Comments on: Canonical Begins Ubuntu Server Edition Training

By: Jeff Vandervort

Jeff Vandervort — Wed, 02 Jun 2010 17:19:21 +0000

Here it is a year later and there still isn’t an answer. Just say “we didn’t do it and don’t care to.” There’s no shame in it, is there?

By: Paul O'Rama

Paul O'Rama — Wed, 24 Jun 2009 18:59:53 +0000

I’d still like to know as well, but from the slow response I’d wager this is not something Canonical deems important right now.

By: Scott Phelps

Scott Phelps — Tue, 23 Jun 2009 07:34:23 +0000

Any word back on this? All the relevan threads started on the Ubuntu forums died with no answers. Especially important for removing impediments to government sector adoption is the Common Criteria Certification.

By: Joe Panettieri

Joe Panettieri — Fri, 05 Jun 2009 14:53:00 +0000

Hey Paul: I will follow up. Just got back from Cisco Partner Summit and will shift gears to Ubuntu world in a few hours

By: Paul O'Rama

Paul O'Rama — Fri, 05 Jun 2009 14:17:41 +0000

Joe,

Any word on the certifications?

By: Jef Spaleta

Jef Spaleta — Thu, 28 May 2009 19:10:33 +0000

Joe:
Paul makes a very good point. Certifications like the ones he’s talking about let you get in the door in certain deployment situations. Because of that barrier to entry, these situations can end up being more lucrative from a service and support revenue pov than small business even though the small business market is larger in terms of raw adoption numbers.

What will be really interesting to see is what sort of certifications become important for secure utility computing. People are really just starting to wrap their heads about security issues in the cloud. Utility computing may break a number of implicit assumptions built into the certification criteria, invalidating the applicability of any of the existing certification levels to utility computing like EC2 instances. We probably don’t know enough yet to know what certifications will become important in the cloud.

-jef

By: Joe Panettieri

Joe Panettieri — Thu, 28 May 2009 14:23:00 +0000

@Paul: Thanks for telling us a bit more about your background. I will track down the answers to your questions and report back the week of June 1. Thanks for reading WorksWithU.
-jp

By: Paul O'Rama

Paul O'Rama — Thu, 28 May 2009 13:28:54 +0000

I do not work for Red Hat or a competitor. I currently work in academia (a large state university) but used to do some government work. I was just curious if they were working towards these certifications to possibly expand their audience.

By: Joe Panettieri

Joe Panettieri — Thu, 28 May 2009 01:39:31 +0000

Hi Paul: I will check in with Canonical on your questions. Thanks for taking the time to raise them. Do you mind disclosing if you work for Red Hat or a Canonical competitor? I always strive to ensure readers understand who’s raising questions and why. Thanks again.
-jp

By: Paul O'Rama

Paul O'Rama — Thu, 28 May 2009 01:20:25 +0000

Has Ubuntu achieved any security certifications to be used in U.S. government applications for example? If not, is Canonical working toward such things?

Here are some Red Hat has achieved over the years.

Red Hat Enterprise Linux 5 has now achieved the Evaluation Assurance Level 4 (EAL 4+) for Labeled Security Protection Profile (LSPP), Controlled Access Protection Profile (CAPP), and Role-Based Access Control Protection Profile (RBAC).