Loading EN-304-624.md +23 −21 Original line number Diff line number Diff line Loading @@ -2022,7 +2022,28 @@ The validity of the cryptographic mechanisms used to encure those funtions is co ### 6.7.3 INT- CRL signing - REFERENCE: ACC-PKI-AP-07 - REFERENCE: ACC-PKI-INT-07 - OBJECTIVE: - Verify that CRL signatures are created exclusively using an SCD. - PREPARATION: - Obtain CRL signing documentation. - Obtain SCD integration documentation. - ACTIVITIES: - Generate CRLs. - Observe signing operations. - Verify that SCD logs identify the signature creation request and generation. - Verify that signing keys remain within the SCD. - Attempt CRL generation without the SCD. - VERDICT: - SUCCESS: CRL signatures are generated only through the SCD. - FAIL: CRL signatures can be generated outside the SCD. - EVIDENCE: - CRL generation logs. - SCD logs. - Architecture documentation. - Test reports. - REFERENCE: ACC-PKI-INT-08 - OBJECTIVE: - Verify that CRLs are digitally signed. - PREPARATION: Loading Loading @@ -2051,26 +2072,7 @@ The validity of the cryptographic mechanisms used to encure those funtions is co - Delegation documentation. - Test execution records. - REFERENCE: ACC-PKI-INT-08 - OBJECTIVE: - Verify that CRL signatures are created exclusively using an SCD. - PREPARATION: - Obtain CRL signing documentation. - Obtain SCD integration documentation. - ACTIVITIES: - Generate CRLs. - Observe signing operations. - Verify that SCD logs identify the signature creation request and generation. - Verify that signing keys remain within the SCD. - Attempt CRL generation without the SCD. - VERDICT: - SUCCESS: CRL signatures are generated only through the SCD. - FAIL: CRL signatures can be generated outside the SCD. - EVIDENCE: - CRL generation logs. - SCD logs. - Architecture documentation. - Test reports. ## 6.8 Data minimisation ### 6.8.1 General Loading Loading
EN-304-624.md +23 −21 Original line number Diff line number Diff line Loading @@ -2022,7 +2022,28 @@ The validity of the cryptographic mechanisms used to encure those funtions is co ### 6.7.3 INT- CRL signing - REFERENCE: ACC-PKI-AP-07 - REFERENCE: ACC-PKI-INT-07 - OBJECTIVE: - Verify that CRL signatures are created exclusively using an SCD. - PREPARATION: - Obtain CRL signing documentation. - Obtain SCD integration documentation. - ACTIVITIES: - Generate CRLs. - Observe signing operations. - Verify that SCD logs identify the signature creation request and generation. - Verify that signing keys remain within the SCD. - Attempt CRL generation without the SCD. - VERDICT: - SUCCESS: CRL signatures are generated only through the SCD. - FAIL: CRL signatures can be generated outside the SCD. - EVIDENCE: - CRL generation logs. - SCD logs. - Architecture documentation. - Test reports. - REFERENCE: ACC-PKI-INT-08 - OBJECTIVE: - Verify that CRLs are digitally signed. - PREPARATION: Loading Loading @@ -2051,26 +2072,7 @@ The validity of the cryptographic mechanisms used to encure those funtions is co - Delegation documentation. - Test execution records. - REFERENCE: ACC-PKI-INT-08 - OBJECTIVE: - Verify that CRL signatures are created exclusively using an SCD. - PREPARATION: - Obtain CRL signing documentation. - Obtain SCD integration documentation. - ACTIVITIES: - Generate CRLs. - Observe signing operations. - Verify that SCD logs identify the signature creation request and generation. - Verify that signing keys remain within the SCD. - Attempt CRL generation without the SCD. - VERDICT: - SUCCESS: CRL signatures are generated only through the SCD. - FAIL: CRL signatures can be generated outside the SCD. - EVIDENCE: - CRL generation logs. - SCD logs. - Architecture documentation. - Test reports. ## 6.8 Data minimisation ### 6.8.1 General Loading
