2.4.5.5

Req No	Requirement	Compliance Class And Applicability	Primary Keyword	Secondary Keyword
2.4.5.5	If the product has any virtual port(s) that are not required for normal operation, they are only allowed to communicate with authorised and authenticated entities or are securely disabled when shipped. When a port is initialised or used for field diagnostics, the port input commands are deactivated and the output provides no information which could compromise the device, such as credentials, memory address or function names.	Mandatory for Class 2 and above	System	Software