Document ID: chunk:federal_register_of_legislation:F2024L01024:front:0:p178
Version: federal_register_of_legislation:F2024L01024
Segment Type: other
Provision Reference: 
Character Range: 516317–519736

Category 5 – Part 2), having an RF output power limited to 0.1W (20 dBm) or less, and supporting 16 or fewer concurrent users;
                   h. Routers, switches, gateways or relays, where the "information security" functionality is limited to the tasks of "Operations, Administration or Maintenance" ("OAM") implementing only published or commercial cryptographic standards;
                   i. General purpose computing equipment or servers, where the "information security" functionality meets all of the following:
                       1. Uses only published or commercial cryptographic standards; and
                       2. Is any of the following:
                           a. Integral to a CPU that meets the provisions of Note 3 in Category 5 – Part 2;
                           b. Integral to an operating system that is not specified by 5.D.002.; or
                           c. Limited to "OAM" of the equipment; or
                   j. Items specially designed for a 'connected civil industry application', meeting all of the following:
                       1. Being any of the following:
                           a. A network‑capable endpoint device meeting any of the following:
                            1. The "information security" functionality is limited to securing 'non‑arbitrary data' or the tasks of "Operations, Administration or Maintenance" ("OAM"); or
                            2. The device is limited to a specific 'connected civil industry application'; or
                           b. Networking equipment meeting all of the following:
                            1. Being specially designed to communicate with the devices specified by paragraph j.1.a. above; and
                            2. The "information security" functionality is limited to supporting the 'connected civil industry application' of devices specified by paragraph j.1.a. above, or the tasks of "OAM" of this networking equipment or of other items specified by paragraph j. of this Note; and
                       2. Where the "information security" functionality implements only published or commercial cryptographic standards, and the cryptographic functionality cannot easily be changed by the user.
                  Technical Notes:
1. For the purposes of 5A002.a. Note j., 'connected civil industry application' means a network-connected consumer or civil industry application other than "information security", digital communication, general purpose networking or computing.
2. For the purposes of 5A002.a. Note j.1.a.1., 'non-arbitrary data' means sensor or metering data directly related to the stability, performance or physical measurement of a system (e.g., temperature, pressure, flow rate, mass, volume, voltage, physical location etc.), that cannot be changed by the user of the device.
5. A. 002. b. Being a 'cryptographic activation token';

           Technical Note:
           For the purposes of 5A002.b., a 'cryptographic activation token' is an item designed or modified for any of the following:
1. Converting, by means of "cryptographic activation", an item not specified by Category 5 – Part 2 into an item specified by 5A002.a. or 5D002.c.1., and not released by the Cryptography Note (Note 3 in Category 5 – Part 2); or
2. Enabling, by means of "cryptographic activation", additional functionality specified by 5A002.a. of an item already specified by Category