We're considering activating the clock windback protection in FNE (which has not been active in our existing devices yet). I know that it is quite application specific, however we wondered if you got some best practices regarding the wind-back activation settings - the frequency and tolerance in particular.
do most devices using FNE have clock wind-back activated or not?
if active, what is the average frequency / tolerance
do you recommend any specific values here?
How often does the license storage get updated when clock windback protection is active? Is it "frequency" per day or is it "frequency" per day PER acquired license? Are there any special circumstances under which the trusted storage would be updated often when clock windback is active? We are a bit unsure about how often the trusted storage is updated when clock windback is active as we use an emmc (flash) which should not be written "too" often on a continuous basis.
With the clock windback frequency set to 1 day, the timestamp in the Trusted Storage anchor file will be updated once per day. The number of licenses in Trusted Storage will not have an impact. Note that processing a new capability response into Trusted Storage will also result in a timestamp update.
Thank you! One thing I stil haven't figured out yet is how often the actual storage is updated. With a frequency of 1 day, is the storage updated once every day or once - per license - every day, e.g. 10 updates with 10 used licenses on the system.
With the clock windback frequency set to 1 day, the timestamp in the Trusted Storage anchor file will be updated once per day. The number of licenses in Trusted Storage will not have an impact. Note that processing a new capability response into Trusted Storage will also result in a timestamp update.
