Common Criteria Certification

• 1 Common Criteria Certification
  • 1.1 Common Criteria Overview
    • 1.1.1 Features Unavailable in FIPS and Common Criteria Mode
    • 1.1.2 Features Available in Common Criteria Mode
    • 1.1.3 Supported Algorithms for SSH Client
    • 1.1.4 Supported Cipher Suites
    • 1.1.5 RADIUS Protocol in CC Mode
    • 1.1.6 SCP for Common Criteria
  • 1.2 Enabling Common Criteria Mode
    • 1.2.1 Entering Common Criteria Administrative Mode
    • 1.2.2 SSH Rekey Exchange
    • 1.2.3 CLI Banner Configuration
    • 1.2.4 Entering Common Criteria Operational Mode
    • 1.2.5 Displaying Common Criteria Information
  • 1.3 Encrypted Syslog Servers in Common Criteria Mode
  • 1.4 AAA Servers in Common Criteria Mode
    • 1.4.1 Modifying the Common Criteria Policies to Use Non-encrypted AAA Servers
  • 1.5 Downgrading from Common Criteria Mode to Non-FIPS Mode
  • 1.6 Commercial Solutions for Classified program
  • 1.7 Configuring NTP
    • 1.7.1 Enabling NTP
    • 1.7.2 Disabling NTP
    • 1.7.3 Enabling NTP Authentication
    • 1.7.4 Defining an Authentication Key
    • 1.7.5 Configuring the NTP Client
    • 1.7.6 Displaying NTP Status
    • 1.7.7 Displaying NTP Association Information
    • 1.7.8 Displaying NTP Association Details
    • 1.7.9 NTP Client Mode Configuration Example
    • 1.7.10 NTP Strict Authentication Configuration Example
  • 1.8 Configuring PKI
    • 1.8.1 PKI Manual Import
    • 1.8.2 Revocation Check for Peer Certificates
  • 1.9 Network Device Collaborative Protection Profile
    • 1.9.1 Support for Logging PKI Transaction Details
    • 1.9.2 Management Commands
  • 1.10 MACsec Configuration
    • 1.10.1 MACsec Overview
    • 1.10.2 Configuring MACsec
    • 1.10.3 Enabling MACsec and Configuring Group Parameters
      • 1.10.3.1 Configuring MACsec Key-Server Priority
      • 1.10.3.2 Configuring MACsec Integrity and Encryption
      • 1.10.3.3 Configuring MACsec Frame Validation
      • 1.10.3.4 Configuring Replay Protection
      • 1.10.3.5 Configuring Data-Delay Protection
    • 1.10.4 MKA Keychain Overview and Considerations
      • 1.10.4.1 Creating and Configuring an MKA Keychain
    • 1.10.5 Enabling and Configuring Group Interfaces for MACsec
      • 1.10.5.1 Configuring the Pre-shared Key
    • 1.10.6 Sample MACsec Configuration
    • 1.10.7 Displaying MACsec Information
      • 1.10.7.1 Displaying MACsec Configuration Details
      • 1.10.7.2 Displaying Information on Current MACsec Sessions
      • 1.10.7.3 Displaying MKA Protocol Statistics for an Interface
      • 1.10.7.4 Displaying MACsec Secure Channel Activity for an Interface