Blog

What is Common Criteria and why is it important?

From the Cloud Signature Consortium to eIDAS, international standards form the bedrock of Ascertia’s digital trust solutions.

Having been the first vendor globally to achieve Common Criteria EAL4+ EN 419 241-2 certification in 2019, Ascertia is delighted to announce that the latest version of the ADSS Server SAM Appliance - version 7 - has been successfully certified.

As experts in high-trust solutions, we are often asked about the benefits of commercial off-the-shelf products versus seemingly more affordable Software Development Kits (SDKs), Open Source libraries or third-party pre-compiled libraries or binaries. 

Having announced that we passed the evaluation process earlier this month, the Common Criteria process has now officially completed with the issuance of this certificate.

This certification enables the ADSS SAM (Signature Activation Module) Appliance to be listed as a certified product on the Common Criteria website (under Products for Digital Signatures).

We have become the first company in the world to pass the Common Criteria EAL4+ evaluation process against the standard EN 419 241-2 for our ADSS SAM hardware appliance, a remote Qualified Signature Creation Device (QSCD). This provides the highest level of confidence that users have sole control over their signing keys held on central servers or in the cloud. 

In this blog, we discuss our efforts to secure an eIDAS-certified remote qualified signature creation device (QSCD).

We want to let you into a little secret. Since Sep 2017, Ascertia has been actively pursuing a Common Criteria EAL4+ certification of its ADSS Server “Signature Activation Module (SAM)” Appliance.