SMETS requirement clause

4.5.3.18 — Replace GSME Security Credentials

18 technical records havebeen identified at this reference: 17 Section 20 items and 1 explicit clause reference. The links below describe documented interfaces and observable effects; they do not assert compliance with the source requirement.

GSMEAlert touchpoint onlyNo Section 20 bridge

17

Atomic items

Section 20 objects, attributes or methods at this source reference.

5

Documented touchpoints

Typed relationships supported by source mapping rows.

0

Linked SRVs

Unique retained services reached through exact control rows.

5

Linked alerts

Explicit requirement-to-alert references.

The method to replace one or more of the Known Remote Party Security Credentials held on a Device.

Object: PublicKeySecurityCredentialsStore
Attribute / method: method: replace
Interface disposition: E
Category: Method
Section 20 meaning: The method to replace one or more of the Known Remote Party Security Credentials held on a Device.

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The date-time at which the replacements are to be attempted (only valid for replacement of supplier credentials)

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: activateNextDateTime
Interface disposition: E
Category: Method Input
Section 20 meaning: The date-time at which the replacements are to be attempted (only valid for replacement of supplier credentials)

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The Certificate to be processed by the replaceSecurityCredentials method

Object: DeviceSecurityCredentials
Attribute / method: methodInput: certificate
Interface disposition: E
Category: Method Input
Section 20 meaning: The Certificate to be processed by the replaceSecurityCredentials method

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The credentials to be used in the replacements

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: replacementCredentials[1..9].credential
Interface disposition: E
Category: Method Input
Section 20 meaning: The credentials to be used in the replacements

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The credentials to be used in certification path validation of the replacements

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: certificationPathCredentials[1..9].credential
Interface disposition: E
Category: Method Input
Section 20 meaning: The credentials to be used in certification path validation of the replacements

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

Which role is undertaking which kinds of replacements

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: replacementMode
Interface disposition: E
Category: Method Input
Section 20 meaning: Which role is undertaking which kinds of replacements

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

A key used only in contingency recovery situations

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: symmetricKey
Interface disposition: E
Category: Method Input
Section 20 meaning: A key used only in contingency recovery situations

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

Only present (and set to disapply) where such checks are not to be applied by the Device

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: applyTime BasedChecks
Interface disposition: E
Category: Method Input
Section 20 meaning: Only present (and set to disapply) where such checks are not to be applied by the Device

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The values of to be used in re-setting anti replay counters on the Device for Remote Party Roles affected by this Command

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: remotePartyRole[1..6].antiReplayCounters
Interface disposition: E
Category: Method Input
Section 20 meaning: The values of to be used in re-setting anti replay counters on the Device for Remote Party Roles affected by this Command

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The Trust Anchor Cell in to which the corresponding certificate's details are to be placed.

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodInput: replacementCredentials[1..9].targetTrustAnchorCell
Interface disposition: E
Category: Method Input
Section 20 meaning: The Trust Anchor Cell in to which the corresponding certificate's details are to be placed.

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The originator counter from the command that triggered these replacments

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodOutput: originatorCounter
Interface disposition: E
Category: Method Output
Section 20 meaning: The originator counter from the command that triggered these replacments

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

Which role undertook which kinds of replacements

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodOutput: replacementMode
Interface disposition: E
Category: Method Output
Section 20 meaning: Which role undertook which kinds of replacements

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The values used in re-setting anti replay counters on the Device for Remote Party Roles affected by this change

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodOutput: remotePartyRole[1..6].antiReplayCounters
Interface disposition: E
Category: Method Output
Section 20 meaning: The values used in re-setting anti replay counters on the Device for Remote Party Roles affected by this change

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The Entity Identifier of the Remote Party which was in this cell before any replacement

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodOutput: remotePartyRoleDetailRequired[1..6].trustAnchorCell[1..3].existingRemotePartyIdentifier
Interface disposition: E
Category: Method Output
Section 20 meaning: The Entity Identifier of the Remote Party which was in this cell before any replacement

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The SHA-1 hash of the public key which was in this cell before any replacement

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodOutput: remotePartyRoleDetailRequired[1..6].trustAnchorCell[1..3].existingPublicKeyIdentifier
Interface disposition: E
Category: Method Output
Section 20 meaning: The SHA-1 hash of the public key which was in this cell before any replacement

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The Entity Identifier of the Remote Party which was to be placed in this cell

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodOutput: remotePartyRoleDetailRequired[1..6].trustAnchorCell[1..3].replacingRemotePartyIdentifier
Interface disposition: E
Category: Method Output
Section 20 meaning: The Entity Identifier of the Remote Party which was to be placed in this cell

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

The SHA-1 hash of the public key which was to be placed in this cell

Object: PublicKeySecurityCredentialsStore
Attribute / method: methodOutput: remotePartyRoleDetailRequired[1..6].trustAnchorCell[1..3].replacingPublicKeyIdentifier
Interface disposition: E
Category: Method Output
Section 20 meaning: The SHA-1 hash of the public key which was to be placed in this cell

No GBCS or SRV bridge is recorded for this item in the current Section 20 mapping. This is an evidence status, not a statement of non-compliance.

This source clause is explicitly referenced by the GBCS device alert table.

Category: Alert reference

Documented touchpoints

Alert touchpointGSME0x8F4FDevice's own Key Agreement Certificate replacement succeeded
Alert touchpointGSME0x8F4CDevice's own Digital Signing Certificate replacement failed
Alert touchpointGSME0x8F4EDevice's own Key Agreement Certificate replacement failed
Alert touchpointGSME0x8F70Update Security Credentials
Alert touchpointGSME0x8F4DDevice's own Digital Signing Certificate replacement succeeded

How to read this page

Evidence is kept at record level

A source clause can contain several separately mapped Section 20 items and an explicit alert reference. One item may be read by an SRV, another updated by a different service, and another have only an Alert or local-HAN path. Accordingly, the clause summary does not collapse those distinctions into a single covered or uncovered result.