MP259 Triage System Interface Definition

Triage Facilities currently utilise IPsec as a method to secure data connection between Triage Facilities and Manufacturers. One Manufacturer has made a case to employ a different protocol to secure this data connection - TLS - to provide a more granular level of security and control over shared data. TLS is currently detailed elsewhere in the SEC as an acceptable method of encrypting communications but is not allowable under the current definitions for Triage Interface Systems.

The Proposed Solution is to expand the Triage System Interface definition to include both IPsec as well as an alternative TLS VPN. Additionally, to futureproof the SEC Guidance, it is also proposed that references to TLS v1.2 are changed to generic wording referring parties to the SSC Guidance on which version of TLS to use.

• Large Suppliers
• Small Suppliers
• Other SEC Parties
• DCC

• Section G ‘Security’
• Appendix M ‘SMKI Interface Design Specification’
• Appendix O ‘SMKI Repository Interface Design Specification’
• Appendix S ‘DCCKI Certificate Policy’
• Appendix T ‘DCCKI Interface Design Specification’
• Appendix X ‘Registration Data Interface Specification’
• Appendix AI ‘Self Service Interface Code of Connection’
• Appendix AL ‘SMETS1 Transition and Migration Approach Document’