From security requirements, to design and verification.
From key management to device integration and operational recovery. Select the scope you need and review design, deliverables and test items together.
REQUIREMENT → DESIGN → VERIFICATION
0 / 6 items selected
Design, Deliverables and Test Scope ＋
What to Define in the Design
Target devices, communications relationships and key-identifier registration
State transitions for generation, protection, distribution, use, renewal and destruction
Policies for validity periods, suspension and renewal failures
Deliverables to Review
Key-management requirements and key policies
Detailed design of key states and workflows
Requirements-to-test traceability matrix
What to Check in Tests
Generation, distribution, renewal and destruction state transitions
Key validity periods and suspension handling
Tracing successful and failed renewal-operation results
Design, Deliverables and Test Scope ＋
What to Define in the Design
Interfaces for target identification, requests/responses and application status
Protection of offline delivery packages, and checks for export, receipt and application
Exception handling for delays, duplication, failures, disconnections and reconnections
Deliverables to Review
Device interface control document (ICD)
Online/offline key-delivery procedures
Integration and exception-test procedures and results
What to Check in Tests
Normal delivery and results of application to target devices
Duplicate requests, target mismatches and expired delivery packages
Response delays, disconnections and reconnection handling
Design, Deliverables and Test Scope ＋
What to Define in the Design
Role boundaries between KMC and Thales Luna Network HSM A700
PKCS#11 protected-key references and call permissions
Connection status, error returns and application handling
Deliverables to Review
System configuration and protection-scope design
HSM interface definition
Integration-test procedures and results
What to Check in Tests
Normal calls and protected-key references
Permission-based acceptance/rejection and error handling
Application state during disconnection and reconnection
Design, Deliverables and Test Scope ＋
What to Define in the Design
Connection authentication and protected channels for management and server communications
Management roles for certificates and trust settings
Distinguishing the roles of operational cryptographic keys and certificate lifecycles
Deliverables to Review
Connection and protected-channel interface definition
Certificate and trust-setting configuration information
Connection authentication and exception-test items
What to Check in Tests
Connection acceptance/rejection based on configured trust conditions
Handling of certificate-expiry conditions
Channel disconnection, reconnection and status checks
Design, Deliverables and Test Scope ＋
What to Define in the Design
User- and role-based access permissions for Web UI and CLI
Approval of critical operations such as key generation, distribution and destruction
Recording operators, times, targets and results, and protecting secret values
Deliverables to Review
Role/task permissions and approval conditions
Log and audit-record item design
Operations manual and access-control test items
What to Check in Tests
Allowed/disallowed users and role-based task permissions
Approval conditions for critical operations
Audit trails, log-access permissions and prevention of secret-value exposure
Design, Deliverables and Test Scope ＋
What to Define in the Design
Key-protection methods and backup scope by data type
Recovery permissions, procedures and conditions for resuming operations
Consistency of key references, policies and device states after recovery
Deliverables to Review
Backup/recovery procedures and configuration information
Recovery-test conditions and assessment criteria
Operations and change-management handover documents
What to Check in Tests
Recovery using approved procedures and permissions
Consistency of data, key references and device states after recovery
Fault recovery, reconnection and conditions for resuming operations
Discuss requirements and the scope of design, testing and operational handover based on your selections. Applicable security levels, certification scope, and performance and availability criteria are defined by project requirements.
