Today, Microsoft announced that SQL Server 2005 SP2 has received a Common Criteria certification.
According to a press release from Microsoft, the Bundesamt für Sicherheit in der Informationstechnik (BSI), the central IT security service provider for the German government based in Bonn, Germany, published in November that SQL Server 2005 SP2 received its certification at the Evaluation Assurance Level (EAL) 4+, which evaluates the quality and strength of the vendor’s evidence to support its security claims. Level 4+ is the highest level recognized by the Common Criteria Recognition Arrangement (CCRA), the world’s most widely accepted IT security evaluation agreement. Currently, 25 countries formally recognize the Arrangement and up to 50 additional countries informally recognize it.
Microsoft notes that this is the second EAL certification for SQL Server. SQL Server 2005 SP1 received the certification at EAL 1+ in March 2007.
To read more about certification see Data Platform Insider, Bundesamt für Sicherheit in der Informationstechnik (BSI) Homepage, and Common Criteria Portal Website.