A key-injection facility that loads keys with PC-based software or similar devices such as modified PEDs, where clear-text keys or components sit in memory outside an SCD's secure boundary, applies the additional controls; from 1 January 2021 no entity loading keys on behalf of others may use PC-based methods, and from 1 January 2023 no entity loading only the devices it processes for may use them either. In particular: the PC stands alone, with no modem and no LAN, WAN or wireless capability, is used for key loading alone with no other application installed, and sits in a physically secure room, dedicated to key loading, that satisfies Requirement 32-9; all key-loading hardware, the PC included, is under dual control, and injection takes place only while two or more people are in the room the whole time; if only one person would be left, everybody leaves until two can be present; access to and use of the PC are monitored and each key load is logged, with logs retained for three years or more and reviewed weekly or more often by an authorised person who has access to neither the room nor the PC, the review being documented; the logs record badge and manual entries to the room, operating-system and application sign-ons, and the IDs and serial numbers of the devices loaded together with the date, time and operator, and video surveillance footage is retained for 45 days or more; before each use the cables and the key-loading device are checked for tampering, every session begins with the device switched on from cold, the software writes no clear-text value to portable media or unsecured devices, clear-text keys are stored only inside an SCD, the PC's system administrators are not authorised to enter the room (they may only be escorted) and hold no credentials for the injection application, and injection staff hold no administrator rights on the PC, whether in the operating system or in the application.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.