Security Policy: Difference between revisions

Security Policy (view source)

245 bytes added , 18 August 2006

198

edits

@@ Line 331: / Line 331: @@
 ==Specification of Roles==
-The NSS cryptographic module utilizes a single role approach -- this role, called '''NSS User''', is a combination of both the User Role and the Crypto Officer Role. An NSS User has access to all services of the module and all keys stored in the data base.
+The NSS cryptographic module supports two roles. The User Role provides access to all cryptographic and general purpose services except those that perform an initialization function.
+The Crypto Officer Role is supported for installation and initialization of the module. It is assumed implicitly by requesting a service that is performed as part of installation or by requesting initialization of the module.
+An NSS User has access to all services of the module and all keys stored in the data base.
 ==Authentication Policy==