Skip to content
Documentation Menu

TC_M_31_CS — Install CA certificate - AdditionalRootCertificateCheck - Reconnect using new CSMS Root - Fallback

TC_M_31_CS — Install CA certificate - AdditionalRootCertificateCheck - Reconnect using new CSMS Root - Fallback

mechanism

Source: OCPP 2.0.1 Part 6 — Test Cases (Core & Advanced Security, FINAL, 2023-06-30) — Functional block M. ISO 15118 CertificateManagement, page 275.

Identification

FieldValue
Test case nameInstall CA certificate - AdditionalRootCertificateCheck - Reconnect using new CSMS Root - Fallback; mechanism
Test case IdTC_M_31_CS
Use case Id(s)M05
Requirement(s)M05.FR.14
System under testCharging Station
Functional blockM. ISO 15118 CertificateManagement

Description

The CSMS is able to request the Charging Station to install new Root CA certificates using the InstallCertificateRequest message.

Purpose

To verify if the Charging Station is able to reconnect to the CSMS using the old CSMS Root certificate, when validating the CSMS certificate using the new CSMS Root certificate fails.

Prerequisite(s)

  • The Charging Station has the configuration variable AdditionalRootCertificateCheck implemented with value true
  • The at the OCTT configured new CSMSRootCertificate must be signed by the old CSMS Root certificate.

Before (Preparations)

Configuration State:

  • N/a

Memory State:

  • CertificateInstalled for certificateType CSMSRootCertificate and certificate <Configured (new) CSMS Root certificate 2>

Reusable State(s):

  • N/a

Main (Test scenario)

Charging StationCSMS
2. The Charging Station responds with a ResetResponse1. The OCTT sends a ResetRequest; with type OnIdle
4. During the TLS handshake the Charging Station validates the CSMS certificate.; Note(s):; - This connection attempt fails, because the Charging Station will use the new CSMS Root certificate to validate the CSMS certificate.3. During the TLS handshake the OCTT provides a CSMS certificate which is signed by the <Configured old CSMS Root certificate>
5. The Charging Station re-validates the CSMS certificate.; Note(s):; - This connection attempt succeeds, because the Charging Station will now use the old CSMS Root certificate to validate the CSMS certificate.
6. Execute Reusable State Booted
8. The Charging Station responds with a GetInstalledCertificateIdsResponse7. The OCTT sends a GetInstalledCertificateIdsRequest; with certificateType is CSMSRootCertificate

Tool validations

Step 2:

Message ResetResponse

  • status Accepted

Step 8:

Message: GetInstalledCertificateIdsResponse

  • status must be Accepted
  • certificateHashDataChain must contain an entry with following values:
  • certificateType is CSMSRootCertificate
  • certificateHashData contains <HashData from configured old CSMS Root certificate>

Post scenario validations

  • N/a