Only required if credentialsReplacementMode = anyByContingency (when it is always plaintextSymmetricKey required) Only required if the Device is to ignore time when undertaking Certification Path Validation, in applyTimeBasedCPVChecks which case it needs to have the value ‘disapply’ For a Communications Hub, always present. authorisingRemotePartyTACellIdentifier For all other Devices, always present unless the Access Control Broker is replacing its own credentials (in which case it should be omitted) Always required authorisingRemotePartySeqNumber If the Command is to effect a change of control, then newTrustAnchorFloorSeqNumber newRemotePartyFloorSeqNumber should be included. It can be present in all other situations Only required on Change of Supplier where the new Supplier has decided to use a different newRemotePartySpecialistFloorSeqNumber sequence of Originator Counters for prepayment top ups. Should be present if one role (e.g. recovery, transitionalCoS) is changing credentials for otherRemotePartySeqNumberChanges another role or roles (e.g. supplier). In such cases, this should be present to set Protection Against Replay counters for that other role or roles Table 13.3.5.12: Requirements for AuthorisingRemotePartyControl elements
plaintextSymmetricKey Only required if credentialsReplacementMode = anyByContingency (when it is always required) applyTimeBasedCPVChecks Only required if the Device is to ignore time when undertaking Certification Path Validation, in which case it needs to have the value ‘disapply’ authorisingRemotePartyTACellIdentifier For a Communications Hub, always present. For all other Devices, always present unless the Access Control Broker is replacing its own credentials (in which case it should be omitted) authorisingRemotePartySeqNumber Always required newRemotePartyFloorSeqNumber If the Command is to effect a change of control, then newTrustAnchorFloorSeqNumber should be included. It can be present in all other situations newRemotePartySpecialistFloorSeqNumber Only required on Change of Supplier where the new Supplier has decided to use a different sequence of Originator Counters for prepayment top ups. otherRemotePartySeqNumberChanges Should be present if one role (e.g. recovery, transitionalCoS) is changing credentials for another role or roles (e.g. supplier). In such cases, this should be present to set Protection Against Replay counters for that other role or roles Table 13.3.5.12: Requirements for AuthorisingRemotePartyControl elements