119   Test case 7.2.3.2.8/7.2.3.2.9 – Send error message with ERR = 9 or 10

Created: 24 Jul 2025

Status: Approval (Editoral)

Part: Part 100-1 (2018, Edition 1)

Links:

Page: 45-46

Clause: 7.2.3.2.8/7.2.3.2.9

Paragraph: Table 12 – User management: Controlled station res

Issue

Unlike the public-key method, the S_US_NA_1 message from the controlling station in the symmetric-key method does not contain any certification data, but instead a MAC (Message Authentication Code), see the last column of table 18 in IEC TS 62351-5:2013. According to this table 18, the MAC code is calculated from the data in the S_US_NA_1 message.
The controlled station cannot compare the received data (for example such as the user role) with the certification data (in this case the MAC code) to determine the difference.
It can therefore not detect ERR = 10 for test case 7.2.3.2.8. If the self-calculated MAC code in the controlled station differs from the received MAC code, ERR = 9 is always issued.

Proposal

Apply test case 7.2.3.2.8 only for public-key methods.