Topic

Generating and issuing certificates for authentication

Applicable to

all

History

Priority

must

Mar 2022

Certificates are generated using an evaluated certificate authority or hardware security module.

Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.

Aug 2019

Certificates are generated using an evaluated certificate authority solution or hardware security module.

Security control 1324 was modified to reference products that have been evaluated and certified against the Common Criteria.

Jul 2019

Certificates are generated using certificate authority software or a hardware security module that has completed an ACE.

2015

Certificates must be generated using a certificate authority product or hardware securitymodule that has completed a Common Criteria evaluation, an ACE and is listed on ASD’s EPL.