Red Hat gets RHEL 8.2 certified for high level US government security
(2022/04/05)
- Reference: 1649156340
- News link: https://www.theregister.co.uk/2022/04/05/red_hat_gets_rhel_82/
- Source link:
Linux slinger Red Hat has achieved Common Criteria certification for Red Hat Enterprise Linux 8.2.
This means it is cleared as a platform suitable for US users with critical workloads in classified and sensitive deployments, including national security agencies, finance and healthcare organizations.
According to Red Hat, RHEL 8.2 was certified by the [1]National Information Assurance Partnership (NIAP), an American government program that oversees evaluation and validation of commercial off-the-shelf (COTS) IT products for conformance to the international Common Criteria requirements. Actual testing and validation was completed by Acumen Security, a laboratory accredited by the US government.
[2]
Common Criteria certification itself is designed to provide a level of assurance to users that a particular product meets security criteria for specific compute environments. Rigorous testing by a qualified independent third party is a key part of this process.
[3]
[4]
RHEL 8.2 was validated against the Common Criteria Standard for Information Security Evaluation (ISO/IEC 15408) using version 4.2.1 of the NIAP General Purpose Operating System Protection Profile, including Extended Package for Secure Shell (SSH), version 1.0.
This version of Red Hat Enterprise Linux was released in April 2020, perhaps giving an indication of the level of testing necessary to achieve Common Criteria certification (CCC). It is, however, only the latest release of the platform to be accredited.
[5]
Clara Conti, Red Hat VP and general manager for North America Public Sector, said the certification of RHEL 8.2 "shows our continued commitment to making Red Hat Enterprise Linux a platform ... [that] serves as the backbone for critical and security-sensitive operations."
Meanwhile, Red Hat recently announced a [6]beta release of RHEL 8.6 , which showcases the new features coming in the production release of the platform, as usual.
This includes more system roles to streamline RHEL configuration for common tasks, such as a High Availability Cluster role, with automated tooling to standup high availability clusters using prescriptive use case scenarios and topology recommendations. There is also a Firewall System role and a System Role for web console, which automates the installation and configuration of the RHEL web console.
[7]CentOS Stream 9: Understanding the new Red Hat OS release for non-Red-Hat-type people
[8]Red Hat 8.5 released with SQL Server and .NET 6 ... this is Linux, right?
[9]Enterprise open-source is on the up and proprietary software on the way down
[10]Red Hat forced to hire cheaper, less senior engineers amid budget freeze
Last year, Red Hat also [11]released an early beta for [12]Red Hat Enterprise Linux 9 , which is based on Linux kernel version 5.14 and provides a preview of the next major update of RHEL.
Red Hat customers can directly access the Red Hat Enterprise Linux Betas from the [13]Red Hat Enterprise Linux Customer Portal .
[14]
Last month, [15]Red Hat's owner , IBM, spilled the beans on its [16]long term strategy behind the decision to purchase the Linux distributor. Spoiler: it is the OpenShift application platform. ®
Get our [17]Tech Resources
[1] https://www.niap-ccevs.org/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.redhat.com/en/blog/RHEL-86-beta-whats-new
[7] https://www.theregister.com/2021/12/10/centos_stream_9/
[8] https://www.theregister.com/2021/11/11/red_hat_8_5/
[9] https://www.theregister.com/2022/03/02/red_hat_open_source/
[10] https://www.theregister.com/2021/11/05/red_hat_jobs/
[11] https://www.theregister.com/2021/11/04/rhel_9_beta/
[12] https://www.redhat.com/en/blog/whats-new-rhel-90-beta
[13] https://access.redhat.com/products/red-hat-enterprise-linux/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://www.theregister.com/2018/10/28/ibm_redhat_acquisition/
[16] https://www.theregister.com/2022/03/11/ibm_redhat_strategy/
[17] https://whitepapers.theregister.com/
This means it is cleared as a platform suitable for US users with critical workloads in classified and sensitive deployments, including national security agencies, finance and healthcare organizations.
According to Red Hat, RHEL 8.2 was certified by the [1]National Information Assurance Partnership (NIAP), an American government program that oversees evaluation and validation of commercial off-the-shelf (COTS) IT products for conformance to the international Common Criteria requirements. Actual testing and validation was completed by Acumen Security, a laboratory accredited by the US government.
[2]
Common Criteria certification itself is designed to provide a level of assurance to users that a particular product meets security criteria for specific compute environments. Rigorous testing by a qualified independent third party is a key part of this process.
[3]
[4]
RHEL 8.2 was validated against the Common Criteria Standard for Information Security Evaluation (ISO/IEC 15408) using version 4.2.1 of the NIAP General Purpose Operating System Protection Profile, including Extended Package for Secure Shell (SSH), version 1.0.
This version of Red Hat Enterprise Linux was released in April 2020, perhaps giving an indication of the level of testing necessary to achieve Common Criteria certification (CCC). It is, however, only the latest release of the platform to be accredited.
[5]
Clara Conti, Red Hat VP and general manager for North America Public Sector, said the certification of RHEL 8.2 "shows our continued commitment to making Red Hat Enterprise Linux a platform ... [that] serves as the backbone for critical and security-sensitive operations."
Meanwhile, Red Hat recently announced a [6]beta release of RHEL 8.6 , which showcases the new features coming in the production release of the platform, as usual.
This includes more system roles to streamline RHEL configuration for common tasks, such as a High Availability Cluster role, with automated tooling to standup high availability clusters using prescriptive use case scenarios and topology recommendations. There is also a Firewall System role and a System Role for web console, which automates the installation and configuration of the RHEL web console.
[7]CentOS Stream 9: Understanding the new Red Hat OS release for non-Red-Hat-type people
[8]Red Hat 8.5 released with SQL Server and .NET 6 ... this is Linux, right?
[9]Enterprise open-source is on the up and proprietary software on the way down
[10]Red Hat forced to hire cheaper, less senior engineers amid budget freeze
Last year, Red Hat also [11]released an early beta for [12]Red Hat Enterprise Linux 9 , which is based on Linux kernel version 5.14 and provides a preview of the next major update of RHEL.
Red Hat customers can directly access the Red Hat Enterprise Linux Betas from the [13]Red Hat Enterprise Linux Customer Portal .
[14]
Last month, [15]Red Hat's owner , IBM, spilled the beans on its [16]long term strategy behind the decision to purchase the Linux distributor. Spoiler: it is the OpenShift application platform. ®
Get our [17]Tech Resources
[1] https://www.niap-ccevs.org/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://www.redhat.com/en/blog/RHEL-86-beta-whats-new
[7] https://www.theregister.com/2021/12/10/centos_stream_9/
[8] https://www.theregister.com/2021/11/11/red_hat_8_5/
[9] https://www.theregister.com/2022/03/02/red_hat_open_source/
[10] https://www.theregister.com/2021/11/05/red_hat_jobs/
[11] https://www.theregister.com/2021/11/04/rhel_9_beta/
[12] https://www.redhat.com/en/blog/whats-new-rhel-90-beta
[13] https://access.redhat.com/products/red-hat-enterprise-linux/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YkxntDHW53VrIt2ixiCiMwAAAE0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[15] https://www.theregister.com/2018/10/28/ibm_redhat_acquisition/
[16] https://www.theregister.com/2022/03/11/ibm_redhat_strategy/
[17] https://whitepapers.theregister.com/
Re: Common Criteria
Doctor Syntax
Congratulations to the US govt. in finally catching up with the modern world.
Re: Common Criteria
Plest
How dare you make jokes! You know the Penguinista crowd have no sense of humour and have zero ability to laugh at themselves. Just like Apple Fanbois where the Apple Store insists you have a humour-ectomy when you buy Apple kit.
It was a joke people, jeez, lighten up!
Re: Common Criteria
Jim Mitchell
I think most releases of Red Hat get this certification, not just 8.2. So no, they haven't "finally caught up to" Solaris.
This article isn't really news.
Doctor Syntax
If a system is accredited in the patch state it was in when it was tested what happens when there are further patches? Does the accreditation lapse because a patched system is no longer in the same state? If it remains in the same state does the accreditation lapse because it is now out of date?
b0llchit
The answer is ██████. Real systems have █████████ to ██████. The government takes ██████ very seriously and ███ with ██████. It is ensured that ██████ and ███ will █████████.
Common Criteria
-> This version of Red Hat Enterprise Linux was released in April 2020
Congratulations. You have finally caught up to where Solaris 8 was 20 years ago.