Daryo Mar 22, 2018:

yes, it does confirm my hunch do the testing using "real" cryptographic keys, "real" is the sense that there are keys that really correspond to real vendors, so the generated "test tokens" should be working in consumers' meters (as long it's the [crypto] key of the right vendor for that meter, of course)

Cassandra Delacote (asker) Mar 20, 2018:

Is that a long enough portion of text?

Cassandra Delacote (asker) Mar 20, 2018:

Hi Daryo,

• Manage the updated KMC project
• It may be necessary to update the IE62055-41 specification to allow for two vending keys to be resident in the SM for key-change as well as the generation of vending tokens. This is to allow smaller groups of meters within an SGC to be key-changed instead of an entire SGC at the same time.

4.2 Secure module suppliers
Secure module suppliers will be required to upgrade security modules to cater for the rollover bit as well as the handling of multiple base dates. The SM supplier should also be in a position to communicate with their customers to inform them of the requirement to upgrade their SM's.
4.2.1 Checklist of actions required
• Upgrade SM to cater for rollover bit and multiple base dates
• Test SM - initialization, key-loading, and new firmware functionality to STS600-4-2 specification
• Certify SM to CTS spec for STS600-4-2 (STS531-8-2)
• Field test SM - code at KMC and test tokens with live keys
• Deploy SM to the field once KMC deployed and vending systems have beenupdated

4.4.1 Checklist of actions required
• New KMC training
• Field test - code TSM250 SM's. Generate key with rollover bit set, test on live meter

Daryo Mar 20, 2018:

your ST is ambiguous it could be about the kind of "live keys" as the ones described in the Wikipedia entry you found (in which case it would be a third meaning for "key" in your ST!) but ** not necessarily **

can you give a larger extract of the ST? You seem to be translating an already published website, so why not simply give a link to the whole web page? or the whole document?