@@ -395,28 +395,28 @@ A single box PKI solution wherein one or more of the examples above are deployed
Products with digital elements used as part of a public key cryptography scheme to manage asymmetric cryptographic keys and digital certificates, including their creation, issuance, distribution, validation, renewal, storage or revocation, support the functions outlined in this clause.
-**F.PublicPrivateKeyPair_generation**: Generates a public-private key pair.
-**F.PublicPrivateKeyPairGen**: Generates a public-private key pair.
> - **NOTE 1**: This function may be specialized to address use cases for generation using a Secure Cryptographic Device (SCD) or without using an SCD.
-**F.SCD_Based_KeyPair_generation**: Request the generation of a public-private key pair from an external SCD.
-**F.None_SCD_Based_KeyPair_generation**: Generate a public-private key pair.
-**F.SCD_Based_KeyManagement**: Request key suppression, export, or renewal from the SCD.
-**F.None_SCD_Based_KeyManagement**: Suppress, export, or renew software keys.
-**F.SCD_BasedKeyPairGen**: Request the generation of a public-private key pair from an external SCD.
-**F.NoneSCD_BasedKeyPairGen**: Generate a public-private key pair.
-**F.SCD_BasedKeyManagement**: Request key suppression, export, or renewal from the SCD.
-**F.NoneSCD_BasedKeyManagement**: Suppress, export, or renew software keys.
-**F.UserAccountManagement**: Create, modify, assign rights to, and modify the different user accounts.
-**F.PrivateKeyExport**: Private keys, secret keys, or critical data can be encrypted and then exported in the form of an encrypted file.
-**F.OfficerCertificateGenerationApproval**: Authorized users can approve and execute this issuance when certificates are issued.
-**F.OfficerCertGenApproval**: Authorized users can approve and execute this issuance when certificates are issued.
-**F.CertificateProfileManagement**: Administration functions to define the format and default values of certificates to be signed.
-**F.PseudonymCertificateIssuance**: Issue pseudonym certificates derived from long-term certificates. These certificates shall not include user identification data.
-**F.SubjectCertificate_signatureCreation**: Creates and signs subject certificates using the product's private key.
-**F.PseudonymCertIssuance**: Issue pseudonym certificates derived from long-term certificates. These certificates shall not include user identification data.
-**F.SubjectCertSignCreation**: Creates and signs subject certificates using the product's private key.
> - **NOTE 2**: The policy frameworks of eIDAS and C-ITS identify the use of protection profiles in support of signature creation. In particular, the European Commission's eIDAS Dashboard [https://eidas.ec.europa.eu/efda/home] identifies a list of Qualified Signature/Seal Creation Devices and Secure Signature Creation Devices [https://eidas.ec.europa.eu/efda/browse/notification/qscd-sscd]. For C-ITS, the Security and Certificate policy documents [[i.11](#_ref_i_11)], [[i.12](#_ref_i_12)] identify specific Protection Profiles as identified in references [**TBD**] and [**TBD**].
-**F.CertificateDissemination**: Distributes signed certificates to subscribers.
-**F.Certificate_status**: Maintains certificate status information (e.g., active, expired, revoked).
-**F.CertificateStatus**: Maintains certificate status information (e.g., active, expired, revoked).
-**F.PKC_storage_management**: Stores received PKCs and makes them available to relying parties.
-**F.SignedArtefactDissemination**: Distributes signed artefacts to subscribers.
-**F.Revocation_management**: Processes revocation reports (e.g., CRLs) to determine the status of PKCs and may provide updates to the certificate status service (e.g., if the private key is withdrawn and the product invalidates its public key).
-**F.RevocationManagement**: Processes revocation reports (e.g., CRLs) to determine the status of PKCs and may provide updates to the certificate status service (e.g., if the private key is withdrawn and the product invalidates its public key).
-**F.AuditEventManagement**: Configuration of audit events to be stored and their associated format. Includes search or erasure capabilities for stored audit events.
-**F.Logging_of_security_events**: Logs events as per the configuration enabled by F.Log_management.
-**F.Log_management**: Configuration of audit events to be stored and their associated format. Includes search or erasure capabilities for stored audit events.
-**F.Network_Configuration**: Set up network addresses and protocols for the different product network interfaces (management, certificate generation/revocation/status requests, etc.).
-**F.LoggingOfSecurityEvents**: Logs events as per the configuration enabled by F.Log_management.
-**F.LogManagement**: Configuration of audit events to be stored and their associated format. Includes search or erasure capabilities for stored audit events.
-**F.NetworkConfiguration**: Set up network addresses and protocols for the different product network interfaces (management, certificate generation/revocation/status requests, etc.).
