- Product Name :
- Microsoft SQL Server 2012 Database Engine Enterprise Edition x64 (English)
- Version of TOE :
- 11.0.2100.60
- Product Type :
- Database Management System (DBMS)
- Certification No. :
- C0371
- Date :
- 2012-09-06
- Conformance Claim :
- EAL2
- PP Identifier :
- None
- Vendor :
- Microsoft Corporation
-
- POC :
- Roger French
- Division :
- Microsoft Corporation
- Phone :
- +1-425-706-8550
- E-mail :
- Evaluation Facility :
- TÜV Informationstechnik GmbH, Evaluation Body for IT-Security
- CC
Certificate Image :
(406 KB)(2012-09-27)
PRODUCT DESCRIPTION
Description of TOE
The TOE is the database engine of SQL Server 2012. SQL Server is a Database Management System (DBMS). The TOE has been developed as the core module of the DBMS to store and manage data in a secure way.
TOE security functions
This TOE provides the following security functionality:
| - | The Access Control function of the TOE controls the access of users to user and metadata stored in the TOE. |
| - | The Security Audit function of the TOE produces log files about all security relevant events. |
| - | The Security Management function allows authorized administrators to manage the behavior of the security functionality of the TOE. |
| - | The Identification and Authentication function of the TOE is able to identify and authenticate users. |
Security functional requirements
This TOE implements the following security functional requirements.
| Security audit | Non-repudiation of origin/receipt | Cryptographic functionality | Access control |
| Data authentication | Export data protection | Information flow control | Import data protection |
| Internal transfer data protection | Residual information protection | Rollback | Stored data integrity |
| Transfer data confidentiality | Transfer data integrity | Identification and authentication | Security management |
| Privacy Control | Security functionality protection | Resource utilisation management | TOE access control |
| Trusted path/channels |