| Both sides previous revision Previous revision | |
| public:99_annexes:annex-b-terms-and-definitions:s:sensitive_configuration_value [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:s:sensitive_configuration_value to public:99_annexes:annex-b-terms-and-definitions:s:sensitive_configuration_value nick_dido | public:99_annexes:annex-b-terms-and-definitions:s:sensitive_configuration_value [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Sensitive Configuration Value ====== | ====== Sensitive Configuration Value ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| |
| A Sensitive Configuration Value is a [[private:99_annexes:annex-b-terms-and-definitions:c:configuration_value|Configuration Value]] requiring protection against unauthorised disclosure, alteration, substitution, destruction, or use. | A Sensitive Configuration Value is a [[public:99_annexes:annex-b-terms-and-definitions:c:configuration_value|Configuration Value]] requiring protection against unauthorised disclosure, alteration, substitution, destruction, or use. |
| |
| Sensitive Configuration Values include passwords, authentication tokens, private keys, shared secrets, personal information, proprietary information, protected network information, security settings, and values whose alteration compromises the operation or protection of a [[private:99_annexes:annex-b-terms-and-definitions:n:node|Node]]. | Sensitive Configuration Values include passwords, authentication tokens, private keys, shared secrets, personal information, proprietary information, protected network information, security settings, and values whose alteration compromises the operation or protection of a [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]]. |
| |
| Sensitivity depends upon the value’s meaning, purpose, classification, operational context, applicable [[private:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]], and consequences of compromise. A value therefore remains sensitive even when its textual or numeric representation appears innocuous. | Sensitivity depends upon the value’s meaning, purpose, classification, operational context, applicable [[public:99_annexes:annex-b-terms-and-definitions:p:policy|Policy]], and consequences of compromise. A value therefore remains sensitive even when its textual or numeric representation appears innocuous. |
| |
| Protection addresses both [[private:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]] and [[private:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]]. Some values, including public certificates and security-policy settings, require integrity protection without secrecy. Other values, including private keys and passwords, require both confidentiality and integrity protection. | Protection addresses both [[public:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]] and [[public:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]]. Some values, including public certificates and security-policy settings, require integrity protection without secrecy. Other values, including private keys and passwords, require both confidentiality and integrity protection. |
| |
| ===== Definition ===== | ===== Definition ===== |
| ===== Note ===== | ===== Note ===== |
| |
| A Sensitive Configuration Value retains its classification and handling requirements throughout acquisition, [[private:99_annexes:annex-b-terms-and-definitions:c:configuration_resolution|Configuration Resolution]], [[private:99_annexes:annex-b-terms-and-definitions:c:configuration_application|Configuration Application]], use, rotation, revocation, retention, and disposal. | A Sensitive Configuration Value retains its classification and handling requirements throughout acquisition, [[public:99_annexes:annex-b-terms-and-definitions:c:configuration_resolution|Configuration Resolution]], [[public:99_annexes:annex-b-terms-and-definitions:c:configuration_application|Configuration Application]], use, rotation, revocation, retention, and disposal. |
| |
| A protected reference, [[private:99_annexes:annex-b-terms-and-definitions:i:identifier|Identifier]], digest, token, or redacted representation supports identification and Traceability without exposing the protected value. | A protected reference, [[public:99_annexes:annex-b-terms-and-definitions:i:identifier|Identifier]], digest, token, or redacted representation supports identification and Traceability without exposing the protected value. |
| |
| A [[private:99_annexes:annex-b-terms-and-definitions:c:configuration_record|Configuration Record]] identifies the applicable protection method and protected reference rather than reproducing a confidential Sensitive Configuration Value. | A [[public:99_annexes:annex-b-terms-and-definitions:c:configuration_record|Configuration Record]] identifies the applicable protection method and protected reference rather than reproducing a confidential Sensitive Configuration Value. |
| |
| A [[private:99_annexes:annex-b-terms-and-definitions:c:credential|Credential]] or item of [[private:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material|Cryptographic Material]] constitutes a Sensitive Configuration Value when assigned to a Configuration Parameter. | A [[public:99_annexes:annex-b-terms-and-definitions:c:credential|Credential]] or item of [[public:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material|Cryptographic Material]] constitutes a Sensitive Configuration Value when assigned to a Configuration Parameter. |
| |
| ===== Example ===== | ===== Example ===== |