Loading EN-304-624.md +44 −0 Original line number Diff line number Diff line Loading @@ -2029,6 +2029,50 @@ The validity of the cryptographic mechanisms used to encure those funtions is co - System logs. - Test records. ### 6.7.2 INT - Certificate signing - REFERENCE: ACC-PKI-INT-06 - OBJECTIVE: - Verify that certificate signatures are created exclusively using an SCD. - PREPARATION: - Certificate signing architecture documentation. - SCD integration documentation. - ACTIVITIES: - Generate certificate signing requests. - Observe certificate signing operations. - Verify that private signing keys remain within the SCD. - Attempt signing operations without the SCD. - VERDICT: - SUCCESS: Certificate signatures are generated exclusively through the SCD. - FAIL: Certificate signatures can be generated outside the SCD. - EVIDENCE: - Architecture documentation. - SCD logs. - Certificate generation logs. - Test records. ### 6.7.3 INT- CRL signing - REFERENCE: ACC-PKI-INT-07 - OBJECTIVE: - Verify that CRL signatures are created exclusively using an SCD. - PREPARATION: - Obtain CRL signing documentation. - Obtain SCD integration documentation. - ACTIVITIES: - Generate CRLs. - Observe signing operations. - Verify that signing keys remain within the SCD. - Attempt CRL generation without the SCD. - VERDICT: - SUCCESS: CRL signatures are generated only through the SCD. - FAIL: CRL signatures can be generated outside the SCD. - EVIDENCE: - CRL generation logs. - SCD logs. - Architecture documentation. - Test reports. ## 6.8 Data minimisation ### 6.8.1 General Loading Loading
EN-304-624.md +44 −0 Original line number Diff line number Diff line Loading @@ -2029,6 +2029,50 @@ The validity of the cryptographic mechanisms used to encure those funtions is co - System logs. - Test records. ### 6.7.2 INT - Certificate signing - REFERENCE: ACC-PKI-INT-06 - OBJECTIVE: - Verify that certificate signatures are created exclusively using an SCD. - PREPARATION: - Certificate signing architecture documentation. - SCD integration documentation. - ACTIVITIES: - Generate certificate signing requests. - Observe certificate signing operations. - Verify that private signing keys remain within the SCD. - Attempt signing operations without the SCD. - VERDICT: - SUCCESS: Certificate signatures are generated exclusively through the SCD. - FAIL: Certificate signatures can be generated outside the SCD. - EVIDENCE: - Architecture documentation. - SCD logs. - Certificate generation logs. - Test records. ### 6.7.3 INT- CRL signing - REFERENCE: ACC-PKI-INT-07 - OBJECTIVE: - Verify that CRL signatures are created exclusively using an SCD. - PREPARATION: - Obtain CRL signing documentation. - Obtain SCD integration documentation. - ACTIVITIES: - Generate CRLs. - Observe signing operations. - Verify that signing keys remain within the SCD. - Attempt CRL generation without the SCD. - VERDICT: - SUCCESS: CRL signatures are generated only through the SCD. - FAIL: CRL signatures can be generated outside the SCD. - EVIDENCE: - CRL generation logs. - SCD logs. - Architecture documentation. - Test reports. ## 6.8 Data minimisation ### 6.8.1 General Loading
