Skip to content
Documentation Menu

TC_L_06_CS — Secure Firmware Update - InvalidSignature

TC_L_06_CS — Secure Firmware Update - InvalidSignature

Source: OCPP 2.0.1 Part 6 — Test Cases (Core & Advanced Security, FINAL, 2023-06-30) — Functional block L. FirmwareManagement, page 244.

Identification

FieldValue
Test case nameSecure Firmware Update - InvalidSignature
Test case IdTC_L_06_CS
Use case Id(s)L01
Requirement(s)L01.FR.01,L01.FR.03,L01.FR.04,L01.FR.10,L01.FR.20
System under testCharging Station
Functional blockL. FirmwareManagement

Description

The CSMS is able to request the Charging Station to securely download and install a new firmware by sending an UpdateFirmwareRequest with a signingCertificate.

Purpose

To verify if the Charging Station is able to identify if the signature is invalid and report this to the CSMS.

Prerequisite(s)

A file server has been setup according to the (by the Charging Station) supported file transfer protocol(s), indicated by the configuration variable FileTransferProtocols.

Before (Preparations)

Configuration State:

  • <Configured invalid firmware signature> should be a real signature

Memory State:

  • N/a

Reusable State(s):

  • N/a

Main (Test scenario)

Charging StationCSMS
2. The Charging Station responds with a UpdateFirmwareResponse1. The OCTT sends a UpdateFirmwareRequest; with firmware.installDateTime <Current DateTime - 2 hours> firmware.location <Configured firmware_location> firmware.retrieveDateTime <Current DateTime - 2 hours> firmware.signingCertificate <Configured signingCertificate> firmware.signature <Configured invalid firmware signature>
3. The Charging Station sends a FirmwareStatusNotificationRequest.4. The OCTT responds with a FirmwareStatusNotificationResponse.
5. The Charging Station sends a FirmwareStatusNotificationRequest.6. The OCTT responds with a FirmwareStatusNotificationResponse.
7. The Charging Station sends a FirmwareStatusNotificationRequest.8. The OCTT responds with a FirmwareStatusNotificationResponse.
9. The Charging Station sends a SecurityEventNotificationRequest.10. The OCTT responds with a SecurityEventNotificationResponse.

Tool validations

Step 2:

Message UpdateFirmwareResponse

  • status Accepted

Step 3:

Message FirmwareStatusNotificationRequest

  • status Downloading

Step 5:

Message FirmwareStatusNotificationRequest

  • status Downloaded

Step 7:

Message FirmwareStatusNotificationRequest

  • status InvalidSignature

Step 9:

Message SecurityEventNotificationRequest

  • type InvalidFirmwareSignature

Post scenario validations

  • N/a