Commit 09378735 authored by Sammy Haddad's avatar Sammy Haddad
Browse files

Adding back POE.SCD (neccessary for env description).

parent c6f06f2f

EN-304-624.md

+7 −6
Original line number Diff line number Diff line
@@ -658,8 +658,9 @@ The operational environment of the product includes the physical environment, th 
An enterprise server room or data centre should have some physical access controls.



For the physical operational environment, the following environments are addressed for the Main Products.

- **POE.FullyControlled** - fully controlled physical operational environment

- **POE.PartiallyControlled** - partially controlled physical operational environment

- **POE.FullyControlled** - fully controlled physical operational environment.

- **POE.PartiallyControlled** - partially controlled physical operational environment.

- **POE.SCD** - The environment provides a Secure Cryptographic Device (often taking the form of an Hardware Security Module) to generate keys and provide signature support.



A cloud service provider should have strong physical security measures in place, but the servers hosting the PKI software should not be physically separated from other infrastructure.
@@ -680,10 +681,10 @@ Additionally, the PKI Product may include the following required external compon 
### 4.3.4 Connectivity aspects



For the logical operation environment, the following digital communication types are addressed for any architectural component of the product.

- **COM.Public** - ingoing/outgoing communication from/to public networks.

- **COM.Adjacent** - ingoing/outgoing communication from/to private networks which does not require physical proximity to the communication partner/

- **COM.Local** - ingoing/outgoing communication which requires physical proximity to but not physical presence at the communication partner.

- **COM.UserInterface** - physical interface provided to the authorized user, allowing direct acces to the product HMI.

- **COM.Public** - Ingoing/outgoing communication from/to public networks.

- **COM.Adjacent** - Ingoing/outgoing communication from/to private networks which does not require physical proximity to product premises.

- **COM.Local** - Ingoing/outgoing communication which requires physical access to the product Local Area Network (LAN).

- **COM.UserInterface** - Physical interface provided to the authorized user, allowing direct acces to the product HMI.



## 4.4 Distribution of Security Functions