Installation guide

Motorola WS5100 Wireless Switch and RFS7000 RF Switch Security Target
Page 61 of 85
8.3 Rationale for TOE Security Requirements
Table 8-2 Rationale for TOE Security Requirements
Objective Requirements
Addressing the
Objective
Rationale
O.ADMIN_GUIDANCE
The TOE will provide
administrators with the
necessary information for
secure management.
ADO_DEL.1
ADO_IGS.1
AGD_ADM.1
AGD_USR.1
AVA_MSU.1
ADO_DEL.1 ensures that the administrator
has the ability to begin their TOE installation
with a clean (e.g., malicious code has not
been inserted once it has left the developer’s
control) version of the TOE, which is
necessary for secure management of the TOE
The ADO_IGS.1 requirement ensures the
administrator has the information necessary to
install the TOE in the evaluated configuration.
Often times a vendor’s product contains
software that is not part of the TOE and has
not been evaluated. The Installation,
Generation and Startup (IGS) documentation
ensures that once the administrator has
followed the installation and configuration
guidance the result is a TOE in a secure
configuration.
The AGD_ADM.1 requirement mandates the
developer provide the administrator with
guidance on how to operate the TOE in a
secure manner. This includes describing the
interfaces the administrator uses in managing
the TOE and any security parameters that are
configurable by the administrator. The
documentation also provides a description of
how to set up and use the auditing features of
the TOE.
The AGD_USR.1 is intended for non-
administrative users. If the TOE provides
facilities/interfaces for this type of user, this
guidance will describe how to use those
interfaces securely. This could include
guidance on the setup of wireless clients for
use with the TOE. If it is the case that the