Windows 10
The local administrator disables/enables cellular protocols for all users by disabling all cellular subnodes under the “Network adapters” node in the Device Manager.
To start the Device Manager, type “Device Manager” in the taskbar searchbox and click on the Device Manager icon.
Managing Health Attestation
(AGD1: FPT_NOT_EXT.1) (AGD2: FPT_NOT_EXT.1)
This section contains the following Common Criteria SFRs:
Extended: Self-Test Event Notification by Attestation (FPT_NOT_EXT.1(ATTEST))
Health attestation policies can be managed to determine the health of enrolled Windows 10 (Anniversary Update) devices using a MDM. See the MDM solution documentation for detailed configuration actions.
The device will create a Helath Attestation log every time the system boots. The Health Attestation logs are found in the following directory:
%windir%\Logs\MeasuredBoot
The contents of the Health Attestation logs may be viewed on or off the TOE using the “TPM Platform Crypto-Provider Toolkit” that can be downloaded from the following link:
TPM Platform Crypto-Provider Toolkit : http://research.microsoft.com/en-us/downloads/74c45746-24ad-4cb7-ba4b-0c6df2f92d5d/
Managing Sensitive Data IT Administrator Guidance
Enterprise Data Protection policies can be managed to help protect against accidental data leakage from enrolled employee-owned Windows 10 (Anniversary Update) devices by using a MDM. See the MDM solution documentation for detailed configuration actions.
Windows 10
Enterprise Data Protection policies are applied on enrolled devices – see section “Managing Device Enrollment” for more information about enrolling devices with an MDM.
Windows 10 Mobile User Guidance
Enterprise Data Protection policies are applied on enrolled devices – see section “Managing Device Enrollment” for more information about enrolling devices with an MDM.
IT Administrator Guidance
USB Mass Storage may be enabled/disabled on the TOE by using a Mobile Device Management (MDM) solution. See the MDM solution documentation for detailed configuration actions.
The set of applications and system files included in the TOE are version 10.0.14393. The following embedded Excel file has the lists of files:
| 