Paragraph 4 Sensitive security parameters
(1)
A relevant charge point must be configured so that—
(a)
where security credentials are stored on the relevant charge point, these are protected using robust security measures;
(b)
its software does not use hard-coded security credentials.
(2)
In this paragraph—
(a)
“hard-coded” means data forming part of the relevant charge point’s source code and which is unalterable except by means of modification of the source code;
(b)
“security credentials” means ways of verifying that the relevant charge point is being used or accessed by a person properly authorised to do so.