32   Section 7.3.6 RA IP address entity configuration should be conditional

Created: 07 Aug 2023

Status: Approval (Future Improvement)

Part: Part 9 (2023, Edition2)

Links:

Page: 59

Clause: 7.3.6

Paragraph: 1

Issue

Section 7.3.6 entity configuration states:

"In addition to the basic certificate parameters as defined in ISO/IEC 9594-8:2020 | Rec. ITU-T X.509 (2019), entity configuration data shall include the following:

- RA IP address of the organization or a domain name (such as IEC62351.LocalCA) that shall be allowed to perform PKI operations, such as CSR processing."

COMMENT: As IEC 62351-9 not only supports automated key management but also manual key management, this setting should be conditional for the case automated certificate management is supported.

Proposal

Move the "RA IP" bullet to follow after a new sentence:

"If the entity supports automated key management, then the entity configuration data shall include the following:"

- RA IP address of the organization or a domain name (such as IEC62351.LocalCA) that shall be allowed to perform PKI operations, such as CSR processing."

Discussion Created Status
- Approved during WG15 Meeting 10/2023, based on previous FDIS comment resolution discussion
- Proposal accepted
18 Oct 23 Approval (Future Improvement)
changed as wrongly indicated in previous step:

- Approved during WG15 Meeting 10/2023, based on previous FDIS comment resolution discussion
- Proposal accepted
18 Oct 23 Discussion (red)
Approved during WG15 Meeting 10/2023, based on previous FDIS comment resolution discussion
Proposal accepted
18 Oct 23 Approval (N/A)
From my point of view, the change is OK 09 Aug 23 Discussion (red)
Proposed resolution should be incorporated in document

Delete existing point "RA IP address of the organization or a domain name (such as IEC62351.LocalCA) that shall be allowed to perform PKI operations, such as CSR processing."

Include below the current bullet list:
"If the entity supports automated key management, then the entity configuration data shall include the following:

- RA IP address of the organization or a domain name (such as IEC62351.LocalCA) that shall be allowed to perform PKI operations, such as CSR processing."
07 Aug 23 Discussion (red)
Resolution was discussed during WG 15 Meeting in 05/2023 for incorporation
07 Aug 23 Accepted

 

Privacy | Contact | Disclaimer

Tissue DB v. 24.11.8.1