JBoss EAP is Common Criteria Certified - EAL4+ (Highest Level Security Certification)

This morning, the press release has gone out to announce the certification of JBoss Enterprise Application Platform 5.1.0 and 5.1.1 at the highest level of evaluation in its category - EAL4+.

The press release is available at http://finance.yahoo.com/news/JBoss-Enterprise-Application-bw-1345517824.html?x=0

The CC Guide should be available soon at http://docs.redhat.com/docs/en-US/index.html

I am confident that security conscious customers will find this news refreshing.

JBoss EAP 4.3 is Common Criteria Certified

I had the privilege of leading the common criteria evaluation process of JBoss Enterprise Application Platform (EAP) 4.3 from inception to completion. It gives me immense pleasure in joining the other announcements(Rich Sharples Blog), to declare that JBoss EAP 4.3 is Common Criteria certified for EAL2+.


Press Release: Red Hat Press
Agency (BSI) Page: BSI

What does it really mean to customers?
Customers can be assured that EAP 4.3 has gone through strict evaluation by Security Evaluators/Auditors (AtSec) for adherence to the security principles set down by Common Criteria. If security is a priority for you, then it makes sense for you to configure EAP 4.3 according to the "Common Criteria Configuration Guide"

Do I need to pay more for the common criteria evaluated version of JBoss EAP 4.3?
As a customer, you do not have to.

NOTE: We are NOT talking about JBoss Application Server available in the community, but the enterprise version available from Red Hat.