DMTF’s Security Protocols and Data Models Working Group recently released an Authorization Work-in-Progress (WIP) presentation that previews a new Authorization Specification (DSP0289) slated for future release. This WIP presentation aims to help address authorization uniformly across SPDM and PMCI standards, DMTF alliance partners, and the industry.

Click here to view the presentation.

This is dependent on the implementation of the Security Protocol and Data Model (SPDM) Specification (DSP0274) and Secured Messages using SPDM Specification (DSP0277). These specifications – developed by DMTF’s Security Protocols and Data Models Working Group – continue to incorporate the input of the organization’s Alliance Partners.

SPDM is looking for feedback regarding the following:

• We believe that the change to DSP0277 v2.0 does not affect the data plane; is this a valid assumption?
• Do we need to add categories for policy groupings?
• Does this meet your authorization needs?
• Is requiring an SPDM-secured session acceptable?

Feedback may be submitted via a SPDM Working Group representative or our website at https://www.dmtf.org/standards/feedback/.

To learn more about the SPDM Working Group or to get involved in this work, please visit https://www.dmtf.org/standards/spdm.