General-purpose computers are not used to generate keys where a secret or private key or component would sit unencrypted in memory beyond an SCD's tamper-protected perimeter; a computer set aside only for generating or loading keys may be used if all other requirements, Requirement 5 and the Requirement 13 controls included, are satisfied, and computers that only administer SCDs or have no way to reach clear-text keys fall outside scope.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.