IBM First to Receive Common Criteria Security Certification

This certification is another step in IBM's initiative to provide secure products for government and other high-assurance organizations. In August, IBM and SuSE Linux announced that SuSE achieved the first security certification of Linux. IBM Directory Server, AIX and advanced security features of the eServer zSeries have also achieved Common Criteria certification, and other IBM products are currently under evaluation.

"We congratulate IBM for its commitment to information security as evidenced by the recent successful evaluation and certification of its Web access management software. IBM's Tivoli Access Manager joins a growing list of commercial products evaluated under the international security standard Common Criteria -- providing greater assurance in the component products used to build more secure information systems for the Federal government," said Ron Ross, National Institute of Standards and Technology.

The German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik) certified IBM Tivoli Access Manager, and the certification is recognized internationally. The software was evaluated on four operating systems: IBM AIX 5.2, Sun Solaris 8, Microsoft Windows 2000 Advanced Server (SP3) and SuSE Linux Enterprise Server 8.