ZoneCentral obtains EAL2+ certification
>> see EAL2+ Certificat
>> download the certified version
The ZoneCentral software by Prim’X gets EAL2+ certification as well as Standard Level qualification
ZoneCentral becomes the first French EAL2+ certificated workstation protection software, a certification obtained for the entirety of the product.
Prim’X Technologies, the French publisher of corporate encryption solutions, today announced that it has achieved EAL2+ certification for its leading product, ZoneCentral, a new generation solution for protecting workstations.
ZoneCentral enables the encryption of data on workstations, on laptops, servers, removable media (USB keys, external hard drives, CD-R, etc.) and network workspaces. Prim'X developed all the elements of this software in France; its “augmented EAL2 level” certificate applies to the whole of the product.
ZoneCentral has also achieved the DCSSI Qualification Standard, which covers the protection of sensitive data at the national, NATO and EU levels.
The “augmented” EAL2 level Common Criteria evaluation included an extremely thorough analysis of ZoneCentral's cryptographic mechanisms. The word “augmented” means that requirements in excess of the evaluated level were needed. For instance, in the case of ZoneCentral, the vulnerability study was carried out at the EAL4 level.
This certificate is recognised at both the national and the international level and represents for its customers a real assurance on the effectiveness and the trust in the product and its publisher.
Michel SOUQUE, Chairman of Prim’X Technologies, explains: « We took the decision right from the start to have the entire ZoneCentral product evaluated. This evaluation represents a very considerable human and financial investment but we have always believed that this was necessary to successfully fulfil the requirements of our customers in France and internationally regarding trust. In addition, the Qualification should help our commercial penetration of governmental bodies where the recommendation is to make use of certified products.”
Serge BINET, Managing Director of Prim’X Technologies, adds: « “In operational terms, this certification gives us a great deal and provides our customers with significant guarantees: protection of developments, internal and operational security measures, quality processes, alerts and escalation (support) procedures, strict configuration management, end-to-end authenticity from the Laboratory to the Security Officer, assessment of security functions, extended vulnerability analyses, comprehensive cryptographic analyses, with strong cryptographic hardening, successive bench testing of the cryptographic quality (the random generator in particular), reviews of known attacks, procedure for monitoring the impacts for updates, etc.”.
With this first Certificate, the result of major investment and long-term work, and that has enabled the implementation of the infrastructure and procedures, Prim’X has integrated the certification of its products as part of its publishing policy. Further certification procedures will be launched, and notably the level EAL3+ certification for the Zed! (encrypted containers) Software that is going to take place during 2009.
Let us add that it's the 3.1 version of ZoneCentral which is certified and that Prim'X is setting up an Insurance Continuity procedure to maintain the certification for all future 3.1 build releases.
The Security Target, the Certification Report and the Certificate are available from: http://www.ssi.gouv.fr/site_rubrique53_certificat_2008_46.html, or on ZoneCentral Documentation Page.
>> download the certified version of ZoneCentral |
