Import: RSA 1024-4096 key size

Yes

RSA 1024, 2048 and 4096 bit public keys must be supported. Any other sizes are optional.

Import of RSA public key less than 1024 or greater than 4096 bits to be rejected with an informative error.

Import: Must have private key

Yes

Must be supplied.

Reject and informative error that private key has not been supplied

Import: Certificate checks

Yes

Minimum checks for:

Reject and informative error if a check fails

Import: Certificate up to 4KB

Yes

Certificates can be varying sizes

Import: Formats

Yes

NOTE that ONLY PKCS#12 file format is acceptable according to 147434–030–P1, however we cannot control what format customers receive their certificates in, hence all should be supported

Import: Other certificates in same file

No

Informative warning that other certificates have not been imported

View: TCS Certificate

Yes

Minimum viewable attributes (From CEC016: 147434–030–P1):

Warnings/errors as per 147434–080–P1:

Renew existing:

Yes

Regenerate CA keeping all keys and other contents same except:

Can this be done to imported CAs or just internally generated ones?

Create new:

Yes

Regenerate CA, including keys

Export: Formats

Yes

Private key must not be exportable

Export formats: