@@ -813,7 +813,7 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 Part 1 (2) (c).
- REFERENCE: REQ-PKI-SU-01:
- REFERENCE: REQ-PKI-SU-01
- REQUIREMENT: The product shall support software update mechanisms, that allow to update every part of the product's software, except for parts of the product's software that are immutable due to technical reasons.
- NOTE: Part of the product's software can be immutable due to its technology (e.g. software installed in a ROM).
- APPLICABILITY: All use cases.
@@ -1543,18 +1543,15 @@ The assessment criteria for each security requirements are described in a struct
- REFERENCE: ACC_PKI_SU_01
- OBJECTIVE:
Verify that the product supports software update mechanisms capable of updating all mutable parts of its software, excluding only those parts that are immutable due to technical constraints (e.g., ROM-based software).
- PREPARATION:
- Identify all software components of the product.
- Determine which components are mutable and which are immutable (e.g., ROM-based).
- Prepare a test environment with access to the product's update mechanisms.
- ACTIVITIES:
- Attempt to update each mutable component of the product's software.
- Verify that updates are successfully applied to all mutable components.
- Confirm that immutable components (e.g., ROM-based) are not updated and that this is justified by technical constraints.
- Document any components that cannot be updated and validate their immutability.
- VERDICT:
- SUCCESS:
- All mutable components can be updated.
@@ -1562,7 +1559,6 @@ The assessment criteria for each security requirements are described in a struct
- FAIL:
- Any mutable component cannot be updated.
- Immutable components are not justified or incorrectly classified.
- EVIDENCE:
- Logs or screenshots of successful updates for mutable components.
- Documentation or technical specifications justifying immutability for excluded components.
@@ -1571,18 +1567,15 @@ The assessment criteria for each security requirements are described in a struct
- REFERENCE: ACC_PKI_SU_02
- OBJECTIVE:
Verify that the product only installs updates signed by a known and trusted entity with a valid key identified by its PKC (Public Key Certificate).
- PREPARATION:
- Obtain a valid signed update from a trusted entity.
- Obtain an unsigned update or an update signed with an invalid/unknown key.
- Prepare a test environment with the product configured to recognize the trusted entity's PKC.
- ACTIVITIES:
- Attempt to install the valid signed update and verify it is accepted.
- Attempt to install the unsigned update or update signed with an invalid key and verify it is rejected.
- Check that the product validates the signature and PKC before installation.
- Test edge cases, such as expired or revoked certificates.
- VERDICT:
- SUCCESS:
- Valid signed updates are installed.
@@ -1590,7 +1583,6 @@ The assessment criteria for each security requirements are described in a struct
- FAIL:
- Valid signed updates are rejected.
- Unsigned or invalidly signed updates are accepted.
- EVIDENCE:
- Logs or screenshots showing successful installation of valid updates.
- Logs or screenshots showing rejection of unsigned or invalidly signed updates.
@@ -1599,7 +1591,6 @@ The assessment criteria for each security requirements are described in a struct
- REFERENCE: ACC_PKI_SU_03
- OBJECTIVE:
Verify that the device administrator can configure when available updates are installed, with options such as immediate installation upon receipt or deferred installation during a maintenance period.
- PREPARATION:
- Identify the administrator configuration interface for update settings.
- Prepare test scenarios for different update installation options (e.g., immediate, deferred).
