@@ -1371,7 +1371,7 @@ The assessment criteria for each security requirements are described in a struct
## 6.2 No known exploitable vulnerabilities
- REFERENCE: ACC_PKI_KEV_01
- REFERENCE: ACC-PKI-KEV-01
- OBJECTIVE: Verify that:
1. Known exploitable vulnerabilities affecting the product are identified.
2. For each identified known exploitable vulnerability, one of the following applies:
@@ -1532,7 +1532,7 @@ The assessment criteria for each security requirements are described in a struct
## 6.4 Secure updates
- REFERENCE: ACC_PKI_SU_01
- REFERENCE: ACC-PKI-SU-01
- OBJECTIVE:
Verify that the product supports software update mechanisms capable of updating all mutable parts of its software, excluding only those parts that are immutable due to technical constraints (e.g., ROM-based software).
- PREPARATION:
@@ -1556,7 +1556,7 @@ The assessment criteria for each security requirements are described in a struct
- Documentation or technical specifications justifying immutability for excluded components.
- Test reports confirming the update process.
- REFERENCE: ACC_PKI_SU_02
- REFERENCE: ACC-PKI-SU-02
- OBJECTIVE:
Verify that the product only installs updates signed by a known and trusted entity with a valid key identified by its PKC (Public Key Certificate).
- PREPARATION:
@@ -1580,7 +1580,7 @@ The assessment criteria for each security requirements are described in a struct
- Logs or screenshots showing rejection of unsigned or invalidly signed updates.
- Test reports confirming signature and PKC validation.
- REFERENCE: ACC_PKI_SU_03
- REFERENCE: ACC-PKI-SU-03
- OBJECTIVE:
Verify that the device administrator can configure when available updates are installed, with options such as immediate installation upon receipt or deferred installation during a maintenance period.
- PREPARATION:
@@ -2469,7 +2469,7 @@ As stated in clause 5.10, since minimizing the impact on other systems relies on
## 6.12 Exploitation mitigation mechanisms
### 6.12.1 EMM - Certificate issuance
- REFERENCE: ACC_PKI_EMM_01
- REFERENCE: ACC-PKI-EMM-01
- OBJECTIVE:
- Verify the certificates issued by the certificate generation service are public-key certificates or attribute certificates whose format complies with the X.509 standard ITU-T X.509 [\[2\]](#_ref_2).
- PREPARATION:
@@ -2493,7 +2493,7 @@ As stated in clause 5.10, since minimizing the impact on other systems relies on
- Generated certficates or error messages generated by the product
- Signature verification input and output
- REFERENCE: ACC_PKI_EMM_02
- REFERENCE: ACC-PKI-EMM-02
- OBJECTIVE: Verify the format of public-key certificates issued by the certificate generation service complies with ITU-T X.509 [\[2\]](#_ref_2).
- PREPARATION: Document the circumstances in which the certificate generation service may issue a certificate. Ability to request a certificate issuance for the different identified circumstances.
- ACTIVITIES: For each way the product may issue a certificate:
@@ -2506,7 +2506,7 @@ As stated in clause 5.10, since minimizing the impact on other systems relies on
a) The documentation of certificate issuance circumstances;
b) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_03
- REFERENCE: ACC-PKI-EMM-03
- OBJECTIVE: Verify the product implements and follows a certificate profile for issued certificates.
- PREPARATION:
- Document the circumstances in which the certificate generation service may issue a certificate.
@@ -2522,7 +2522,7 @@ As stated in clause 5.10, since minimizing the impact on other systems relies on
b) the documentation of the certificate profile;
c) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_04
- REFERENCE: ACC-PKI-EMM-04
- OBJECTIVE: Verify the product enables the Administrator to specify the set of acceptable values for the following fields and extensions:
a) the authority key identifier;
b) the algorithm identifier for the subject’s public/private key pair;
@@ -2543,7 +2543,7 @@ As stated in clause 5.10, since minimizing the impact on other systems relies on
b) The applied configuration of the identified fields and extensions;
c) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_05
- REFERENCE: ACC-PKI-EMM-05
- OBJECTIVE: Verify that the product requires the Administrator to specify the set of acceptable values for the fields and extensions identified in REQ-PKI-EMM-03
and REQ-PKI-EMM-04.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate.
@@ -2555,7 +2555,7 @@ and REQ-PKI-EMM-04.
a) The documentation of public-key certificate issuance circumstances;
b) the way issuances were requested, and the responses from the product.
- REFERENCE: ACC_PKI_EMM_06
- REFERENCE: ACC-PKI-EMM-06
- OBJECTIVE:
- Verify the product marks the keyUsage, basicConstraints and certificatePolicies as critical in issued certificates.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate. Ability to request a certificate issuance for the different identified circumstances.
@@ -2568,7 +2568,7 @@ and REQ-PKI-EMM-04.
a) The documentation of public-key certificate issuance circumstances;
b) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_07
- REFERENCE: ACC-PKI-EMM-07
- OBJECTIVE:
- Verify the product disallows the keyUsage extension to offer both digital signature and encryption or key agreement capabilities.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate. Ability to request a certificate issuance for the different identified circumstances.
@@ -2583,7 +2583,7 @@ and REQ-PKI-EMM-04.
a) The documentation of public-key certificate issuance circumstances;
b) the way issuances were requested, and the responses and issued certificates from the product.
- REFERENCE: ACC_PKI_EMM_08
- REFERENCE: ACC-PKI-EMM-08
- OBJECTIVE:
- Verify the product ensures a prospective certificate subject possesses the private key that corresponds to the public key in the certificate request before issuing a certificate, unless the private key never left the certificate issuance service.
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate. Ability to request a certificate issuance.
@@ -2606,7 +2606,7 @@ and REQ-PKI-EMM-04.
### 6.12.2 EMM - Certificate status
- REFERENCE: ACC_PKI_EMM_09
- REFERENCE: ACC-PKI-EMM-09
- OBJECTIVE: Verify the certificate revocation statuses to be either or both of CRLs as defined by and subject to the requirements of ITU-T X.509 [\[2\]](#_ref_2), or OCSP responses as defined by and subject to the requirements of RFC 6960 [\[i.3\]](#_ref_i.3).
- PREPARATION: Document the circumstances in which the certificate generation service may issue a public-key certificate. Ability to request a certificate issuance. Ability to configure revocation aspects of the certificate profile if supported.
- ACTIVITIES:
@@ -2620,7 +2620,7 @@ and REQ-PKI-EMM-04.
a) The configuration attempts, or other evidence such configuration is not supported;
b) the way issuances were requested, and the responses from the product.
- REFERENCE: ACC_PKI_EMM_010
- REFERENCE: ACC-PKI-EMM-010
- OBJECTIVE:
- Verify the product implements and enforces a CRL profile for issued CRLs.
- PREPARATION: Ability to request a CRL as certificate status for a given certificate. Document the CRL profile implemented by the product.
@@ -2630,7 +2630,7 @@ and REQ-PKI-EMM-04.
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE: The way the CRL was requested, and the response and CRL from the product.
- REFERENCE: ACC_PKI_EMM_011
- REFERENCE: ACC-PKI-EMM-011
- OBJECTIVE: Verify that the product requires the Administrator to specify the set of acceptable values for the fields and extensions identified in REQ-5.4-03.
- PREPARATION: Administrator access to not-installed or reinitialised product, or specifically its certificate status service and related configuration.
- ACTIVITIES: Verify that no CRL may be issued until acceptables values for the issuer, issuerAltName and nextUpdate fields and extensions are set.
@@ -2638,7 +2638,7 @@ and REQ-PKI-EMM-04.
- EVIDENCE: The way CRLs were requested, and the responses from the product.
- REFERENCE: ACC_PKI_EMM_012
- REFERENCE: ACC-PKI-EMM-012
- OBJECTIVE: Verify the product implements and enforces an OCSP response profile for issued OCSP responses.
- PREPARATION: Ability to request an OCSP response as certificate status for a given certificate. Document the OCSP response profile implemented by the product.
- ACTIVITIES:
@@ -2647,7 +2647,7 @@ and REQ-PKI-EMM-04.
- VERDICT: SUCCESS if all the verifications pass; else FAIL.
- EVIDENCE: The way the OCSP response was requested, and the response and OCSP response from the product.
- REFERENCE: ACC_PKI_EMM_013
- REFERENCE: ACC-PKI-EMM-013
- OBJECTIVE:
- Verify that the product requires the Administrator to specify the set of acceptable values for the responseType field.
- PREPARATION: Administrator access to not-installed or reinitialised product, or specifically its certificate status service and related configuration.
@@ -2655,7 +2655,7 @@ and REQ-PKI-EMM-04.
- VERDICT: SUCCESS if all the verification pass; else FAIL.
- EVIDENCE: The way OCSP responses were requested, and the responses and OCSP responses from the product.
- REFERENCE: ACC_PKI_EMM_014
- REFERENCE: ACC-PKI-EMM-014
- OBJECTIVE: Verify that the product requires the Administrator to specify the set of acceptable values for the responderID field.
- PREPARATION: Administrator access to not-installed or reinitialised product, or specifically its certificate status service and related configuration.
- ACTIVITIES: Verify that no OCSP response may be issued until acceptable values for the responderID field are set.
