EMC VNXe OE v3.1.1 with Unisphere and VNXe3200 Hardware Guidance Documentation Supplement, Version 0.3, June 5, 2015 describes theprocedures necessary to install and operateVNXe3200 in its evaluated configuration.8DocumentationThe EMC Corporation documents provided to the consumer are as follows:a. EMC Unisphere for VNXe Online Help, January 2015;b. EMC VNXe Unisphere CLI User Guide, January 2015;c. EMC VNXe Security Configuration Guide, May 2014;d. EMC VNXe Series Quick Start, Revision 01;e. EMC VNXe Series Using a VNXe3200 System with Fibre Channel or iSCSI LUNs, June2014;f. EMC VNXe Series Using a VNXe3200 System with NFS File Systems, November 2014;g. EMC VNXe Series Using a VNXe3200 System with CIFS File Systems, November2014;h. VNXe Series VNXe3200 Hardware Information Guide, January 2015;i. EMC VNXe3200 Installation Guide, July 2014; andj. EMC VNXe OE v3.1.1 with Unisphere and VNXe3200 Hardware GuidanceDocumentation Supplement, Version 0.3, June 5, 2015.Version 1.015 July 2015- Page 5 of 10 -