Many device manufacturers supply the products used to manage critical infrastructure operations. It has become imperative to identify products as trustworthy before buying, installing or using a product. The US Coast Guard now requires "approved product lists" (a/k/a product Trust Registry) to identify products that are allowed to be used in IT and OT domains.