PSTI Statement of Compliance

United Kingdom — Product Security and Telecommunications Infrastructure Act 2022

Draft — not yet issued. This Statement of Compliance is in preparation and not in force. It is gated on the per-device credential (unique, non-derivable password per unit) being implemented and shipped in firmware, and on the support-period end date being fixed. A signed Statement of Compliance ships with each product at launch.

← Back to Product Compliance

Statement of Compliance

Issued under the Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023, made under the PSTI Act 2022.

ProductYachtWave Link — NMEA 2000 marine gateway
Model / typeYLK-1-WIFI
ManufacturerDurban Equity Holdings II, LLC (dba YachtWave), 6901 Professional Parkway E, Sarasota, FL 34240, USA
Statement reference[SoC-YLK-1-WIFI-nnnn]

The manufacturer declares that the product identified above complies with the applicable security requirements in Schedule 1 to the Regulations, as follows:

1. No universal default passwords

The product does not use a universal default password. Each unit is provisioned with a password that is unique per device and not derivable from public information (such as a serial number or MAC address). The credential cannot be reset to a universal factory value.

2. Information on how to report security issues

The manufacturer provides and maintains a means for reporting security issues, with a defined acknowledgement and status-update process. See our Product Security & Disclosure page.

3. Information on minimum security update periods

The manufacturer publishes the minimum length of time for which security updates will be provided for the product, expressed as an end date. The defined support period is stated on our Product Security & Disclosure page: security updates provided until [YYYY-MM-DD].

The factory Wi-Fi access-point state relies on the deemed-compliance route of ETSI EN 303 645 provision 5.1-1; the in-service credential is unique per product, satisfying the "no universal default passwords" requirement.

Signed for and on behalf of the manufacturer:

Durban Equity Holdings II, LLC (dba YachtWave)

/john e. okeefe/

Electronic signature

Name: John O'Keefe  ·  Title: Chief Executive Officer
Place of issue: [City, Country]  ·  Date of issue: [YYYY-MM-DD]