Assess
Migration Control Library
Structured library of Directory migration controls. Each control traces to tests, findings and evidence.
Pass126
Action required13
Critical5
Not assessed5
Exception0
12 of 12
| Method | Evidence | |||||||
|---|---|---|---|---|---|---|---|---|
| PKI-001 | Keyfactor trust chain installed | PKI | Critical | 4 | API probe | CRITICAL | 5 | 12 Sept, 01:20 |
| PKI-002 | Entrust and Keyfactor dual trust supported | PKI | Critical | 2 | Static analysis | PASS | 3 | 10 Sept, 02:20 |
| PKI-003 | No hard-coded Entrust issuer assumptions | PKI | High | 2 | Network probe | ACTION REQUIRED | — | 11 Sept, 03:20 |
| PKI-004 | 4096-bit issuing CA supported | PKI | High | 3 | Certificate inspection | PASS | 1 | 12 Sept, 04:20 |
| PKI-006 | Keyfactor root distributed | PKI | Medium | 2 | Network probe | PASS | 1 | 10 Sept, 17:05 |
| PKI-007 | Cross-certificate handled | PKI | Low | 2 | Certificate inspection | PASS | 1 | 11 Sept, 18:05 |
| PKI-008 | Policy OID validation | PKI | High | 2 | Engineer attestation | PASS | 1 | 12 Sept, 10:05 |
| PKI-009 | Chain depth limits | PKI | Low | 2 | Architecture review | PASS | 1 | 08 Sept, 11:05 |
| PKI-010 | PKI change management | PKI | Medium | 1 | Configuration scan | PASS | 1 | 09 Sept, 12:05 |
| PKI-011 | HSM key ceremony evidence | PKI | Low | 2 | API probe | PASS | — | 10 Sept, 13:05 |
| PKI-012 | CA bundle version pinned | PKI | Low | 2 | Static analysis | ACTION REQUIRED | — | 11 Sept, 14:05 |
| PKI-013 | PKI monitoring alerts | PKI | Low | 2 | Network probe | PASS | 1 | 12 Sept, 15:05 |