Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

This is an archive
(replace .gov by .rip)

Security Content Automation Protocol Validation Program

137 Microsoft SCAP 1.2 Product Validation Record

Validation Number: 137 Microsoft Corporation Logo
Vendor: Microsoft Corporation
Product Name: SCAP Extensions for Microsoft System Center Configuration Manager
Product Major Version: 3.0
Product Version Tested: v3.0.1154.0
Tested Platforms:
Microsoft Windows 7, 64 bit
Microsoft Windows 7, 32 bit
SCAP 1.2 Capabilities:
Authenticated Configuration Scanner
Common Vulnerabilities and Exposures (CVE)
Validated Product
Vendor Provided SCAP Information
Dates Tested: 1/20/2015 - 6/9/2015
Report Submitted: 8/18/2015
DTR Version: NISTIR 7511 Rev. 3
Validation Test Suite:
version 1-2.0.0.0 (December 2012 release includes R600-1.2.0.0.1, R1900-1.2.0.0.2, R3300-1.2.0.0.3 out of cycle updates)
version 1-2.0.1.0 (August 2013 release)
version 1-2.0.2.0 (March 2014 release)
version 1-2.0.3.0 (April 2015 release)
version 1-­2.1.0.0 (April 2016 release)
version 1-­2.1.1.0 (June 2016 release)
Previous Validation
SCAP and Product Version:
SCAP 1.0 System Center Configuration Manager 2.1
NVLAP Lab: 200423-0 - BAH Testing Lab
Validation Date: 9/28/2015
Comments: An exception was granted for SCAP.R.2000.5 because there isn’t a clearly defined method for exporting the same OVAL variable with multiple values.
Note: The vendor assertions document (aka Vendor Provided SCAP Information) was provided by the vendor. The descriptions do not imply endorsement by the U.S. Government or NIST.

Created November 06, 2017, Updated April 05, 2019