Re: CC request for interpretation: testing while in normal mode?

["NIAP Interpretations Board" <ccevs-nib@nist.gov>]

Jim Knoke asked:

    If the tests themselves are part of the TSF, and the TSF also includes the 
    normal mode operating system, but the tests run only in a maintenance mode, 
    does the operating system on top of which the tests run also have to be part of 
    the TSF?

The NIB first notes that maintenance mode is likely to be extremely similar to 
normal mode; typically they are the same with maintenance mode having some 
functions disabled. Hence, the incremental work to examine maintenance mode is 
likely to be small.

There are two types of tests to be explored. AMT (Abstract Machine Testing) 
provide assurance about the underlying platform. Hence, one needs assurance 
that the tests exercise the same functions of the underlying patform as the TOE 
uses when it runs. An argument to this effect must be made if the AMT tests do 
not run on the same operating system as the TSF.

The second type of tests are those called out in FPT_TST. These test the proper 
operation of the TOE, and hence, must run on the TOE.