Review corrections to ACC_MACHINE assessments

### 6.6.1.1 AAC_MACHINE-1

**Objective:** Make pre-shared keys and fixed passwords obsolete.

**Objective:** Within machine-to-machine communications the authentication does not use passwords.

**Preparation:**

**Activities:**

1. Investigate the system.

1. Investigate the system;

2. Setup a communication with a managed element and verify the used authentication method.

**Verdict:**

**Supporting Evidence:**

* Metrics output relevant for the activities, if available;

* Metrics output showing detected system or managed element when setting up a communication channel;

* Evidence confirming the functionality like:

  * Relevant vendor or design documentation describing the applied measures;

  * Test reports showing the steps performed and results obtained;

  * Screenshots, captures, or console outputs confirming the correct execution or protection behaviour;

### 6.6.1.2 AAC_MACHINE-2

**Objective:** Prevent general super user access rights for M2M traffic IAM.

**Objective:** The machine user operates with the lowest necessary privileges.

**Preparation:**