Archived TD0387: VPN Client Required SFR for GPOS as Base PP
Section 5.1.1 of the VPN Client Module indicates FCS_CKM_EXT.3 from the GPOS PP is an applicable unmodified SFR; however, FCS_CKM_EXT.3 does not exist in the GPOS PP.
Replace FCS_CKM_EXT.3 with FCS_CKM_EXT.4.
The VPN Client Module was written for OSPP v4.1 which had a FCS_CKM_EXT.3 SFR (it was replaced with FCS_CKM_EXT.4 via TD330). When the OSPP was updated from v4.1 to 4.2, the reference to FCS_CKM_EXT.3 was not updated.