Commit c6f06f2f authored by Sammy Haddad's avatar Sammy Haddad
Browse files

Removing EC.KMS to introduce the interface I.ExternalCryptographicService

parent fb57e334
Loading
Loading
Loading
Loading
+1 −2
Original line number Diff line number Diff line
@@ -643,6 +643,7 @@ The different elements are accessible through the interfaces defined below:
- **I.CertifcateStatus**	- Online certificate status requests and dissemination.
- **I.RevocationManagement**	- Online access to revocation management services (certificate revocation requests).
- **I.NetworkServices**	- Interface to local network services  (secure storage, timesources, user directory.
- **I.ExternalCryptographicService** - Interface to SCD or KMS, not part of the PKI product.

Logical environments include the connected systems around the main product that shape how it operates in its environment. The trusted boundary is affected by potential third party software that runs on the product, data links to the outside world using radio interfaces, and user permissions and access control.

@@ -665,7 +666,6 @@ A cloud service provider should have strong physical security measures in place,
For the physical operation environment, the following environments are addressed for cloud service (RDPSs):
- **POE.FullyControlled.** - fully controlled physical operational environment


### 4.3.3 Logical/Software environment

The security aspect of Logical/Software  operational environment can be either :
@@ -675,7 +675,6 @@ The security aspect of Logical/Software operational environment can be either :
Additionally, the PKI Product may include the following required external components:
- **EC.Audit** - records secure storage	External hardware and software use to store audit data.
- **EC.Timesource** - A network server that synchronizes the clocks of devices within an IT infrastructure to ensure consistent and accurate timekeeping for security, logging, and operational purposes.
- **EC.KMS** - Framework and services that provide for the generation, production, establishment, control, accounting, and destruction of cryptographic keys. 
- **EC.UserDirectory** - A directory server that centrally stores, organizes, and provides access to user, group, and resource information (e.g., authentication credentials, contact details) for networked systems and applications.

### 4.3.4 Connectivity aspects