+SYS.2.1.A35 Active Administration of Root Certificates (H)

SYS.2.1.A35 Active Administration of Root Certificates (H)

As part of the procurement and installation of clients, the root certificates required for their operation SHOULD be documented. Only the previously documented root certificates required for operation SHOULD be present on clients. Regular checks SHOULD be performed as to whether existing root certificates still comply with the respective organisation’s requirements. All certificate stores available on an IT system (e.g. UEFI certificate stores, certificate stores of web browsers) SHOULD be included in these checks.

1. Forbhreathnú

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Rialacháin ghaolmhara

Rialacháin

Saincheisteanna nasctha

Naisc
blocks G 0.14 Interception of Information / Espionage
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.40 Denial of Service