Linux on System z - Security

Overview

Products

Certification

Get started

Security evaluations

• R/SM LPAR for the IBM System z9 Enterprise Class and the IBM System z9 Business Class were evaluated under the Common Criteria at Evaluated Assurance Level 5 in Germany, Level 4 world-wide. The BSI issued certificate ID BSI-DSZ-CC-0378-2006 on 04 September 2006.
• PR/SM LPAR for the IBM System z9 109 (now called z9 EC) was evaluated under the Common Criteria at evaluated assurance level 5 in Germany, level 4 world-wide. The certificate ( for "certificate" link to: http://www.bsi.bund.de/zertifiz/zert/reporte/0324a.pdf ) was published on 24 March 2006.
• PR/SM LPAR for IBM eServer zSeries 890 and 990, evaluated at Common Criteria EAL5 (for "EAL5" link to: http://www.bsi.bund.de/zertifiz/zert/reporte/0279a.pdf ) in Germany, EAL4 world-wide, on 13 May 2005.
• IBM eServer™ zSeries 990 Processor Resource/System Manager (PR/SM) evaluated at Common Criteria EAL5 in Germany (PDF, 276KB), EAL4 world-wide, on 13 May 2004
• IBM eServer zSeries 800 and 900 GA3 PR/SM evaluated at Common Criteria EAL5 and EAL4 on 06 June 2003
• IBM eServer zSeries 900 PR/SM evaluated at Common Criteria EAL5 on 27 February 2003

• IBM intends to evaluate z/VM V5.3 with the RACF Security Server optional feature for conformance to the Controlled Access Protection Profile (CAPP) and Labeled Security Protection Profile (LSPP) of the Common Criteria standard for IT security, ISO/IEC 15408, at Evaluation Assurance Level 4 (EAL4).
• This new SOD represents a modification to IBM's previously expressed Statement of Direction of July 27, 2005, which stated IBM's intent "to evaluate z/VM V5.2 with the RACF for z/VM optional feature for conformance to the Controlled Access Protection Profile (CAPP) and Labeled Security Protection Profile (LSPP) of the Common Criteria standard for IT security, ISO/IEC 15408, at Evaluation Assurance Level 4 (EAL4)." Based on additional assessment of requirements, IBM no longer intends to evaluate z/VM V5.2.

• IBM sponsored the Common Criteria evaluation of SuSE Linux Enterprise Server Version 8, Service Pack 3, RC4, with certifcation-sles-eal3 package. The evaluation was performed using the CAPP (Controlled Access Protection Profile) and achieved an EAL (Evaluated Assurance Level) 3, augmented by ALC_FLR.2 (flaw reporting procedures). The certification report was published on 14 January 2004.
• IBM sponsored the Common Criteria evaluation of SuSE Linux Enterprise Server Version 9, with certifcation-sles-ibm-eal4 package. The evaluation was performed using the CAPP, and achieved an EAL4, augmented by ALC_FLR.3. The certification report was published on 09 March 2005.
• Red Hat Enterprise Linux 3, Update 2 on IBM eServers was evaluated under the Common Criteria, using the Controlled Access Protection Profile (CAPP), achieving EAL3, augmented. The evaluation results, announced 03 August 2004, are for Red Hat Enterprise Linux WS on xSeries, and Red Hat Enterprise Linux AS on xSeries, iSeries, pSeries, zSeries as well as Opteron-based systems.
• IBM is sponsoring the in-progress evaluation of Red Hat Enterprise Linux 4, Update 2, under the Common Criteria with a conformance claim of EAL4 augmented with ALC_FLR.3.