BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

8.1.4 Keying-Material Installation Function

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 5 against SP 800-57 Part 1 Rev. 4
All changes in this version
modified 8 Transition: A transition plan should be developed and followed so that the changeover part of 8.1

Title

Keying-Material Installation Function

Control changed

Before · SP 800-57 Part 1 Rev. 4

The security of keying-material installation is crucial to the security of a system. For this function, keying material is installed for operational use within an entity’s software, hardware, system, application, cryptographic module, or device using a variety of techniques. Keying material is installed during initial set up, when new keying material is added to the existing keying material, and when existing keying material is replaced (e.g., via re-keying or key derivation − see Sections 8.2.3 and 8.2.4 ). The process for the initial installation of keying material (e.g., by manual entry, electronic key loader, or a vendor during manufacture) shall include the protection of the keying material during entry into a software/hardware/system/application/device/cryptographic module, taking into account the requirements of [FIPS140] and its differing requirements for the different levels of protection, and include any additional procedures that may be required. Many applications or systems are provided by the manufacturer with keying material that is used to test that the newly installed application/system is functioning properly. This test keying material shall not be used operationally.

After · SP 800-57 Part 1 Rev. 5

The security of keying-material installation is crucial to the security of a system, whether the keying material is generated within the system (e.g., in the system’s cryptographic module) or generated within another system and subsequently installed in the (target) system. For this function, keying material is installed for operational use within an entity’s software, hardware, system, application, cryptographic module, or device using a variety of techniques. Keying material is installed during initial set up,setup when new keying material is added to the existing keying material, and whenthe existing keying material is replaced (e.g., via re-keying or key derivation −; see Sections 8.2.3 and 8.2.4 ). The process for the initial installation of keying material (e.g., by manual entry, using an electronic key loader, or a vendor during manufacture) shall include the protection of the keying material during entry into a software/, hardware/, system/, application/, device/, or cryptographic module, − taking into account the requirements of [FIPS140]FIPS 140 and its differing requirements for the different levels of protection, − and include any additional procedures that may be required. Many applications or systems are provided by the manufacturer with keying material that is used to test that the newly installed application/system is functioning properly. This test keying material shall not be used operationally.