Device Certifications

Device Certifications

Overview

Common Criteria provides a framework to validate the security functionality of a system(s) by performing a set of rigorous and repeatable tests. This framework provides participating countries assurance that tested product(s) meet the internationally agreed upon security functional criteria. Lexmark devices are validated through an internationally approved independent laboratory using the latest policy guidance. For the last two evaluation cycles, Lexmark products has been validated using the CCRA-approved IEEE 2600 protection profiles. The IEEE 2600 protection profile was designed to define security threats related to hardcopy, security functionality to combat those threats, and provide assurance testing for a class of security devices related to hardcopy. Meeting the requirements defined in the Common Criteria framework, a product evaluated by one nation is considered to have a valid evaluation by all other nations who have signed the Common Criteria Recognition Agreement (CCRA) which includes U.S. National Information Assurance Partnership (NIAP). This, in practice, can result in common procurement requirements for the governments that are part of the CCRA.

In some cases, Lexmark may have two or more separate evaluations listed with similar model numbers.  This is done because some Lexmark devices ship with a hard drive or have other functional differences, which require additional security targets to validate the security capabilities of the device. Adding these other validated devices gives Lexmark customers more options when selecting the appropriate device that meets their internal security requirements.

Benefits

  • Third-party validation assures customers that security capabilities protect the device as claimed by the manufacturer.
  • Devices are validated using the 2600-2008 IEEE Standard for Information Technology: Hardcopy Device and System Security.
  • Two separate validations are performed on Lexmark devices: one with a hard drive and one without a hard drive.

Current Certificates

Protection Profile for Hardcopy Devices [HCD], version 1.0

Certificate of Product Evaluation
Lexmark CX622 and CX625 Multi-Function Printers
Certificate of Product Evaluation
Lexmark MX421, MX521 and MX622 Multi-Function Printers
Certificate of Product Evaluation
Lexmark CX622h and CX625h Multi-Function Printers
Certificate of Product Evaluation
Lexmark CX920, CX921, CX922, CX923, CX924, XC9235, XC9245, XC9255, and XC9265 Multi-Function Printers
Certificate of Product Evaluation
Lexmark CX820, CX825, CX860, XC6152, XC8155, and XC8160 Multi-Function Printers
Certificate of Product Evaluation
Lexmark CS921 and CS923 Single-Function Printers
Certificate of Product Evaluation
Lexmark C6160 and CS820 Single-Function Printers
Certificate of Product Evaluation
Lexmark MX721h, MX722h, MX822 and MX826 Multi-Function Printers with firmware version MXTGW.052.025 with Lexmark Secure Element (P/N 57X0185).
Certificate of Product Evaluation
Lexmark CX622h and CX625h Multi-Function Printers with firmware version CXTZJ.052.025 with Lexmark Secure Element (P/N 57X0185).
Certificate of Product Evaluation
Lexmark MX721h, MX722h, MX822 and MX826 Multi-Function Printers
Certificate of Product Evaluation
Lexmark MS822 and MS826 Single-Function Printers
Certificate of Product Evaluation
Lexmark CX725h and XC4150 Multi-Function Printers
Certificate of Product Evaluation
Lexmark CX725 and XC4140 Multi-Function Printers
Certificate of Product Evaluation
Lexmark C4150, CS720 and CS725 Single-Function Printers
Certificate of Product Evaluation
Lexmark MX421, MX521 and MX622 Multi-Function Printers with firmware version MXTGM.052.025 with Lexmark Secure Element (P/N 57X0185)
Certificate of Product Evaluation
Lexmark MS822 and MS826 Single-Function Printers with firmware version MSTGW.052.025 with Lexmark Secure Element (P/N 57X0185)

ISO 27001 Certificate

ISO / IEC 27001 : 2013
Information Security Management System

UL Cybersecurity Assurance Program Certificate

UL 2900-1
Lexmark CS720, CS725, CS820, C4150, C6160, CX725, CX820, CX825, CX860, XC4140, XC4150, XC6152, XC8155 and XC8160.

Evaluation Assurance Level (EAL) 3

Lexmark MFP wHD, CSEC, version 1.0, 2017-03-15, 16FMV1481-45:1
Lexmark CX725h, CX820, CX860, XC4150, XC6152, XC8155, and XC8160
Lexmark MFP woHD, CSEC, version 1.0, 2016-03-11, 15FMV84-47:1
Lexmark MX410, MX510, MX511, MX610, MX611, MX710, MX711, XM1145, XM3150, XM5163, XM5170, CX410, and CX510
Lexmark MFP wHD, CSEC, version 1.0, 2016-03-11, 15FMV5784-48:1
Lexmark MX511h, MX611h, MX710h, MX711h, MX810, MX811, MX812, MX910, MX911, MX912, XM7155, XM7163, XM7170, XM9145, XM9155, XM9165, CX510h, and XC2132

Evaluation Assurance Level (EAL) 2

CCEVS-VR-VID10511-2014
Lexmark MX410, MX510, MX511, MX610, MX611, MX710, MX711, XM1145, XM3150, XM5163, XM5170, CX410, and CX510
CCEVS-VR-VID10512-2014
Lexmark MS610e, MS810e, MS812e, M3150, M5155, M5163, M5170, and CS510
CCEVS-VR-VID10373-2011
Lexmark X466, X656, X658, X738, X860, X862, and X864
Assurance Continuity Maintenance Report
CCEVS Approved Assurance Continuity Maintenance Report
CCEVS-VR-VID10510-2014
Lexmark MX511h, MX611h, MX710h, MX711h, MX810, MX811, MX812, XM7155, XM7163, XM7170, CX510h, and XC2132
CCEVS-VR-10456-2012
Lexmark X548, XS548, X792, XS796, X925, XS925, X950, X952, X954, XS955 and 6500e Scanner (with T650, T652, or T654 Printer)
CCEVS-VR-VID10369-2011
Lexmark X463, X464, X651, X652, X654, X734 and X736