NDcPP, FCS_RBG_EXT.1 is required to be met by Change to Dependent” 1 No action taken. A “Feature Page 29, all components. If hardware entropy source software only TOE Table 1 is defined, such as a chip, how does a component e.g. management component that is software management component package (JRE file) that can be loaded on is not support by version any management workstation meet this 2 of the cPP. Irrespective, requirement? FCS_RBG_EXT.1 may be iterated if the product has multiple entropy sources. NDcPP, FIA_UIA_EXT.1 description reads as Change to read as 3 Typo corrected. “User Page 29, Identificiation and Authentication” Identification and Authentication” “User Table 1 NDcPP, Reads as at least one TOE Change to read as at one 2 No action as “…by “…by Page 44, component or whether they are dependent TOE component or whether they suggested change does upon the feature being implemented by the are dependent upon the feature not represent the intention Section 6, TOE component.” being implemented by one of the original language. added component or the TOE as a whole.” second paragraph NDcPP, The definition for is simply Recommend adding an example of 1 Example added to section ‘Iterations’ Page 44, defined as string starting with the format. 6.1. “…a “/”. “ Section 6.1, The format is not well defined and no Iteration example is provided, so is the format as follows: FCS_COP.1 /FCS_COP.1 efgh
NDcPP, Page 29, Table 1 FCS_RBG_EXT.1 is required to be met by all components. If hardware entropy source is defined, such as a chip, how does a management component that is software package (JRE file) that can be loaded on any management workstation meet this requirement? Change to “Feature Dependent” 1 No action taken. A software only TOE component e.g. management component is not support by version 2 of the cPP. Irrespective, FCS_RBG_EXT.1 may be iterated if the product has multiple entropy sources. NDcPP, Page 29, Table 1 FIA_UIA_EXT.1 description reads as “User Identificiation and Authentication” Change to read as “User Identification and Authentication” 3 Typo corrected. NDcPP, Page 44, Section 6, added second paragraph Reads as “…by at least one TOE component or whether they are dependent upon the feature being implemented by the TOE component.” Change to read as “…by at one TOE component or whether they are dependent upon the feature being implemented by one component or the TOE as a whole.” 2 No action as suggested change does not represent the intention of the original language. NDcPP, Page 44, Section 6.1, Iteration The definition for ‘Iterations’ is simply defined as “…a string starting with “/”. “ The format is not well defined and no example is provided, so is the format as follows: FCS_COP.1 /FCS_COP.1 efgh Recommend adding an example of the format. 1 Example added to section 6.1.
ConsolidatediTCcomments-NDcPPv2-20160721_v2.9.docx