# 4.2.1.1 An inventory of the entity's trusted keys and certificates used to protect PAN during transmission is maintained.

Defined Approach Requirements

4.2.1.1 An inventory of the entity's trusted keys and certificates used to protect PAN during transmission is maintained.

Customized Approach Objective

All keys and certificates used to protect PAN during transmission are identified and confirmed as trusted

Defined Approach Testing Procedures

4.2.1.1.a Examine documented policies and procedures to verify processes are defined for the entity to maintain an inventory of its trusted keys and certificates. 4.2.1.1.b Examine the inventory of trusted keys and certificates to verify it is kept up to date.

Purpose

The inventory of trusted keys helps the entity keep track of the algorithms, protocols, key strength, key custodians, and key expiry dates. This enables the entity to respond quickly to vulnerabilities discovered in encryption software, certificates, and cryptographic algorithms.

Good Practice

For certificates, the inventory should include the issuing CA and certification expiration date.