General
The present document specifies requirements on the content of certificates issued to natural persons. This profile builds
on IETF RFC 5280 [1] for generic profiling of Recommendation ITU-T X.509 | ISO/IEC 9594-8 [i.3].
This profile supports the requirements of EU Qualified Certificates as specified in the Regulation (EU)
No 910/2014 [i.5] as well as other forms of certificate. The scope of the present document is primary limited to
facilitate interoperable processing and display of certificate information. This profile therefore excludes support for
some certificate information content options, which can be perfectly valid in a local context but which are not regarded
as relevant or suitable for use in widely deployed applications.
The present document focuses on requirements on certificate content. Requirements on decoding and processing rules
are limited to aspects required to process certificate content defined in the present document. Further processing
requirements are only specified for cases where it adds information that is necessary for the sake of interoperability.
Certain applications or protocols impose specific requirements on certificate content. The present document is based on
the assumption that these requirements are adequately defined by the respective application or protocol. It is therefore
outside the scope of the present document to specify such application or protocol specific certificate content.
The present document specifies technical characteristics and methods of measurements for equipment implementing the
Digital Enhanced Cordless Telecommunications (DECT) common interface, as specified in the multi-part technical
specification ETSI EN 300 175 including the variants DECT Evolution and DECT ULE (see ETSI EN 300 175-1 [i.3]
for an overview).
The present document applies to the following equipment types:
a)
b)
c)
d)
e)
Fixed Part (FP);
Portable Part (PP);
Cordless Terminal Adapter (CTA);
Wireless Relay Station (WRS) (FP and PP combined);
Hybrid Part (HyP) (a PP with capability to act as a FP to provide PP to PP communication).
NOTE: This release of the standard covers the WRS type CRFP, but not the WRS type REP.
These radio equipment types are capable of operating in all or any part of the frequency bands given in table 1.
Table 1: Radiocommunications service frequency bands
Radiocommunications service
frequency bands
Transmit
Receive
1 880 MHz to 1 900 MHz
1 880 MHz to 1 900 MHz
The DECT service frequency band for transmitting and receiving for all elements is 1 880 MHz to 1 900 MHz.
National regulation can allow additional frequency bands.
DECT equipment covered by the present document is operated in accordance with ERC Decision (98)22 [i.20].
Details of the DECT Common Interface may be found in the multi-part deliverable ETSI EN 300 175 (see [1] to [4] and
[i.3] to [i.6]). Further details of the DECT system may be found in the ETSI TR 101 178 [i.1].
DECT ULE implements, in addition to the DECT Common Interface, the multi-part ETSI TS 102 939 (see ETSI
TS 102 939-1 [i.7] and ETSI TS 102 939-2 [i.8]).
The present document contains requirements to demonstrate that radio equipment both effectively uses and supports the
efficient use of radio spectrum in order to avoid harmful interference.
NOTE: The relationship between the present document and essential requirements of article 3.2 of Directive 2014/53/EU [i.10] is given in annex A.
The present document defines Product Specific Requirements for Life Cycle Assessment (LCA) of Smartphones so that
it is possible to compare the LCA between different smartphone models on SKU level (e.g. considering different
memory configurations). The present document provides a methodology for evaluating the environmental impact of
smartphones objectively and transparently and is based upon the Life Cycle Assessment (LCA) framework standardized
in ETSI ES 203 199 [1] and IEC 63366 [i.1]. The purpose of the present document is to:
• Provide smartphone-specific requirements, i.e. Product Specific Rules (PSR), in addition to those of ETSI
ES 203 199 [1] and IEC 63366 [i.1] to ensure comparability of LCA studies of smartphones on SKU level.
• Harmonize the LCAs of smartphones.
• Increase the transparency and facilitate the interpretation of LCA studies of smartphones.
• Facilitate the communication of LCA studies of smartphones on SKU level.
The present document is valid for all types of smartphones. Moreover, the present document defines a set of
requirements for which the LCA practitioners will comply. Comparisons of results from LCA studies of smartphones
which belong to the same product family, including assessments which have been performed by different organizations,
are within the scope of the present document.
The present document specifies the Service Information (SI) data which forms a part of Digital Video Broadcasting
(DVB) bitstreams, in order that the user can be provided with information to assist in selection of services and/or events
within the bitstream, and so that the Integrated Receiver Decoder (IRD) can automatically configure itself for the
selected service. SI data for automatic configuration is mostly specified within ISO/IEC 13818-1 [1] as Program
Specific Information (PSI).
The present document specifies additional data which complements the PSI by providing data to aid automatic tuning of
IRDs, and additional information intended for display to the user. The manner of presentation of the information is not
specified in the present document, and IRD manufacturers have freedom to choose appropriate presentation methods.
It is expected that Electronic Programme Guide (EPG) will be a feature of Digital TeleVision (TV) transmissions.
The definition of an EPG is outside the scope of the present document (i.e. the SI specification), but the data contained
within the SI specified in the present document may be used as the basis for an EPG.
Rules of operation for the implementation of the present document are specified in ETSI TS 101 211 [i.1].
The present document specifies technical cybersecurity product requirements and corresponding assessment criteria for
boot managers. The products with digital elements in scope, there after "the products":
• are specified within the technical description of the category of product number 8 by the Commission
Implementing Regulation (EU) 2025/2392 [i.2] as: -
"Software products with digital elements that manage the process of initial system startup after power
on/restart by initialising hardware, loading or transferring control to the operating system environment or
system resources, and selecting boot options. This category includes but is not limited to UEFI firmware,
single-stage and multi-stage boot loaders."
• are only covered within the product context described in clause 4.
The scope covers software and firmware components that manage the boot process from power-on through
establishment of the chain of trust to handoff to the boot target. Products in scope include boot management software
and firmware regardless of distribution model or integration level. These are:
• System firmware that performs hardware initialisation and boot management.
• Bootloaders that manage boot target selection, verification, and loading.
• Embedded boot firmware in IoT and embedded devices.
• Network boot implementations enabling remote boot capabilities.
• Boot managers that integrate with hardware security components for chain of trust establishment.
NOTE 1: Boot managers may be single-stage (direct loading) or multi-stage (staged verification).
NOTE 2: For microcontrollers (MCUs) and microprocessors (MPUs):
• Silicon-integrated immutable firmware: Mask ROM, fused code, or boot firmware integrated during chip
manufacturing is assessed as part of MCU/MPU hardware under semiconductor standards.
• Updateable boot managers: Boot software in flash storage (including OTP programmed post-manufacture) is
assessed using the present document when distinctly identifiable or independently updatable.
NOTE 3: Runtime services executing after boot target handoff (such as secure monitor mode handlers or attestation
services) are in scope only if they provide verification or attestation services to the boot process itself, not
to the boot target.
The present document covers those products to demonstrate compliance with essential cybersecurity requirements in the
Regulation (EU) 2024/2847 [i.1], Annex I Part I under the conditions identified in Annex A.