Home Dashboard Directory Help
Search

Common Criteria Compliance & SQL Server 2012 by AussieJohn


Status: 

Resolved
 as Won't Fix Help for as Won't Fix


3
0
Sign in
to vote
Type: Suggestion
ID: 777098
Opened: 1/21/2013 6:37:31 PM
Access Restriction: Public
0
Workaround(s)
view

Description

SQL Server 2012 Books Online in topic “common criteria compliance enabled Server Configuration Option” says “In addition to enabling the common criteria compliance enabled option, you also must download and run a script that finishes configuring SQL Server to comply with Common Criteria Evaluation Assurance Level 4+ (EAL4+). You can download this script from the Microsoft SQL Server Common Criteria Web site.”

But there is no script there (http://www.microsoft.com/en-us/sqlserver/common-criteria.aspx ) for SQL 2012 (there is for earlier SQL versions).

This is confusing. Do we need to run a script after setting the sp_configure option, or is this now unnecessary?

For SQL Server 2008 R2 there are two scripts (under “Start-Up Process”)
•    Server Trace (EAL4_trace.sql)
•    CC Version Processes (Install_cc_triggers.sql)

Proposed Solution is:
Either add the scripts to the SQL 2012 section in the URL, or change the SQL Server 2012 Books Online to remove reference to the script(s).
Details
Sign in to post a comment.
Posted by Microsoft on 8/19/2013 at 2:54 PM
The people who run the SQL Server Common Criteria Certifications http://www.microsoft.com/en-us/sqlserver/common-criteria.aspx#tab8 site, frequently make changes that are not aligned with the documentation changes, because the common criteria testing and approval process always lags behind the product availability cycle. So, Books Online tries to refer people to the web site, and let the web site tell people whatever they think is important. I notice that if you download the SQL Server 2012 SP1 CC Guidance Addendum it talks about the Install_cc_triggers.sql script. So I think that leaving Books Online pointing to the web site is the correct thing to do in Books Online. That does mean you have to become familiar with the web site, but it's best to go there so you have the latest and most accurate information.
Posted by Microsoft on 1/23/2013 at 11:15 AM
Thank you for submitting this. I'll take a look.
Sign in to post a workaround.