Validity Period of Common Criteria Certificates Extended to 5 Years
The validity date of the Common Criteria Certificate has been increased to 5 years by TSE, to be valid for Common Criteria applications to be made as of 1 October 2020. This change does not affect products that are currently undergoing a Common Criteria Assessment. For products whose Common Criteria Evaluation continues, the certificate validity date is 3 years.
In the new process, there will be two separate certificate (document) validity dates:
- Administrative Validity Date: It is the final validity period of the document, which is determined in relation to administrative issues such as the publication of the certified product. The administrative validity period of the issued Common Criteria Documents is 5 years (60 months) for the documented version of the TOE and the specified TOE scope.
- Technical Validity Date: It is the period determined for the continuation of the technical resistance of the TOE against new attacks and new attack methods. Technical validity periods are 20 months.
Administrative validity 60 when the certificate is first issued; The validity periods are determined so that the technical validity is 20 months.
There will be Interim Evaluations in the new process. Two interim evaluations will be made in the process after the initial certification. The first midterm assessment will take place between 17 and 23 months after the certificate is issued. To the product by the laboratory where TOE is evaluated;
- If there is no change in the product, Vulnerability Analysis is performed,
- If there is a change in the product or if there is a new weakness related to the product and technology, a Vulnerability Analysis is performed, the laboratory sends the Penetration Test Report and an Evaluation Report to the TSE in which the other affected families are re-evaluated.
The second interim assessment will be between 37 and 43 months after the certificate is issued. The process will be carried out in the same way as the first interim evaluation.
You can access detailed information about the processes at the following address: