ZoneCentral obtains EAL2+ certification
May 2009 by Emmanuelle Lamandé
Prim’X Technologies, the French publisher of corporate encryption solutions, today announced that it has achieved EAL2+ certification for its leading product, ZoneCentral, a new generation solution for protecting workstations.
ZoneCentral enables the encryption of data on workstations, on laptops, servers, removable media (USB keys, external hard drives, CD-R, etc.) and network workspaces. Prim’X developed all the elements of this software in France; its “augmented EAL2 level” certificate applies to the whole of the product.
ZoneCentral has also achieved the DCSSI Qualification Standard, which covers the protection of sensitive data at the national, NATO and EU levels.
The “augmented” EAL2 level Common Criteria evaluation included an extremely thorough analysis of ZoneCentral’s cryptographic mechanisms. The word “augmented” means that requirements in excess of the evaluated level were needed. For instance, in the case of ZoneCentral, the vulnerability study was carried out at the EAL4 level.
With this first Certificate, the result of major investment and long-term work, and that has enabled the implementation of the infrastructure and procedures, Prim’X has integrated the certification of its products as part of its publishing policy. Further certification procedures will be launched and notably the level EAL3+ certification for the Zed! software (encrypted containers) that is going to take place during 2009.
It’s the 3.1 version of ZoneCentral which is certified and Prim’X is setting up an Insurance Continuity procedure to maintain the certification for all future 3.1 build releases.