Common Criteria Compliance & SQL Server 2012 - by AussieJohn

Status : 

  Won't Fix<br /><br />
		Due to several factors the product team decided to focus its efforts on other items.<br /><br />
		A more detailed explanation for the resolution of this particular item may have been provided in the comments section.

Sign in
to vote
ID 777098 Comments
Status Closed Workarounds
Type Suggestion Repros 0
Opened 1/21/2013 6:37:31 PM
Access Restriction Public


SQL Server 2012 Books Online in topic “common criteria compliance enabled Server Configuration Option” says “In addition to enabling the common criteria compliance enabled option, you also must download and run a script that finishes configuring SQL Server to comply with Common Criteria Evaluation Assurance Level 4+ (EAL4+). You can download this script from the Microsoft SQL Server Common Criteria Web site.”

But there is no script there ( ) for SQL 2012 (there is for earlier SQL versions).

This is confusing.  Do we need to run a script after setting the sp_configure option, or is this now unnecessary?

For SQL Server 2008 R2 there are two scripts (under “Start-Up Process”)
•	Server Trace (EAL4_trace.sql)
•	CC Version Processes (Install_cc_triggers.sql)

Proposed Solution is:
Either add the scripts to the SQL 2012 section in the URL, or change the SQL Server 2012 Books Online to remove reference to the script(s).
Sign in to post a comment.
Posted by Microsoft on 8/19/2013 at 2:54 PM
The people who run the SQL Server Common Criteria Certifications site, frequently make changes that are not aligned with the documentation changes, because the common criteria testing and approval process always lags behind the product availability cycle. So, Books Online tries to refer people to the web site, and let the web site tell people whatever they think is important. I notice that if you download the SQL Server 2012 SP1 CC Guidance Addendum it talks about the Install_cc_triggers.sql script. So I think that leaving Books Online pointing to the web site is the correct thing to do in Books Online. That does mean you have to become familiar with the web site, but it's best to go there so you have the latest and most accurate information.
Posted by Microsoft on 1/23/2013 at 11:15 AM
Thank you for submitting this. I'll take a look.