EU-CRA and the ongoing standardization work

Hi coreboot community.


As presented on the last OSFC, there is quite some work currently
ongoing in the context of the upcoming EU Cyber Resilience Act
(EU-CRA, [1]).
Among the activities is the creation of harmonized standards which
will be used to help in conformity assessment of the different
applications, which are driven by ETSI.

Some of the standards are now publicly available for review and I
encourage you to take a closer look and provide feedback.
You can find the draft standards as well as a feedback form here: [2].
Especially the standard for Boot Managers (see [3]) is highly
interesting for the firmware space.

In case of questions feel free to reach out to me.
Werner

[1]: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CONSIL%3APE_100_2023_REV_1&qid=1731449736656
[2]: https://docbox.etsi.org/CYBER/EUSR/Open/
[3]: https://docbox.etsi.org/CYBER/EUSR/Open/EN-304-623_V0.0.4_2025-09-30_Boot_Managers.pdf
_______________________________________________
coreboot mailing list -- [email protected]
To unsubscribe send an email to [email protected]