Installation guide

Motorola WS5100 Wireless Switch and RFS7000 RF Switch Security Target
Page 30 of 85
FPT_TST_EXP.1.2 The TSF shall provide the capability to use a TSF-provided cryptographic
function to verify the integrity of all TSF data except the following: audit data, [temporary files, page
files, configuration files, core dumps, data stored in volatile memory].
FPT_TST_EXP.1.3 The TSF shall provide the capability to use a TSF-provided cryptographic
function to verify the integrity of stored TSF executable code.
5.2.1.34 FPT_TST_EXP.2 TSF testing of cryptographic modules
FPT_TST_EXP.2.1 The TSF shall run the suite of self-tests provided by the FIPS 140-1/2
cryptomodule during initial start-up (power on) and upon request, to demonstrate the correct
operation of the cryptographic components of the TSF.
FPT_TST_EXP.2.2 The TSF shall be able to run the suite of self-tests provided by the FIPS 140-
1/2 cryptomodule immediately after the generation of a key.
Application Note: In 2.2 it is required that there be specific functionality IF the TOE generates cryptographic
keys. This requirement does not require the TOE to generate keys.
5.2.1.35 FTA_SSL.3 TSF-initiated termination
FTA_SSL.3.1 The TSF shall terminate an a local interactive or wireless session after a an
[administrator configurable time interval of user inactivity].
Application Note: This requirement applies to both local administrative sessions and wireless users that pass
data through the TOE.
5.2.1.36 FTA_TAB.1 Default TOE access banners
FTA_TAB.1.1 Before establishing a user session, the TSF shall display an advisory warning
message regarding unauthorized use of the TOE.
5.2.1.37 FTP_ITC_EXP.1(1) Inter-TSF trusted channel
FTP_ITC_EXP.1.1(1) The TOE shall provide an IPSec/IKE encrypted communication channel
between itself and entities in the TOE IT Environment that is logically distinct from other
communication channels and provides assured identification of its end points and protection of the
channel data from modification or disclosure.
FTP_ITC_EXP.1.2(1) The TSF shall permit the TSF, or the IT Environment entities to initiate
communication via the trusted channel.
FTP_ITC_EXP.1.3(1) The TSF shall initiate communication via the trusted channel for [all
authentication functions, remote logging, time, none].