@@ -604,8 +604,8 @@ Products with digital elements used as part of a public key cryptography scheme
-**F.PublicPrivateKeyPairGen**: Generates a public-private key pair.
> - **NOTE 1**: This function may be specialized to address use cases for generation using a Secure Cryptographic Device (SCD) or without using an SCD.
-**F.InternalKeyManagement**: Request the generation of a public-private key pair from an external SCD.
-**F.InternalKeyManagement**: Generate a public-private key pair.
-**F.ExternalKeyPairGen**: Request the generation of a public-private key pair from an external SCD.
-**F.InternalKeyPairGen**: Generate a public-private key pair.
-**F.ExternalKeyManagement**: Request key suppression, export, or renewal from an external SCD or KMS.
-**F.InternalKeyManagement**: Suppress, export, or renew software keys.
-**F.UserAccountManagement**: Create, modify, assign rights to, and modify the different user accounts.
@@ -850,26 +850,46 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- REQUIREMENT:The product shall manage different user profiles, allowing Role Based Access Conrol (RBAC). This mechanism shall provide means to define specific user account capabilities for the following privildege roles:
- U.Administrator
This shall include at least the capability to limit user profile rigths for the following product actions and their associtated assets (TODO reference to UC description):
This shall include at least the capability to limit user profile rigths for the following product actions and their associtated assets ():
- F.UserAccountManagement
- F.Network_Configuration
- F.NetworkConfiguration
- F.InternalKeyManagement
- F.AuditEventManagement
- F.LoggingOfSecurityEvents
- F.CertificateProfileManagement
- F.InternalKeyManagement
- APPLICABILITY: UC1.
- REFERENCE: REQ-PKI-AAC-03
- REQUIREMENT:The product shall manage different user profiles, allowing RBAC. This mechanism shall provide means to define specific user account capabilities for the following roles:
- U.Administrator, U.Officer, U.Auditor
This shall include at least the capability to limit user profile rigths for the following product actions and their associtated assets (TODO reference to UC description):
This shall include at least the capability to limit user profile rigths for the following product actions and their associtated assets as defined in Annex U:
- Product audit & administration
- F.UserAccountManagement
- F.Network_Configuration
- F.NetworkConfiguration
- F.InternalKeyManagement
- F.ExternalKeyManagement
- F.AuditEventManagement
- F.LoggingOfSecurityEvents
- F.CertificateProfileManagement
- Registration
- F.OnlineRegService
- F.CertificateDissemination
- F.PrivateKeyExport
- F.OfficerRegistrationApproval
- Certificate generation
- F.SCD_BasedKeyPairGen
- F.NoneSCD_BasedKeyPairGen
- F.SubjectCertSignCreation
- F.OfficerCertGenApproval
- F.PseudonymCertIssuance
- Certificate status
- F.CertificateStatus
- Revocation management
- F.RevocationManagement
- F.OfficerRevocationApproval
@@ -1404,7 +1424,6 @@ The assessment criteria for each security requirements are described in a struct
- Obtain a list of implemented PKC management functions and associated configuration parameters.
- ACTIVITIES:
1. Review the applicable use case requirements.
2. Identify all PKC management functions implemented by the product.
3. Review all PKC-related configuration parameters.
@@ -4006,7 +4025,7 @@ Registration
- F.PrivateKeyExport
Certificate generation
- F.InternalKeyManagement
- F.InternalKeyPairGen
- F.SubjectCertSignCreation
- F.OfficerCertGenApproval
@@ -4097,7 +4116,7 @@ TODO Giulio - Provide the mapping table functions - assests.
