Same question here about software-only FDE.

[jmcdaniels]

Same question here about software-only FDE.

Originally posted by @szaydel in #86 (comment)

[jmcdaniels]

FPT_FAC_EXT.1
Firmware / Software Access Control.
Selection: software, firmware. Mirror TUD.
Remove "firmware" from EA so it can apply to both.

FPT_RBP_EXT.1
"verify that the new package" remove firmware.

Check rest of document for instances of firmware for correction / discussion.

[jmcdaniels]

For review:

243b94d

[jmcdaniels]

Fix "Family Behavior
This family requires that a valid authentication factor be provided prior to the TSF authorizing an update of its firmware." in C.2.2.1

[jmcdaniels]

Missing space "action]before" in SFR and ECD.

[jmcdaniels]

Remove known from "a known unique value printed on the device" in SFR and app note.

[jmcdaniels]

For RBP add an app note "The security version may be different from other parts that undergo update by the TSF."

[jmcdaniels]

Change "The administrator guidance would include instructions for the administrator to configure the rollback prevention mechanism, if appropriate." to rollback protection mechanism.