constrained device, it shall have an update mechanism for the secure installation of updates. by the device and how each of them are secure. The update mechanism(s) should ensure the authenticity and integrity of software updates. Examples of secure update mechanisms not limited to the following: • • • 5.3-3: An update shall be simple MC (12) MC (12) MC (12) MC (12) Updates to be transferred over a secure channel (HTTPS); Device should employ antirollback policy based on version checking of the firmware; For updates that are downloaded manually from the developer's website by the user, the firmware is encrypted and there is a mechanism for the end-user to verify the authenticity and integrity of the firmware. Some devices may not be able to support or be required to provide software updates. For such constrained devices, this provision may not be applicable. Please provide justification for how the device is a constrained device. Supporting evidence shall describe the various software update mechanisms CLS Publication #2 | Page 27 of 49