Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
created during processing are overwritten at the completion of the job
using the 5200.28-M algorithm. The stored jobs are not overwritten until
the jobs are deleted by the user, or when the System Administrator
executes a full on-demand image overwrite. A standard ODIO overwrites
all files written to temporary storage areas of the HDD and zeroizes the
temporary storage areas of the fax card flash memory. A full ODIO
overwrites those files as well as the Fax mailbox/dial directory, Scan to
mailbox data, and all files that have been stored at the request of a user
via Copy/Print, Store and Reprint jobs.
Copy jobs are not written to the hard drive and need not to be overwritten.
Copy/Print, Store and Reprint jobs are written to the hard drive so that
they may be reprinted at a later time; therefore, they will be overwritten
when a full on-demand image overwrite is performed. Embedded FAX
jobs are written to flash memory and are overwritten at the completion of
each job or on demand of the MFD system administrator. The embedded
fax card flash memory overwrite is not compliant with DoD 5200.28-M.
1.3.2.2. Authentication (TSF_AUT)
The TOE requires a system administrator to authenticate before granting
access to system administration functions. The system administrator has
to enter a password at either the Web User Interface or the Local User
Interface. The password will be obscured 2 as it is being entered.
Identification of the system administrator at the Local User Interface is
explicit -- the administrator will identify themselves by entering the
username “admin” in the authentication window. Identification of the
system administrator at the Web user Interface is explicit -- the
administrator will identify themselves by entering the username “admin” in
the authentication dialog window.
1.3.2.3. Network Identification (TSF_NET_ID)
The TOE can prevent unauthorized use of the installed network options
(network scanning, scan-to-email, and LanFax); the network options
available are determined (selectable) by the system administrator. To
access a network service, the user is required to provide a user name and
password, which is then validated by the designated authentication server
(a trusted remote IT entity). The user is not required to login to the
network; the account is authenticated by the server as a valid user. The
remote authentication services supported by the TOE are: LDAP v4,
Kerberos v5 (Solaris), Kerberos v5 (Windows 2000/2003), NDS (Novell
2 The LUI obscures input with the asterisk character. The specific character used to obscure input at the WebUI is browser
dependent
14
Copyright 2009 Xerox Corporation, All rights reserved