@@ -1544,7 +1544,7 @@ The assessment criteria for each security requirements are described in a struct
- REFERENCE: ACC-PKI-SU-01
- OBJECTIVE:
Verify that the product supports software update mechanisms capable of updating all mutable parts of its software, excluding only those parts that are immutable due to technical constraints (e.g., ROM-based software).
-Verify that the product supports software update mechanisms capable of updating all mutable parts of its software, excluding only those parts that are immutable due to technical constraints (e.g., ROM-based software).
- PREPARATION:
- Identify all software components of the product.
- Determine which components are mutable and which are immutable (e.g., ROM-based).
@@ -1568,7 +1568,7 @@ The assessment criteria for each security requirements are described in a struct
- REFERENCE: ACC-PKI-SU-02
- OBJECTIVE:
Verify that the product only installs updates signed by a known and trusted entity with a valid key identified by its PKC (Public Key Certificate).
-Verify that the product only installs updates signed by a known and trusted entity with a valid key identified by its PKC (Public Key Certificate).
- PREPARATION:
- Obtain a valid signed update from a trusted entity.
- Obtain an unsigned update or an update signed with an invalid/unknown key.
@@ -1592,7 +1592,7 @@ The assessment criteria for each security requirements are described in a struct
- REFERENCE: ACC-PKI-SU-03
- OBJECTIVE:
Verify that the device administrator can configure when available updates are installed, with options such as immediate installation upon receipt or deferred installation during a maintenance period.
-Verify that the device administrator can configure when available updates are installed, with options such as immediate installation upon receipt or deferred installation during a maintenance period.
- PREPARATION:
- Identify the administrator configuration interface for update settings.
- Prepare test scenarios for different update installation options (e.g., immediate, deferred).
@@ -1618,7 +1618,7 @@ The assessment criteria for each security requirements are described in a struct
- REFERENCE: ACC-PKI-AAC-01
- OBJECTIVE:
Verify the product allows to create different user profiles (users with different access rights to functions, configuration, and stored data) for the roles defined by PKI policies, each with distinct credentials protected using state of the art cryptographic mecanisms.
-Verify the product allows to create different user profiles (users with different access rights to functions, configuration, and stored data) for the roles defined by PKI policies, each with distinct credentials protected using state of the art cryptographic mecanisms.
- PREPARATION:
Access to the administrative and user interfaces of the product.
- ACTIVITIES:
@@ -1817,7 +1817,7 @@ Validity of access control requirement are covered by section 6.5:
- REFERENCE: ACC-PKI-CON-05
- OBJECTIVE:
Verify that exported private or symmetric keys are protected against disclosure using cryptographic mechanisms conforming to Annex K.
-Verify that exported private or symmetric keys are protected against disclosure using cryptographic mechanisms conforming to Annex K.
- Obtain export procedures and cryptographic documentation.
@@ -2066,7 +2066,7 @@ The validity of the cryptographic mechanisms used to encure those funtions is co
- REFERENCE: ACC-PKI-DM-01
- OBJECTIVE:
Determine whether the product only maintains network configuration data necessary for communication with PKI system elements required by the applicable use case and does not maintain unnecessary network configuration information.
-Determine whether the product only maintains network configuration data necessary for communication with PKI system elements required by the applicable use case and does not maintain unnecessary network configuration information.
- PREPARATION:
- Product architecture and deployment documentation.
- List of external components and interfaces to connect to.
@@ -2091,7 +2091,7 @@ The validity of the cryptographic mechanisms used to encure those funtions is co
- REFERENCE: REQ-PKI-DM-02
- OBJECTIVE:
Verify that the product only maintains and processes user data necessary for certificate management.
-Verify that the product only maintains and processes user data necessary for certificate management.
- PREPARATION:
- Access to the product's user data storage and certificate management logs.
- ACTIVITIES:
@@ -2108,7 +2108,7 @@ The validity of the cryptographic mechanisms used to encure those funtions is co
- REFERENCE: ACC-PKI-DM-03
- OBJECTIVE:
Determine whether the product maintains only the configuration data required to implement the PKC management functions applicable to the use case.
-Determine whether the product maintains only the configuration data required to implement the PKC management functions applicable to the use case.
- PREPARATION:
- Product configuration documentation.
- List of implemented PKC management functions and associated configuration parameters.
