scope:

Use/Relationship. The Key and Certificate Management Plan (KCMP) describes the use and control of cryptographic products and services used by a cryptographic application (cryptographic engine, cryptographic module, End Cryptographic Unit (ECU), or system) throughout its lifetime. The KCMP also identifies and documents the capabilities that the cryptographic application requires from the current and planned key management infrastructure.

a. KCMP Related Guidance. As the vendor of a cryptographic application may have very little insight into the items in the KCMP, the Information Assurance Certification Manager (IACM) will ensure the vendor uses the KCMP Template included as part of this DID and has the applicable Telecommunications Security Requirements Document (TSRD) cited under "Reference Documents." The TSRD is intended for use with the KCMP template to detail other related and relevant information not covered here.

b. This Data Item Description (DID) contains the content preparation instructions for the data product generated by the specific and discrete task requirement as delineated in the contract, as the Key and Certificate Management Plan (KCMP).

c. This DID supersedes DI-MISC-81688.