Identity and Access Management Products from CA Technologies Earn Common Criteria Evaluation Certification

CA Federation Manager Deployed on CA SiteMinder® and CA Identity Manager Validated Under Internationally-Recognized Security Certification

News provided by

CA Technologies

Sep 22, 2010, 09:00 ET

ISLANDIA, N.Y., Sept. 22 /PRNewswire/ -- CA Technologies (Nasdaq: CA) today announced that CA Federation Manager r12 SP1 deployed on CA SiteMinder* and CA Identity Manager r12.5 have met the rigorous requirements of Common Criteria Evaluation Assurance Level 3+ from the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme.

"These product certifications complement our CA SiteMinder and CA Access Control certifications. Together they provide important technologies that enable more secure cloud computing adoption while still protecting an agency's existing on-premises systems," said Dave Hansen, general manager of the Security business at CA Technologies. "This helps IT organizations secure the dynamic IT supply chain made up of services found in house as well as outside the firewall."

Common Criteria is an internationally-recognized, independent security certification recognized by governments in more than 26 countries, including the United States. Certification is granted when a Common Criteria testing laboratory determines that a product meets a defined measure of security. The certification addresses product functionality, development environment, documentation and product testing measures.

CA Federation Manager provides standards-based identity federation capabilities that enable the users of one organization to easily and securely access the data and applications of other organizations such as partners, SaaS vendors or cloud service providers. This is done without the need for redundant user stores or user administration processes. CA Federation Manager allows an organization to act as an identity provider (home site of the user), a service provider (owner of the target application), or both, to securely connect distinct organizations that are part of the same ecosystem.

CA Identity Manager provides an integrated identity administration solution, serving as the foundation for user provisioning, self-service requests, identity governance, and other key processes, which help organizations meet compliance requirements and improve operational efficiencies for better productivity. CA Identity Manager helps organizations prevent non-compliant provisioning; eliminate guesswork when providing role-based access; and provide employees, contractors, and partners with access to the applications they need the day they start – and remove access when it's no longer warranted.

The CA Identity Manager r12.5 evaluation was performed on Windows Server 2003 SP2, Windows Server 2003 R2 SP2, Windows Server 2008 (32 bits) and Solaris 9 and Solaris 10 platforms. The CA Federation Manager r12 SP1 deployed on CA SiteMinder evaluation was performed on a Linux Red Hat Advanced Server 4.0, Microsoft Windows 2003 SP2, and Solaris 10 platforms.

Both evaluations were done in Booz Allen Hamilton's Common Criteria Testing Laboratory (CCTL). The lab is one of only nine U.S.-based CCTLs approved by the NIAP and meets the Common Criteria Evaluation and Validation Scheme. The Booz Allen CCTL conducts IT security evaluations for conformance to the Common Criteria for Information Technology Security Evaluation, International Standard ISO/IEC 18045:2005.

CA Access Control and CA SiteMinder also have been evaluated under the Common Criteria, and there are several CA Technologies security products currently in evaluation for the mainframe platform, including CA ACF2™ r14 and CA Top Secret® r14.

*Formerly named: CA SiteMinder Federation Security Services r12 SP1

About Common Criteria

The National Institute of Standards and Technology (NIST) and the National Security Agency (NSA) established the National Information Assurance Partnership (NIAP) to evaluate IT product conformance to the Common Criteria for Information Technology Security Evaluation, an international standard. The program, officially known as the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) is a partnership between the public and private sectors to help organizations select commercial off-the-shelf information technology (IT) products that meet their security requirements and to help manufacturers of those products gain acceptance in the global marketplace. Twenty-six countries now recognize the Common Criteria as third-party evaluation criteria for IT security procedures.

(Logo: http://photos.prnewswire.com/prnh/20100516/NY05617LOGO )

(Logo: http://www.newscom.com/cgi-bin/prnh/20100516/NY05617LOGO )

About CA Technologies

CA Technologies (Nasdaq: CA) is an IT management software and solutions company with expertise across all IT environments – from mainframe and distributed, to virtual and cloud. CA Technologies manages and secures IT environments and enables customers to deliver more flexible IT services. CA Technologies innovative products and services provide the insight and control essential for IT organizations to power business agility. The majority of the Global Fortune 500 relies on CA Technologies to manage evolving IT ecosystems. For additional information, visit CA Technologies at www.ca.com.

Follow CA Technologies

Legal Notices