@@ -1540,6 +1540,7 @@ The assessment criteria for each security requirements are described in a struct
- Test execution records and assessment report.
## 6.4 Secure updates
- REFERENCE: ACC_PKI_SU_01
- OBJECTIVE:
Verify that the product supports software update mechanisms capable of updating all mutable parts of its software, excluding only those parts that are immutable due to technical constraints (e.g., ROM-based software).
@@ -1594,13 +1595,11 @@ The assessment criteria for each security requirements are described in a struct
- PREPARATION:
- Identify the administrator configuration interface for update settings.
- Prepare test scenarios for different update installation options (e.g., immediate, deferred).
- ACTIVITIES:
- Configure the product to install updates immediately upon receipt and verify the behavior.
- Configure the product to defer updates to a specified maintenance period and verify the behavior.
- Attempt to trigger an update under each configuration and confirm it follows the configured timing.
- Verify that the administrator has sufficient control over the update timing.
- VERDICT:
- SUCCESS:
- The administrator can configure update timing options.
@@ -1608,7 +1607,6 @@ The assessment criteria for each security requirements are described in a struct
- FAIL:
- The administrator cannot configure update timing.
- Updates are not installed according to the configured timing.
- EVIDENCE:
- Screenshots or logs of the administrator interface showing configuration options.
- Test reports confirming updates are installed according to the configured timing.
