-**I.NetworkServices** - Interface to local network services (secure storage, timesources, user directory.
-**I.ExternalCryptographicService** - Interface to SCD or KMS, not part of the PKI product.
Logical environments include the connected systems around the main product that shape how it operates in its environment. The trusted boundary is affected by potential third party software that runs on the product, data links to the outside world using radio interfaces, and user permissions and access control.
@@ -665,7 +666,6 @@ A cloud service provider should have strong physical security measures in place,
For the physical operation environment, the following environments are addressed for cloud service (RDPSs):
The security aspect of Logical/Software operational environment can be either :
@@ -675,7 +675,6 @@ The security aspect of Logical/Software operational environment can be either :
Additionally, the PKI Product may include the following required external components:
-**EC.Audit** - records secure storage External hardware and software use to store audit data.
-**EC.Timesource** - A network server that synchronizes the clocks of devices within an IT infrastructure to ensure consistent and accurate timekeeping for security, logging, and operational purposes.
-**EC.KMS** - Framework and services that provide for the generation, production, establishment, control, accounting, and destruction of cryptographic keys.
-**EC.UserDirectory** - A directory server that centrally stores, organizes, and provides access to user, group, and resource information (e.g., authentication credentials, contact details) for networked systems and applications.