SID-AUDIT-04 — WSCA-BE Binary Integrity Self-Test (FPT_TST.1)
| Property | Value |
|---|---|
| Owner | platform |
| Category | technical |
| CSF Function | protect |
| Group | Audit and Monitoring Controls |
Description
The WSCA-BE (go-r2ps-service) shall verify the integrity of its own executable binary and critical configuration at startup.
Implementation requirements: (1) At build time, compute HMAC-SHA256 of the server binary and critical configuration files using a key stored in the HSM. Store the expected HMAC value as a deployment artifact. (2) At startup, before accepting any signing requests, recompute the HMAC using the HSM key and compare to the expected value. (3) If the integrity check fails: log the failure, refuse to enter operational state (fail-closed), and alert via the monitoring channel. (4) Debugger detection: detect ptrace/debugger attachment and refuse to operate if detected. (5) The self-test SHALL run before the gRPC/HTTP listener is started — no requests accepted until integrity is confirmed.
Required for NOBCCS TR 4.3 FPT_TST.1 (TSF self-test at startup) for CC evaluation of WSCA-BE.
Components
- R2PS Service
- WSCA / HSM
Source References
go-r2ps-service#16compliance/mappings/nobccs.yaml (WSCA-FPT-01)