ETSI Draft Puts Boot Managers Under CRA Scrutiny
· 4 min read
On 17 June 2026, ETSI's work item for EN 304 623, Cybersecurity requirements for boot managers, entered the deliverable approval procedure. The public draft shows how the Cyber-Resilience Act (CRA) is reaching below operating systems and applications into the firmware that establishes the first chain of trust.