3 Media and Documentation
3.1 Media Pack
This section lists the media package for Oracle Communications Cloud Native Core 3.26.1.2xx.0. To download the media package, see MOS.
Note:
The information provided in this section is accurate at the time of release but is subject to change. See the Oracle software delivery website for the latest information.Table 3-1 Media Pack Contents for Oracle Communications Cloud Native Core 3.26.1.2xx.0
| Description | NF Version | ATS Version | Upgrade Supported |
|---|---|---|---|
| Oracle Communications Cloud Native Configuration Console (CNC Console) | 26.1.200 | NA |
CNC Console 26.1.200 supports fresh installation and upgrade from 25.2.2xx and 25.1.2xx*. For more information, see Oracle Communications Cloud Native Configuration Console Installation, Upgrade, and Fault Recovery Guide. Note: * CNC Console supports upgrade from 25.1.2xx to 26.1.2xx (this exception applies only to upgrade from 25.1.2xx to 26.1.2xx in ASM deployments). |
| Oracle Communications Cloud Native Core, Certificate Management (OCCM) | 26.1.200 | NA |
OCCM 26.1.200 supports fresh installation and upgrade from 25.2.2xx. For more information, see Oracle Communications Cloud Native Core, Certificate Management Installation and Upgrade Guide. Note: * OCCM supports upgrade from 25.1.2xx to 26.1.2xx (this exception applies only to upgrade from 25.1.2xx to 26.1.2xx in ASM deployments). |
| Oracle Communications Cloud Native Core, Cloud Native Environment (CNE) | 26.1.200 | NA | CNE 26.1.200 supports fresh installation and upgrade from 25.2.2xx and 25.2.1xx. For more information, see Oracle Communications Cloud Native Core, Cloud Native Environment Installation, Upgrade, and Fault Recovery Guide. |
| Oracle Communications Operations Services Overlay (OSO) | 26.1.200 | NA | OSO 26.1.200 supports fresh installation and upgrade from 25.2.2xx, 25.2.1xx, and 25.1.2xx. For more information, see Oracle Communications Operations Services Cloud Native Core, Overlay Installation and Upgrade Guide. |
| Oracle Communications Cloud Native Core, cnDBTier (cnDBTier) | 26.1.201 | NA | cnDBTier 26.1.201 supports fresh installation and upgrade from 25.2.2xx, 25.2.1xx, and 25.1.2xx. For more information, see Oracle Communications Cloud Native Core, cnDBTier Installation, Upgrade, and Fault Recovery Guide. |
| Oracle Communications Cloud Native Core, Network Repository Function (NRF) | 26.1.201 | 26.1.201 | NRF 26.1.201 supports fresh installation and upgrade from 25.2.2xx. For more information, see Oracle Communications Cloud Native Core, Network Repository Function Installation, Upgrade, and Fault Recovery Guide. |
| Oracle Communications Cloud Native Core, Network Slice Selection Function (NSSF) | 26.1.201 | 26.1.201 | NSSF 26.1.201 supports fresh installation and upgrade from 25.2.2xx. For more information, see Oracle Communications Cloud Native Core, Network Slice Selection Function Installation, Upgrade, and Fault Recovery Guide. |
| Oracle Communications Cloud Native Core, OCI Adaptor | 26.1.200 | NA | OCI Adaptor 26.1.200 supports fresh installation only. For more information, see Oracle Communications Cloud Native Core, OCI Deployment Guide. |
| Oracle Communications Cloud Native Core, Service Communications Proxy (SCP) | 26.1.201 | 26.1.201 | SCP 26.1.201 supports fresh installation and upgrade from 25.1.2xx and 25.2.2xx. For more information, see Oracle Communications Cloud Native Core, Service Communication Proxy Installation, Upgrade, and Fault Recovery Guide. |
| Oracle Communications Cloud Native Core, Security Edge Protection Proxy (SEPP) | 26.1.200 | 26.1.200 | SEPP 26.1.200 supports fresh installation and upgrade from 25.2.2xx and 25.2.1xx. For more information, see Oracle Communications Cloud Native Core, Security Edge Protection Proxy Installation, Upgrade, and Fault Recovery Guide. |
Cloud Native Core Upgrade
To ensure a smooth and supported upgrade process, follow the upgrade sequence outlined in the table below. Product does not recommend skipping intermediate versions unless explicitly showed:
Figure 3-1 Cloud Native Core Upgrade
Note:
- * Policy, CNC Console, UDR, SLF, and cnDBTier support upgrade from 24.2.xx to 25.1.2xx. This exception applies only to upgrade from 24.2.x to 25.1.2xx.
- ** SCP, SEPP, UDR, SLF, CNC Console, and cnDBTier support upgrade from 25.1.1xx to 25.2.1xx. This exception applies only to upgrade from 25.1.1xx to 25.2.1xx.
- *** Policy, CNC Console, and cnDBTier support upgrade from 25.1.2xx to 26.1.2xx. This exception applies only to upgrade from 25.1.2xx to 26.1.2xx in ASM deployments.
- This upgrade guideline is applicable to CNC components except CNE. For CNE upgrade guideline
- This upgrade path is an example and does not show future release plans.
- If the source release is A.B.1xx, upgrades must follow an incremental sequence, for example:
- A.B.1xx
- A.B.2xx
- A.(B+1).1xx
- Skipping intermediate versions, such as A.B.2xx, is not supported.
- Upgrading from A.B.2xx to A.(B+1).2xx is allowed.
- Be sure to select intermediate versions to maintain compatibility throughout the upgrade.
CNE Upgrade
To ensure a smooth and supported upgrade process, follow the upgrade sequence outlined in the following table:
Figure 3-2 CNE Upgrade
3.2 Impacted Documents
The following table lists the documents that are impacted in the specific NF release version.
Table 3-2 Impacted Documents
| CNC NF | NF Version | Impacted Documents |
|---|---|---|
| CNC Console | 26.1.200 |
|
| cnDBTier | 26.1.201 |
|
| CNE | 26.1.200 |
|
| NSSF | 26.1.201 |
|
| NRF | 26.1.201 |
|
| OCCM | 26.1.200 |
|
| OSO | 26.1.200 |
|
| SCP | 26.1.201 |
|
| SEPP | 26.1.200 |
|
3.3 Compatibility Matrix
The following table lists the compatibility matrix for each network function:
Note:
- For seamless integration and optimal performance of CNC NFs on third party platform, the third party platform needs to be compatible with the specified Kubernetes version.
Table 3-3 Compatibility Matrix
| CNC NF | NF Version | CNE | cnDBTier | OSO | ASM S/W | Kubernetes | Helm | CNC Console | OCNADD | OCCM | OCI Adaptor |
|---|---|---|---|---|---|---|---|---|---|---|---|
| CNC Console | 26.1.200 |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx 25.1.2xx |
26.1.2xx 25.2.2xx 25.1.2xx |
1.21.6 1.14.6 1.11.8 |
1.35.x 1.34.x 1.27.x 1.25.x 1.20.x |
3.20 3.19.0 |
NA | 26.1.2xx | 26.1.2xx | 26.1.2xx |
| OCCM | 26.1.200 |
26.1.2xx 25.2.2xx |
NA | NA | NA |
1.35.x 1.34.x |
3.20 3.19.0 |
26.1.2xx |
NA | NA | NA |
| CNE | 26.1.200 | NA | NA | NA | NA |
1.35.x |
3.20 |
NA | NA | NA | NA |
| OSO | 26.1.200 | NA | NA | NA | NA |
1.35.x 1.34.x 1.25.x 1.20.x |
3.20 3.19.0 |
NA | NA | NA | NA |
| cnDBTier | 26.1.201 |
26.1.2xx 25.2.2xx |
NA |
26.1.2xx 25.2.2xx 25.1.2xx |
1.21.6 1.14.6 1.11.8 |
1.35.x 1.34.x 1.27.x 1.25.x 1.20.x |
3.20 3.19.0 |
NA | 26.1.2x | NA | NA |
| NRF | 26.1.201 |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
1.21.6 1.14.6 |
1.35.x 1.34.x 1.25.x 1.20.x |
3.20 3.19.0 |
26.1.2xx | 26.1.2xx | 26.1.2xx | 26.1.2xx |
| NSSF | 26.1.201 |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
1.21.6 1.14.6 1.11.8 |
1.35.x 1.34.x 1.25.x 1.20.x |
3.20 3.19.0 |
26.1.2xx | NA | NA | NA |
| OCI Adaptor | 26.1.200 | NA | NA | NA | NA |
1.35.x 1.34.x |
3.20 3.19.0 |
NA | NA | NA | NA |
| SCP | 26.1.201 |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
1.21.6 1.14.6 1.11.8 |
1.35.x 1.34.x 1.27.x 1.25.x 1.20.x |
3.20 3.19.0 |
26.1.2xx | 26.1.2xx | 26.1.2xx | 26.1.2xx |
| SEPP | 26.1.200 |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
26.1.2xx 25.2.2xx |
1.21.6 1.14.6 |
1.35.x 1.34.x 1.25.x 1.20.x |
3.20 3.19.0 |
26.1.2xx | 26.1.2xx | 26.1.2xx | 26.1.2xx |
3.4 3GPP Compatibility Matrix
The following table lists the 3GPP compatibility matrix for each network function:
Table 3-4 3GPP Compatibility Matrix
| CNC NF | NF Version | 3GPP |
|---|---|---|
| CNC Console | 26.1.2xx | NA |
| cnDBTier | 26.1.2xx | NA |
| NSSF | 26.1.2xx |
|
| OCCM | 26.1.2xx |
|
| OSO | 26.1.2xx | NA |
| OCI Adaptor | 26.1.2xx | NA |
| NRF | 26.1.2xx |
|
| SCP | 26.1.2xx |
|
| SEPP | 26.1.2xx |
|
Note:
Refer to the Compliance Matrix spreadsheet for details on NFs' compliance with each 3GPP version mentioned in this table.3.5 Common Microservices Load Lineup
This section provides information about common microservices and ATS for the specific NF versions in Oracle Communications Cloud Native Core Release 3.26.1.2xx.0.
Table 3-5 Common Microservices Load Lineup for Network Functions
| CNC NF | NF Version | Alternate Route Svc | App-Info | ASM Configuration | ATS Framework | Config-Server | Debug-tool | Egress Gateway | Ingress Gateway | Helm Test | Mediation | NRF-Client | Perf-Info |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CNC Console | 26.1.200 | NA | NA | NA | NA | NA |
26.1.202 |
NA | 26.1.204 | 26.1.201 | NA | NA | NA |
| OCCM | 26.1.200 | NA | NA | NA | NA | NA |
26.1.202 |
NA | NA | 26.1.201 | NA | NA | NA |
| NSSF | 26.1.201 | 26.1.204 | 26.1.203 | 26.1.200 | 26.1.200 | 26.1.203 | 26.1.202 | 26.1.204 | 26.1.204 | 26.1.201 | NA | 26.1.204 | 26.1.203 |
| NRF | 26.1.201 | 26.1.205 | 26.1.203 | 26.1.200 | 26.1.201 | NA | 26.1.202 | 26.1.205 | 26.1.205 | 26.1.201 | NA | NA | 26.1.203 |
| SCP | 26.1.201 | NA | NA |
26.1.200 |
26.1.201 | NA | 26.1.202 | NA | NA | 26.1.201 | 26.1.203 | NA | NA |
| SEPP | 26.1.200 | 26.1.205 | 26.1.203 | 26.1.200 | 26.1.201 | 26.1.203 | 26.1.202 | 26.1.205 | 26.1.205 | 26.1.201 | 26.1.202 | 26.1.204 | 26.1.203 |
3.6 Generic Open Source Software Compatibility on Any Platform
Note:
The Software Requirement column in the following table indicates one of the following:- Mandatory: Absolutely essential; the software cannot function without it.
- Recommended: Suggested for optimal performance or best practices but not strictly necessary.
- Conditional: Required only under specific conditions or configurations.
- Optional: Not essential; can be included based on specific use cases or preferences.
Table 3-6 Generic Open Source Software Compatibility on Any Platform
| Software | Tested Software Version | Software Requirement | Category | Sub-Category | Category Requirement | Usage Description | |
|---|---|---|---|---|---|---|---|
| NF 26.1.2xx | NF 25.2.2xx | ||||||
| Kubernetes | 1.35.2 | 1.34.1 | Mandatory | Orchestration | Container Orchestration | Mandatory | Kubernetes orchestrates scalable, automated NF deployments for high availability and efficient resource utilization.
Impact: Preinstallation is required. Without orchestration capabilities, deploying and managing network functions (NFs) can become complex, leading to inefficient resource utilization and potential downtime. |
| Helm | 3.20.0 | 3.19.1 | Mandatory | Management | Kubernetes Package Management | Mandatory | Helm, a package manager, simplifies deploying and managing NFs on Kubernetes with reusable, versioned charts for easy automation and scaling.
Impact: Preinstallation is required. Not using this capability may result in error-prone and time-consuming management of NF versions and configurations, impacting deployment consistency. |
| Podman | 5.6.0 | 5.6.0 | Recommended | Runtime | Containerized NF Image Management | Mandatory | Podman manages and runs containerized NFs without requiring a daemon, offering flexibility and compatibility with Kubernetes.
Impact: Preinstallation is required. Podman is a part of Oracle Linux. Without efficient container management, the development and deployment of NFs could become cumbersome, impacting agility. |
| containerd | 2.2.1 | 2.0.5 | Recommended | Runtime | Container Runtime | Mandatory | Containerd manages container lifecycles for running NFs efficiently in Kubernetes.
Impact: A lack of a reliable container runtime could lead to performance issues and instability in NF operations. |
| Velero | 1.17.1 | 1.13.2 | Recommended | Backup | Backup and Disaster Recovery for Kubernetes | Optional | Velero backs up and restores Kubernetes clusters for 5G NFs, ensuring data protection and disaster recovery.
Impact: Without backup and recovery capabilities, customers would risk data loss and extended downtime, requiring a full cluster reinstall in case of failure or upgrade. |
| Kyverno | 1.16.1 | 1.15.0 | Recommended | Security | Kubernetes Policy Management | Mandatory | Kyverno is a Kubernetes policy engine that allows to manage and enforce policies for resource configurations within a Kubernetes cluster.
Impact: Failing to implement policy enforcement could lead to misconfigurations, resulting in security risks and instability in NF operations, affecting reliability. |
| MetalLB | 0.15.2 | 0.15.2 | Recommended | Networking | Load Balancer for Kubernetes | Mandatory | MetalLB provides load balancing and external IP management for 5G NFs in Kubernetes environments.
Impact: MetalLB is used as LB solution in CNE. LB is mandatory for the solution to work. Without load balancing, traffic distribution among NFs may be inefficient, leading to potential bottlenecks and service degradation. |
| CoreDNS | 1.12.4 | 1.12.0 | Recommended | Networking | Service Discovery for Kubernetes | Mandatory | CoreDNS is the DNS server in Kubernetes, which provides DNS resolution services within the cluster.
Impact: DNS is an essential part of deployment. Without proper service discovery, NFs would struggle to communicate with each other, leading to connectivity issues and operational failures. |
| Multus | 4.2.2 | 4.2.1-thick | Recommended | Networking | Networking for Kubernetes traffic segregation | Conditional | Multus enables multiple network interfaces in Kubernetes pods, allowing custom configurations and isolated paths for advanced use cases such as NF deployments, ultimately supporting network segregation.
Impact: Without this capability, connecting NFs to multiple networks could be limited, impacting network performance and isolation. |
| Fluentd | 1.19.0 | 1.17.1 | Recommended | Logging | Logging Agent | Mandatory | Fluentd is an open-source data collector that streamlines data collection and consumption, allowing for improved data utilization and comprehension.
Impact: Not utilizing centralized logging can hinder the ability to track NF activity and troubleshoot issues effectively, complicating maintenance and support. |
| OpenSearch | 2.19.1 | 2.18.0 | Recommended | Logging | Search/ Analytics/ Logging | Mandatory | OpenSearch provides scalable search and analytics for 5G NFs, enabling efficient data exploration and visualization.
Lack of a robust analytics solution could lead to challenges in identifying performance issues and optimizing NF operations, affecting overall service quality. |
| OpenSearch Dashboard | 2.19.1 | 2.18.0 | Recommended | Logging | Dashboard/ Visualization for OpenSearch | Mandatory | OpenSearch Dashboard visualizes and analyzes data for 5G NFs, offering interactive insights and custom reporting.
Impact: Without visualization capabilities, understanding NF performance metrics and trends would be difficult, limiting informed decision-making. |
| AlertManager | 0.30.0 | 0.28.0 | Recommended | Alerting | Alerting (Integration with Prometheus) | Mandatory | Alertmanager is a component that works in conjunction with Prometheus to manage and dispatch alerts. It handles the routing and notification of alerts to various receivers.
Impact: Not implementing alerting mechanisms can lead to delayed responses to critical issues, potentially resulting in service outages or degraded performance. |
| prometheus-kube-state-metric | 2.18.0 | 2.16.0 | Recommended | Monitoring | Kubernetes Metrics (for Prometheus) | Mandatory | Kube-state-metrics is a service that generates metrics about the state of various resources in a Kubernetes cluster. It's commonly used for monitoring and alerting purposes.
Impact: Without these metrics, monitoring the health and performance of NFs could be challenging, making it harder to proactively address issues. |
| Prometheus Operator | 0.85.0 | 0.83.0 | Recommended | Monitoring | Prometheus Instance Management in Kubernetes | Conditional | The Prometheus Operator is used for managing Prometheus monitoring systems in Kubernetes. Prometheus Operator simplifies the configuration and management of Prometheus instances.
Impact: Not using this operator could complicate the setup and management of monitoring solutions, increasing the risk of missed performance insights. |
| prometheus-node-exporter | 1.10.2 | 1.9.1 | Recommended | Monitoring | Node-Level Metrics for Prometheus | Mandatory | Node Exporter is a Prometheus exporter for collecting hardware and OS-level metrics from Linux hosts.
Impact: Without node-level metrics, visibility into infrastructure performance would be limited, complicating the identification of resource bottlenecks. |
| Prometheus | 3.9.0 | 3.6.0 | Mandatory | Monitoring | Metrics/Monitoring System | Mandatory | Prometheus is a popular open-source monitoring and alerting toolkit. It collects and stores metrics from various sources and allows for alerting and querying.
Impact: Not employing this monitoring solution could result in a lack of visibility into NF performance, making it difficult to troubleshoot issues and optimize resource usage. |
| Grafana | 7.5.17 | 7.5.17 | Recommended | Visualization | Monitoring/Visualization Tool | Mandatory | Grafana is a popular open-source platform for monitoring and observability. It provides a user-friendly interface for creating and viewing dashboards based on various data sources.
Impact: Without visualization tools, interpreting complex metrics and gaining insights into NF performance would be cumbersome, hindering effective management. |
| Calico | 3.30.6 | 3.30.3 | Recommended | Networking | Networking/Network Security for Kubernetes | Mandatory | Calico provides networking and security for NFs in Kubernetes with scalable, policy-driven connectivity.
Impact: CNI is mandatory for the functioning of 5G NFs. Without CNI and proper plugin, the network could face security vulnerabilities and inadequate traffic management, impacting the reliability of NF communications |
| metrics-server | 0.8.0 | 0.7.2 | Recommended | Monitoring | Resource Metrics for Kubernetes | Mandatory | Metrics server is used in Kubernetes for collecting resource usage data from pods and nodes.
Impact: Without resource metrics, auto-scaling and resource optimization would be limited, potentially leading to resource contention or underutilization. |
| snmp-notifier | 2.0.0 | 2.0.0 | Recommended | Notification | SNMP Notification Service | Mandatory | snmp-notifier sends SNMP alerts for 5G NFs, providing real-time notifications for network events.
Impact: Without SNMP notifications, proactive monitoring of NF health and performance could be compromised, delaying response to critical issues. |
| Jaeger | 2.14.1 | 1.72.0 | Recommended | Tracing | Distributed Tracing | Mandatory | Jaeger provides distributed tracing for 5G NFs, enabling performance monitoring and troubleshooting across microservices.
Impact: Not utilizing distributed tracing may hinder the ability to diagnose performance bottlenecks, making it challenging to optimize NF interactions and user experience. |
| rook | 1.17.7 | 1.16.7 | Recommended | Storage | Storage Orchestration | Mandatory | Rook is the Ceph orchestrator for Kubernetes that provides storage solutions. It is used in bm CNE solution.
Impact: CSI is mandatory for the solution to work. Not utilizing Rook could increase the complexity of deploying and managing Ceph, making it difficult to scale storage solutions in a Kubernetes environment. |
| cinder-csi-plugin | 1.35.0 | 1.33.0 | Recommended | Storage | Block Storage Plugin | Mandatory | Cinder CSI (Container Storage Interface) plugin is for provisioning and managing block storage in Kubernetes. It is often used in OpenStack environments to provide persistent storage for containerized applications.
Impact: Cinder CSI Plugin is used in OpenStack vCNE solution. Without this integration, provisioning block storage for NFs could be manual and inefficient, complicating storage management. |
3.7 Redhat Openshift Compliance Matrix
The following table lists the planned Redhat Openshift compliance matrix for each network function.
Table 3-7 Redhat Openshift Compliance Matrix
| CNC NF Release | Webscale | RH Openshift | K8s | Helm | F5 ASM | F5 SPK |
|---|---|---|---|---|---|---|
| cnDBTier 26.1.2xx | 1.3.x | 4.7.x | 1.20.x | 3.19.0 | 1.11.8 | NA |
| 1.5.x | 4.12.x | 1.25.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| 1.6.x | 4.14.x | 1.27.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| OSO 26.1.2xx | 1.3.x | 4.7.x | 1.20.x | 3.19.0 | 1.11.8 | NA |
| 1.5.x | 4.12.x | 1.25.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| 1.6.x | 4.14.x | 1.27.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| SCP 26.1.2xx | 1.3.x | 4.7.x | 1.20.x | 3.19.0 | 1.11.8 | NA |
| 1.5.x | 4.12.x | 1.25.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| 1.6.x | 4.14.x | 1.27.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| CNCC 26.1.2xx | 1.3.x | 4.7.x | 1.20.x | 3.19.0 | 1.11.8 | NA |
| 1.5.x | 4.12.x | 1.25.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| 1.6.x | 4.14.x | 1.27.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| NRF 26.1.2xx | 1.3.x | 4.7.x | 1.20.x | 3.19.0 | 1.11.8 | NA |
| 1.5.x | 4.12.x | 1.25.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| 1.6.x | 4.14.x | 1.27.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| NSSF 26.1.2xx | 1.3.x | 4.7.x | 1.20.x | 3.19.0 | 1.11.8 | NA |
| 1.5.x | 4.12.x | 1.25.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| 1.6.x | 4.14.x | 1.27.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| SLF 26.1.2xx | 1.3.x | 4.7.x | 1.20.x | 3.19.0 | 1.11.8 | NA |
| 1.5.x | 4.12.x | 1.25.x | 3.19.0 | 1.14.6 | 1.7.11 | |
| 1.6.x | 4.14.x | 1.27.x | 3.19.0 | 1.14.6 | 1.7.11 |
3.8 Security Certification Declaration
This section lists the security tests and the corresponding dates of compliance for each network function:
3.8.1 CNC Console Security Certification Declaration
Table 3-8 CNC Console Security Certification Declaration
| Compliance Test Description | Test Completion Date | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
July 01, 2026 | No unmitigated critical or high findings |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
June 28, 2026 | No unmitigated critical or high findings |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
July 01, 2026 | No unmitigated critical or high finding |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
July 01, 2026 | No findings |
Overall Summary: No critical or severity 1 security issues were found during internal security testing.
3.8.2 cnDBTier Security Certification Declaration
Release 26.1.201
Table 3-9 cnDBTier Security Certification Declaration
| Compliance Test Description | Test Completion Date | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
July 13, 2026 | No unmitigated critical or high findings |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
July 13, 2026 | No unmitigated critical or high findings |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
July 13, 2026 | No unmitigated critical or high finding |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
July 13, 2026 | No findings |
3.8.3 OCCM Security Certification Declaration
Release 26.1.200
Table 3-10 OCCM Security Certification Declaration
| Compliance Test Description | Test Completion | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
July 8, 2026 | No unmitigated critical or high findings |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
April 8, 2026 | No unmitigated critical or high findings |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
July 8, 2026 | No unmitigated critical or high finding |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
July 8, 2026 | No findings |
3.8.4 NRF Security Certification Declaration
Release 26.1.201
Table 3-11 NRF Security Certification Declaration
| Compliance Test Description | Test Completion Date | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
July 21, 2026 | No unmitigated critical or high findings |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
July 21, 2026 | No unmitigated critical or high findings |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
July 21, 2026 | No unmitigated critical or high finding |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
July 21, 2026 | No findings |
Overall Summary: No critical or severity 1 security issues were found during internal security testing.
3.8.5 NSSF Security Certification Declaration
Release 26.1.201
Table 3-12 NSSF Security Certification Declaration
| Compliance Test Description | Test Completion Date | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
June 26, 2026 | No unmitigated critical or high findings |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
June 26, 2026 | No unmitigated critical or high findings |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
June 26, 2026 | No unmitigated critical or high finding |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
June 26, 2026 | No findings |
Overall Summary: No critical or severity 1 security issues were found during internal security testing.
3.8.6 OCI Adaptor Security Certification
Table 3-13 OCI Adaptor Security Certification Declaration
| Compliance Test Description | Test Completion Date | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
July 15, 2026 | No unmitigated critical or high findings |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
NA | No unmitigated critical or high findings |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
July 15, 2026 | No unmitigated critical or high finding |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
July 15, 2026 | No findings |
Overall Summary: No critical or severity 1 security issues were found or pending during internal security testing.
3.8.7 SCP Security Certification Declaration
Release 26.1.201
Table 3-14 SCP Security Certification Declaration
| Compliance Test Description | Test Completion Date | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
July 21, 2026 | No unmitigated critical or high findings |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
July 21, 2026 | No unmitigated critical or high findings |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
July 21, 2026 | No unmitigated critical or high finding |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
July 21, 2026 | No findings |
Overall Summary: No critical or severity 1 security issues were found during internal security testing.
3.8.8 SEPP Security Certification Declaration
Table 3-15 SEPP Security Certification Declaration
| Compliance Test Description | Test Completion Date | Summary |
|---|---|---|
| Static Source Code Analysis
Additional Info: Assesses adherence to common secure coding standards |
July 31, 2026 | No unmitigated critical or high findings. Scan done through Fortify. |
| Dynamic Analysis (including fuzz testing)
Additional Info: Tests for risk of common attack vectors such as OWASP Top 10 and SANS 25 |
April 14, 2026 | No unmitigated critical, high, medium, and low findings. Scan done through RestFuzz. |
| Vulnerability Scans
Additional Info: Scans for CVEs in embedded 3rd party components |
July 31, 2026 | No unmitigated critical or high findings. Scan done through Blackduck. |
| Malware Scans
Additional Info: Scans all deliverable software packages for the presence of known malware |
July 31, 2026 | No issues found. Scan done through McAfee. |
Overall Summary: No critical or severity 1 security issues were found during internal security testing.