Enabling Robotics for SDEP

Date of latest update
Type
Change
ID
R0161
Change Category
Change Path
Priority
Urgent
No
Latest Update
24/03/26 - This Change is on hold pending the outcome of R0122 - SDEP Review Improvements
Summary
The Secure Data Exchange Portal (SDEP) is a mailbox that enables the transfer of sensitive customer related data in a way that ensures data is safe and secure. Suppliers are obliged to send and receive queries and escalations via the SDEP. Unfortunately, the SDEP has issues in bulk resolving processes which could be solved by the removal of the prohibition of the use of robotics. For example, there is no function to be able to retrieve cases specific to each team, work these and then automatically issue a response. Currently, to get the same kind of functionality, an agent or team lead would need to manually process. In another scenario, under REC schedule 30, as part of each of the processes, we are obliged to issue an escalation where there has been no response within set timeframes. Prior to SDEP implementation, we would be able to issue email escalations automatically where there was an absence of a response flow. With the SDEP this process is now manual: an agent will need to sign in to ECOES, navigate to the appropriate module, and input the data.
Proposer
David Morley
Impacted Consumers
Implementation Status
Date Raised
Fuel
REC Decision Maker
Date of Update to Priority
Solution Development
Problem Statement
The Secure Data Exchange Portal (SDEP) is a mailbox that enables the transfer of sensitive customer related data in a way that ensures data is safe and secure. Suppliers are obliged to send and receive queries and escalations via the SDEP. Unfortunately, the SDEP has issues in bulk resolving processes which could be solved by the removal of the prohibition of the use of robotics.

For example, there is no function to be able to retrieve cases specific to each team, work these and then automatically issue a response. Currently, to get the same kind of functionality, an agent or team lead would need to manually process.

In another scenario, under REC schedule 30, as part of each of the processes, we are obliged to issue an escalation where there has been no response within set timeframes. Prior to SDEP implementation, we would be able to issue email escalations automatically where there was an absence of a response flow. With the SDEP this process is now manual: an agent will need to sign in to ECOES, navigate to the appropriate module, and input the data.
CP Form Enabling Robotics for SDEP
Company Name
OVO Energy
Review status
Review required

House Keeping Amendment to the PARC

Date of latest update
Type
Change
ID
R0159
Change Category
Change Path
Priority
Urgent
No
Latest Update
This change was implemented as part of the the Extraordinary release on 28 March 2024.
Summary
The Code Manager has identified a typographical error in the approved legal text for the Performance Assurance Report Catalogue (PARC) as part of the implementation of R0149 Prepayment Levelisation. In the PARC drafting, R0147 has specified the Code Manager (RTS) as providing the new data submission report that is part of the R0147 solution. However, RTS will be acting for RECCo in provision of this report and not RTS as the Code Manager.
Proposer
Holly Law
Change Plan

Final Change Report Issued

Not Started

Start:

07 Mar 2024

Due:

14 Mar 2024

Completion:

14 Mar 2024

Responsible Committee Decision

Not Started

Start:

14 Mar 2024

Due:

26 Mar 2024

Completion:

26 Mar 2024
Status
Implementation Date
Status Live
EMAR Version 28.03.2024_live
Implementation Status
Date Raised
REC Decision Maker
Lead Analyst
holly.law
Date of Update to Priority
Solution Development
Proposed Solution Document
Document title
Copy of RECPAB_23_Performance Assurance Report Catalogue V5.1.1 Redline (1).xlsx
Archive
Off
Problem Statement
This Housekeeping Change Proposal seeks to make typographical corrections that have been identified and improve consistency across the REC.
Performance Assurance Report Catalogue
R0159 - Housekeeping Change Report v1.1- APPROVED
Company Name
Code Manager RPS
Review status
Review required

Amendment to the ‘Supplier Registration Report (MAP)’ report methodology

Date of latest update
Type
Change
ID
R0158
Change Category
Change Path
Priority
Urgent
No
Latest Update
28/06/2024 - Change implemented as part of the June 2024 REC Release
Summary
Meter Asset Providers (MAPs) can query the Gas Enquiry Service (GES) as part of their billing process to establish the Registered Gas Suppliers of their portfolio of Metering Assets. The reports via which MAPs can query the GES are not currently working exactly as intended due to incorrect wording in the GES Definition; this change seeks to rectify that.
Proposer
admin
Change Plan

Preliminary Change Report Issued

Completed

Start:

08 Feb 2024

Due:

15 Mar 2024

Completion:

15 Mar 2024

Consultation Issued

Completed

Start:

15 Mar 2024

Due:

15 Mar 2024

Completion:

15 Mar 2024

Final Change Report Issued

Completed

Start:

15 Mar 2024

Due:

12 Apr 2024

Completion:

12 Apr 2024

Responsible Committee Decision

Completed

Start:

12 Apr 2024

Due:

24 Apr 2024

Completion:

24 Apr 2024

Appeal Window Closure

Not Started

Start:

24 Apr 2024

Due:

08 May 2024

Completion:

Status
Implementation Date
Status Live
EMAR Version 28.06.2024_live
Implementation Status
Date Raised
Fuel
REC Decision Maker
Date of Update to Priority
Solution Development
Proposed solution summary
  1. As a Registered Gas Supplier, I want to receive accurate invoices from MAPs for use of their Metering Assets, so that I am not over or under charged. 2 - As a MAP, I want to be able to access accurate information about my portfolio so that I can be correctly remunerated by Suppliers. 3 - As the GES Provider, I want the reports that I am obligated to provide to be correctly defined, so that I am able to provide accurate data to MAPs regarding their portfolios.
Proposed Solution Document
Document title
R0158 Solution - Gas Enquiry Service (GES) Service Definition v1.3 (Draft) 15.03.24
Archive
Off
Document title
R0158 Solution - Gas Enquiry Service (GES) Service Definition v1.3.1 (Draft) 11.04.24
Archive
Off
Problem Statement
The GES Service Definition defines two reports that MAPs can use to query the CDSP to find out which Registered Gas Suppliers supply Metering Assets in their portfolio, so that they can bill them. Due to a drafting error in the GES Service Definition, this report is not working as intended, and MAPs are not able to ascertain the Registered Gas Supplier for their entire portfolio. This change seeks to rectify the drafting error and restore the intended functionality of the two reports.
SME
SME Role
Lead Technical Analyst
SME Role
Lead Assurance Analyst
R0158 Change Proposal Form - Supporting Documents
R0158 Change Proposal Form
R0158 Change Proposal Form (PDF)
R0158 Initial Assessment Report (Approved) V1.0 06.03.24
R0158 Change Proposal Plan (Approved) V1.0 06.03.24
R0158 Preliminary Change Report (Published for Consultation) V1.0 15.03.24
R0158 Consolidated Consultation Responses V1.0 12.04.24
R0158 Final Change Report (Post-Vote) V1.0
Company Name
-
Review status
Review required

Removal of Facsimile as a Method of Code Communication

Date of latest update
Type
Change
ID
R0157
Change Category
Change Path
Priority
Urgent
No
Latest Update
This Change Proposal was implemented as part of the 7 November 2025 REC Release.
Summary
The Public Switched Telephone Networks (PSTN) will be switched off in December 2025 by all telecom companies and will be replaced with an Internet Protocol (IP) digital network. Existing fax machines that are incompatible with new all IP digital networks will become obsolete and no longer capable of meeting Code Communications as prescribed in the REC. All communication methods referencing fax or facsimile will need to be removed and replaced with email (where this is not an existing option), unless an alternative form of communication is needed. Please note: The government have published preparatory guidance which includes migrating to IP-supported technology in advance of the planned decommissioning. UK transition from analogue to digital landlines - GOV.UK (www.gov.uk) Critical National Infrastructure (CNI) (“assets, facilities, systems, networks or processes and the essential workers that operate and facilitate them”) which is subdivided into 13 sectors including Energy, are advised to consider how they move to digital alternatives smoothly to avoid unnecessary interruption following the PSTN switch-off. Openreach's Energy Guidance Factsheet can be found in the CPs Accompanied Documents.
Proposer
Colette Baldwin
Change Plan

Preliminary Change Report and Consultation Issued

Completed

Start:

03 Jan 2024

Due:

09 Feb 2024

Completion:

09 Feb 2024

Final Change Report Issued

Completed

Start:

23 Feb 2024

Due:

12 Mar 2024

Completion:

12 Mar 2024

Responsible Committee Decision

Completed

Start:

12 Mar 2024

Due:

19 Mar 2024

Completion:

19 Mar 2024

Appeal Window Closure

Not Started

Start:

19 Mar 2024

Due:

02 Apr 2024

Completion:

Consultation Close

Completed

Start:

09 Feb 2024

Due:

23 Feb 2024

Completion:

23 Feb 2024
Impacted Consumers
Impacted REC Services
Impacted REC Parties and Market Participants
Status
Implementation Date
Status Live
EMAR Version 07.11.2025_live
Included changes Affected REC Items
R0003 Market-wide Half-Hourly Settlement Implementation
Implementation Status
Date Raised
Fuel
REC Decision Maker
Lead Analyst
James Hardy
Date of Update to Priority
Solution Development
Proposed solution summary
  1. All communication methods referencing fax or facsimile will need to be removed and replaced with email
Proposed Solution Document
Document title
Existing References to Fax and "e-mail" in the REC (January 2024)
Archive
Off
Document title
R00157 - Legal Text Changes (All Affected REC Products and Documents)
Archive
Off
Problem Statement
Existing fax machines that are incompatible with new all IP digital networks will become obsolete and no longer capable of meeting Code Communications as prescribed in the REC
CP Form - Removal of a Fax as a Code Communication method
R0157 - Change Proposal Plan V1.0 (Approved) 30.01.2024
R0157 - Initial Assessment Report V1.0 (Approved) 30.01.2024
R0157 - Consolidated Consultation Responses
R0157 - Preliminary Change Report V1.0 (For Consultation) 09.02.2024
R0157 - Final Change Report V2.0 (Post-Vote) 19.03.2024
Open Reach Energy Industry Factsheet
Company Name
REC Code Manager
Review status
Review required

Updates to the CSS Message Business Data Validation Rules and Physical Interface Design Specification

Date of latest update
Type
Change
ID
R0156
Change Category
Change Path
Priority
Urgent
No
Latest Update
20/02/2024- Approved for implementation on the 23 February 2024.
Summary
This proposal aims to bring the Physical Interface Design Specification (PhID) into the Retail Energy Code as a Category 3 document as well as provide updates to the Central Switching Service (CSS) Message Business Data Validation rules (Category 2 document), aligning both documents with current CSS functionality.
Proposer
Caroline Milner
Change Plan

Preliminary Change Report and Consultation published

Completed

Start:

20 Dec 2023

Due:

19 Jan 2024

Completion:

19 Jan 2024

Consultation Close

Completed

Start:

19 Jan 2024

Due:

02 Feb 2024

Completion:

02 Feb 2024

Final Change Report Issued

Completed

Start:

02 Feb 2024

Due:

09 Feb 2024

Completion:

09 Feb 2024

Responsible Committee Decision

Completed

Start:

09 Feb 2024

Due:

20 Feb 2024

Completion:

20 Feb 2024
Status
Implementation Date
Status Live
EMAR Version 23.02.2024_live
Included changes Affected REC Items
R0100 Update to Error Handling Documents
Implementation Status
Date Raised
Fuel
REC Decision Maker
Lead Analyst
holly.law
Date of Update to Priority
Solution Development
Proposed Solution Document
Document title
Business Data Validation Rules v1.5.1 Redlining
Archive
Off
Document title
CSS Interface Design Specification v8.8.1 Redlining
Archive
Off
Problem Statement
There is a risk that without transparency of the document and changes to it, parties may use outdated versions of the PhID and Business Validation Rules and encounter errors in their systems.
SME
SME Role
Lead Technical Analyst
SME User
caroline.milner@capgemini.com
CSS Interface Design Specification v8.8.1 - TRACKED.docx
Draft REC Baseline Statement R0156
Change Proposal Plan v.1.0 Approved
R0156 Initial Assessment Report v1.0 approved
Business Data Validation Rules v1.5.1 - REDLINE.xlsx
R0156 Preliminary Change Report
R0156 Consultation Response v1.0
R0156 Final Change Report approved
Company Name
-
Review status
Review required

Performance Assurance Report Catalogue V5.1

Date of latest update
Type
Change
ID
R0154
Change Category
Change Path
Priority
Urgent
No
Latest Update
This change was implemented as part of the the Extraordinary release on 28 March 2024. 24/04/24 - A new version of the Final Change Report(V1.1) has been published. The table in Appendix 2 has been amended to make clear that both reports 100 & 101 have been removed as part of the solution for this change.
Summary
Following their annual review, the REC Performance Assurance Board (PAB) have suggested updates to the Performance Assurance Report Catalogue (PARC). This change seeks to implement those updates, thereby introducing the newest version of the PARC.
Proposer
lewis.williams
Change Plan

PRELIMINARY CHANGE REPORT AND CONSULTATION ISSUED

Completed

Start:

24 Nov 2023

Due:

05 Jan 2024

Completion:

05 Jan 2024

CONSULTATION CLOSES

Completed

Start:

05 Jan 2024

Due:

26 Jan 2024

Completion:

26 Jan 2024

FINAL CHANGE REPORT ISSUED

Completed

Start:

26 Jan 2024

Due:

16 Feb 2024

Completion:

16 Feb 2024

RESPONSIBLE COMMITTEE DECISION

Not Started

Start:

16 Feb 2024

Due:

27 Feb 2024

Completion:

Status
Implementation Date
Status Live
EMAR Version 28.03.2024_live
Implementation Status
Date Raised
Fuel
REC Decision Maker
Date of Update to Priority
Solution Development
Proposed solution summary
  1. As a Consumer, I want parties who handle my energy account information to be held to high standards, so that I have confidence in their management of my information.
  2. As a REC Party and/or Service Provider, I want the performance assurances standards to which I am held to be regularly reviewed, so that I have confidence in monitoring activities.
Proposed Solution Document
Document title
RECPAB_23_Performance Assurance Report Catalogue V5.1 - REDLINE (003) - 22.12.23 Fina
Archive
Off
Document title
RECPAB_23_Performance Assurance Report Catalogue V5.1 (Post-Consultation) 16.02.24
Archive
Off
Document title
RECPAB_23_Performance Assurance Report Catalogue V5.1 (Post-Consultation) REDLINED - 16.02.24
Archive
Off
Problem Statement
The REC Performance Assurance Board has reviewed the Performance Assurance report catalogue (PARC) and proposed changes to update the PARC to version 5.1. As the PARC is a Category two document, implementation of the proposed PARC changes must therefore follow the change process.
SME
SME Role
Lead Technical Analyst
RECPAB_23_Performance Assurance Report Catalogue V5.1 - REDLINE (2).xlsx
R0154 Change Proposal Form
R0154 Change Proposal Plan (Approved) v1.0 19.12.23
R0154 Initial Assessment Report (Approved) v1.0 19.12.23
R0154 Preliminary Change Report (Published for Consultation) v1.0 - 05.01.24
R0154 Consolidated Consultation Responses v1.0 - 16.02.24
R0154 Final Change Report (Post-Vote) V1.1 - 24.04.24
Company Name
-
Review status
Review required

Catering for Registration Events where the Incumbent Supplier deactivates prior to a Switch becoming effective

Date of latest update
Type
Change
ID
R0153
Change Category
Change Path
Priority
Urgent
No
Latest Update
04/06/24 - This change has been withdrawn by the proposer and is being incorporated as part of R0178 - Improvements to CSS Business Process Logic. 03/05/2024 - An investigation was held into the requirements of this change and into other issues identified with the CSS Business Process and Logic. Landmark have provided data relating to the number of incidents for three different scenarios which had been identified. A discussion as held between the Code Manager, DCC and Landmark, and agreed that they will look to combine all identified issues into a new REC Change Proposal.
Summary
This change looks to resolve the issue for Registration Events where the incumbent Supplier deactivates prior to a Switch becoming effective. In some instances, the incumbent Supplier is withdrawing prior to the ‘Supply Effective from Date’ which causes the accepted Switch to fail at Gate Closure (17:00hrs) . An effective solution is to allow the consumer to Switch with the original effective date. There are a number of solution options to enable this to happen.
Proposer
David Addison
Impacted Consumers
Impacted REC Documents
Impacted REC Services
Status
Implementation Status
Date Raised
Fuel
Lead Analyst
James Hardy
Date of Update to Priority
Solution Development
Problem Statement
In some instances, the incumbent Supplier is withdrawing prior to the ‘Supply Effective from Date’ which causes the accepted Switch to fail at Gate Closure (17:00hrs).
Stages Selection
SME
SME Role
Lead Technical Analyst
SME User
caroline.milner@capgemini.com
Catering for Registration of Events CP Form 24.11.2023
Company Name
Xoserve
Review status
Review required

Revision to the Consolidated Metering Code of Practice (CoMCoP)

Date of latest update
Type
Change
ID
R0152
Change Category
Change Path
Priority
Urgent
No
Latest Update
This Change Proposal was implemented as part of the 7 November 2025 REC Release.
Summary
Following the implementation of the Consolidated Metering Code of Practice (CoMCoP) a number of issues have been identified by RECCo, The Code Manager and REC Parties, stating that REC Parties are unable to meet their obligations as currently presented in the CoMCoP. The Code Manager has reviewed these and determined changes are required.
Proposer
Tina Pearce
Change Plan

Extension to Plan V2.0 approved at Change Panel

Completed

Start:

Due:

Completion:

04 Feb 2025
Status
Implementation Date
Status Live
EMAR Version 07.11.2025_live
Included changes Affected REC Items
R0003 Market-wide Half-Hourly Settlement Implementation
Implementation Status
Date Raised
Fuel
REC Decision Maker
Date of Update to Priority
Solution Development
Proposed solution summary
  1. As a Consumer, I trust my Energy Supplier and their associated agents to have a robust metering framework to ensure the safety and accuracy of my meter.
  2. As an Energy Supplier, MEM or DNO, I need clear and correct documentation so I can identify the obligations I need to meet within my role and satisfy my audit criteria.
  3. As an Energy Supplier, I need to know that any MEM or DNO I work with is compliant to ensure the best practice for my customers.
  4. As the Metering Scheme Auditor, I need clear and correct documentation to ensure I can fulfil my role and provide confidence that REC Parties are meeting their obligations.
Proposed Solution Document
Document title
Draft legal text for Party Impact Assessment
Archive
Off
Document title
R0152 Solution Documents Guidance v1.0
Archive
Off
Document title
R0152 Party IA Solution Documents Guidance Video
Archive
Off
Document title
R0152 Legal text for Consultation
Archive
Off
Document title
R0152 legal text for final recommendation
Archive
Off
Problem Statement
MEMs are struggling to successfully pass their CoMCoP audits and be compliant, due to inconsistencies and lack of clarity in the document. There has been concern expressed by MEMs, that when contracting with Energy Suppliers, they are proclaiming themselves compliant with the CoMCoP when this may or may not be true.
SME
SME Role
Lead Technical Analyst
SME User
caroline.milner@capgemini.com
SME Role
Lead Assurance Analyst
SME User
daniel.rodgers@retailenergycode.co.uk
REC Analysis CoMCoP.xlsx
R0152 - Change Proposal Form (downloadable version) 16.11.2023
R0152 Change Proposal Plan v1.0 (Approved) 19.12.23
R0152 Initial Assessment Report v1.0 (Approved) 19.12.23
R0152 Extension to Plan v1.0 (Approved) 31.10.2024
R0152 Extension to Plan v2.0 (Approved) 04.02.2025
R0152 Consolidated Party Impact Assessment Responses PUBLIC V1.0
R0152 Change Report (For Consultation) V1.0
R0152 - Consolidated Consultation Responses (Public) v1.0
R0152 Change Report (Final Recommendation) V1.1 approved
R0152 Change Report (Final Recommendation) V1.1 approved
Company Name
-
Review status
Review required

On-site Aggregation as a method to facilitate Third Party Access - BSC P455

Date of latest update
Type
Change
ID
R0150
Change Category
Change Path
Priority
Urgent
No
Latest Update
08/11/2024 - This Change Proposal has been implemented as part of the November 2024 REC Release.
Summary
Following a modification proposal to the Balancing and Settlement Code (BSC) to allow on-site aggregation as a method for third party access on private networks, the Code Manager is required to amend the REC to place a requirement on the Meter Equipment Managers (MEMs) appointed by the boundary points Electricity Supplier, to rectify any faults found with the submeters used in the on-site aggregation methodology.
Proposer
Colette Baldwin
Change Plan

Preliminary Change Report and Consultation Issued

Completed

Start:

15 Jan 2024

Due:

22 Mar 2024

Completion:

22 Mar 2024

Party Impact Assessment

Completed

Start:

30 Oct 2023

Due:

15 Jan 2024

Completion:

15 Jan 2024

Final Change Report Issued

Completed

Start:

22 Mar 2024

Due:

26 Apr 2024

Completion:

25 Apr 2024

Responsible Committee Decision

Completed

Start:

26 Apr 2024

Due:

08 May 2024

Completion:

08 May 2024
Status
Implementation Date
Status Live
EMAR Version 08.11.2024_live
Included changes Affected REC Items
R0105 Review of ONAGE SLAs
  • Schedule 14 - Metering Operations
Implementation Status
Date Raised
REC Decision Maker
Lead Analyst
James Hardy
Date of Update to Priority
Solution Development
Proposed solution summary
  1. The BSC Modification P455 Modification proposes to place a requirement on the SVA MOA (MEMs) appointed by the Boundary Point Supplier to rectify any faults found with the sub meters used in the On-Site Aggregation methodology; and to produce and submit the On-Site Aggregation Form to the HHDC. As MEMs (SVA MOAs) are governed under the Retail Energy Code (REC), R0150 is the REC's subsequent change to propose this.
Proposed Solution Document
Document title
Metering Operations - R0150 Legal Drafting (Published with Consultation 22.03.2024)
Archive
Off
Document title
Schedule 14 - Metering Operations Schedule - R0150 Legal Drafting (Published with Final Change Report) 25.04.2024
Archive
Off
Document title
Extract: R0150 - Schedule 14 Legal Drafting (Published with Final Change Report) 25.04.2024
Archive
Off
Document title
Approved for Implementation - R0150 Legal Solution (Schedule 14 Extract)
Archive
Off
Document title
Approved for Implementation - R0150 Legal Solution (Schedule 14).
Archive
Off
Document title
Ofgem - BSC Modification P455 Decision
Archive
Off
Problem Statement
Under the proposed solution for BSC Modification P455, Consumers will require a Market Participant to oversee the maintenance of their sub-meter, including installations and rectification of metering faults. To ensure this, the REC will need to place a requirement on the MEMs appointed by the boundary point Electricity Supplier to rectify any faults found with the sub-meters used in the On-Site Aggregation.
R0150 - On-site Aggregation as a method to facilitate Third Party Access - BSC P455
R0150 Change Proposal Plan V1.0 (Approved 19.12.2023)
R0150 - Change Proposal Re-Plan (Approved) 08.02.2024
R0150 Initial Assessment Report V1.0 (Approved) 19.12.2023
R0150 - Preliminary Change Report V1.0 (Published for Consultation 22.03.2024)
R0150 - Consolidated Consultation Responses (17.04.2024)
R0150 - Final Change Report V2.0 (Approved) 08.05.2024
Company Name
-
Review status
Review required

Implementation of Online Certificate Standard Protocol (OCSP) in addition to Certificate Revocation List (CRL).

Date of latest update
Type
Change
ID
R0151
Change Category
Change Path
Priority
Urgent
No
Latest Update
14/05/2024 - At the request of the proposer, this Change Proposal has now been withdrawn. The rationale for withdrawing the proposal was that the benefits afforded by this change will not be fully realised until 2026 (renew of digital certificates), and the risk profile around revoked certificates remains unchanged during this period. DCC recommend this change is revisited in 12 months, to allow sufficient time for review and resubmission ahead of any certificate renewal activities.
Summary
This Change seeks to make improvements to the Microsoft Azure Application Gateway module. A defect has been identified which requires the implementation of a manual/ customer workaround when checking the Certificate Revocation Lists (CRLs) systems within the Central Switching Service (CSS) to ensure certificates are revoked. This change seeks to remove the need to complete a manual workaround and implement a real-time certification validation capability.
Proposer
Stuart Pitcher
Change Plan

Solution Analysis and Development

Completed

Start:

30 Oct 2023

Due:

26 Jan 2024

Completion:

26 Jan 2024
Impacted REC Services
Impacted REC Parties and Market Participants
Status
Implementation Status
Date Raised
Fuel
REC Decision Maker
Lead Analyst
James Hardy
Date of Update to Priority
Solution Development
Proposed solution summary
  1. The proposed solution is to roll out support for Online Certificate Standard Protocol (OCSP) in addition to Certificate Revocation List (CRL). The scope of the change will be: - Implementation of a central OCSP server and the update of the associated PKI processes to manage the Certificate Revocation. This will cover the TLS and JWS Certificate Revocation. - CSS implementation of Application Gateway will be reconfigured to include the OCSP functionality and server. - CSS change to implement the OCSP checking for the JWS certificates. - All new certificates that are issued will include the detail of the OCSP Server, as part of the migration approach all new certificates will have this information embedded. - All parties connecting to CSS have the relevant information for them to exploit the advanced features that OCSP introduces. The CRL checking functionality will be maintained so this change is an optional upgrade for any Systems that operate using Switching Key Infrastructure.
Problem Statement
There is currently a Microsoft Azure Application Gateway module defect against the checking of Certificate Revocation Lists (CRLs), with Microsoft stating that the CRL related defect will not be fixed. Consequently, any system within the CSS ecosystem, systems that use Switching Key Infrastructure (SWIKI), that have incorporated the Azure Application Gateway module to manage the TLS connection will have been required to implement a manual/custom workaround to ensure that certificates that are revoked are not allowed to establish a connection.
Stages Selection
SME
SME Role
Lead Technical Analyst
SME User
caroline.milner@capgemini.com
R0151 - Implementation of OCSP in addition to CRL
R0151 - Initial Assessment Report V2.0 (Approved) 06.02.2024
Company Name
Smart DCC
Review status
Review required