@@ -872,9 +872,6 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- EXAMPLE: Options may include immediately on receipt, deferred to an agreed "maintenance" period.
- APPLICABILITY: All use cases.
- REFERENCE: REQ-PKI-SU-04
- REQUIREMENT: Where the product is in scope of EN 303 645 [] the provisions of clause 4.5 of EN 303 645 shall apply.
- APPLICABILITY: All use cases.
## 5.5 Authentication and access control
@@ -961,11 +958,11 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- NOTE: If the product is intended for a specific environment with a defined set of agreed cryptographic mechanisms, the product has to be able to be used in accordance with those cryptographic requirements.
- APPLICABILITY: XXXX
- REFERENCE: XXX
- REQUIREMENT: TODO The product should be able to maintain multiple key pairs.
- REFERENCE: REQ-PKI-CON-08
- REQUIREMENT: TODO The product shall be able to maintain multiple key pairs.
- RATIONALE: XXX
- NOTE: Any PKCs stored in the product are intended for public dissemination and have, depending on the particular certificate specification, explicit means of protecting the content, thus no requirements are placed on the product that define the format and protections inherent to the PKC.
- APPLICABILITY: XXXX
- APPLICABILITY: All use cases.
### 5.6.2 Secure storage and communications
@@ -983,8 +980,6 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
(TODO cf HAS comment - not to be enforce to less critical use cases - UC1?)
- REFERENCE: REQ-PKI-INT-01
- REQUIREMENT: The product shall be able to detect unauthorised modifications to the stored audit records during the audit.
- RATIONALE: The audit record intergrity and availability ensure that all auditable events are traceable and misuse of the product functions can be traced.
@@ -1014,7 +1009,6 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- RATIONALE: The audit record intergrity ensure that all auditable events are traceable and misuse of the product functions can be traced.
- APPLICABILITY: All use cases.
### 5.7.2 Certificate signing
- REFERENCE: REQ-PKI-INT-06
@@ -1113,11 +1107,6 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- RATIONALE: XXX
- APPLICABILITY: All use cases.
- REFERENCE: REQ-PKI-MAS-02
- REQUIREMENT: TODO Where the product is in scope of EN 303 645 [] the provisions of clause 4.6 of EN 303 645 shall apply.
