MDFv3.3 2022-04-01 - FMT_SMF_EXT.1 Table 7 Function 23
The "M" in the "Impl." column should be changed to "O" per a recent TRRT NIAP decision. There are plenty of devices that simply reject invalid certificates and that cannot be configured, so "O" should be used and the associated application note should explain that it must be selected if the function is implemented in the TOE giving administrators a choice to configure.
MDFv3.3 2022-04-01 - FMT_SMF_EXT.1 Table 7 Function 23 The "M" in the "Impl." column should be changed to "O" per a recent TRRT NIAP decision. There are plenty of devices that simply reject invalid certificates and that cannot be configured, so "O" should be used and the associated application note should explain that it must be selected if the function is implemented in the TOE giving administrators a choice to configure.