In early October, the LXI consortium met in person in Nashville, Tennessee. Here, further progress was made on the LXI Security Extended Function by identifying which sections of the current LXI Standard 1.5 needed to be adapted in terms of security. In addition, some sections need to be adapted due to new legislation (e.g. the California law on standard passwords) and others due to clarifications that have been included in the clarification document since the release of version 1.5. These changes will be incorporated into an LXI specification version 1.6, which will then also contain the LXI Security Extended Function.
The next steps are to continue to identify security-relevant sections in the currently existing extended functions and then to write the actual new LXI Security Extended Function.
In terms of security, TSEP had the opportunity to demonstrate the first prototype of an LXI Security Extended Function for the LXI reference design. The prototyping included the Public Trust Model for the LXI web server, which allows the LXI reference design to obtain certificates for its web server and update them as needed as long as an internet connection is available. An option for no internet connection is still under discussion and will follow.
Another topic is compliance testing. Initial thoughts and ideas have been brought to the table to ensure that the test procedure is clarified in parallel with the development and writing of the LXI Security Extended Function. These testing procedures are to be integrated into the TSEP Kerberos.
Clock Synchronization conformance testing is currently being integrated into the TSEP Kerberos and is expected to be approved by the LXI consortium at the next face-to-face meeting in Phoenix for test houses and possibly even for self-certification.
In order to simplify the application for LXI conformance and to shorten response times, the application form will be re-evaluated. It is expected that future LXI conformance applications will be submitted via a web application form instead of filling out the existing application form and sending it to the LXI Conformance Chair.
