Success: System: 12 TSF wipe of protected data Failure: Wipe Failure Screen System: 4502 configure application installation policy by [selection: Windows Logs/Security: 4657 restricting the sources of applications, specifying a set of allowed applications based on [assignment: application characteristics] (an application whitelist), denying installation of applications] Microsoft-Windows-CAPI2/Operational: import keys/secrets into the secure key storage 90 destroy imported keys/secrets and [[any other keys/secrets]] in the secure key storage System: 12 Applications and Services Logs -> Microsoft -> Windows -> import X.509v3 certificates into the Trust Anchor Database CertificateServicesClient-Lifecycle-User -> Operational: 1006 remove imported X.509v3 certificates and [[any other X.509v3 certificates]] in the Trust Anchor Database 1004 enroll the TOE in management 510 remove applications 472 update system software Windows Logs/Setup: 1, 2, 3 install applications 400 remove Enterprise applications 472 configure the Bluetooth trusted channel: Windows Logs/Security: 4657 disable/enable the Discoverable mode (for BR/EDR) change the Bluetooth device name [selection: d. disable/enable Advertising (for LE), i. no other Bluetooth configuration] enable/disable display notification in the locked state of: [ Windows Logs/Security: 4657
TSF wipe of protected data Success: System: 12 Failure: Wipe Failure Screen System: 4502 configure application installation policy by [selection: restricting the sources of applications, specifying a set of allowed applications based on [assignment: application characteristics] (an application whitelist), denying installation of applications] Windows Logs/Security: 4657 import keys/secrets into the secure key storage Microsoft-Windows-CAPI2/Operational: 90 destroy imported keys/secrets and [[any other keys/secrets]] in the secure key storage System: 12 import X.509v3 certificates into the Trust Anchor Database Applications and Services Logs -> Microsoft -> Windows -> CertificateServicesClient-Lifecycle-User -> Operational: 1006 remove imported X.509v3 certificates and [[any other X.509v3 certificates]] in the Trust Anchor Database 1004 enroll the TOE in management 510 remove applications 472 update system software Windows Logs/Setup: 1, 2, 3 install applications 400 remove Enterprise applications 472 configure the Bluetooth trusted channel: disable/enable the Discoverable mode (for BR/EDR) change the Bluetooth device name [selection: d. disable/enable Advertising (for LE), i. no other Bluetooth configuration] Windows Logs/Security: 4657 enable/disable display notification in the locked state of: [ Windows Logs/Security: 4657