img
img
img
img

71 New or Updated O-RAN Technical Documents Released since November 2025

Since November 2025, O-RAN ALLIANCE (O-RAN) Work Groups and Focus Groups published 71 technical documents, bringing the total to 144 unique titles. Four documents represent new titles.

All O-RAN technical documents are available for download at www.o-ran.org/specifications.

New specification titles are:

O-RAN D2 Interface: D2 Application Protocol (D2AP)

First version of the stage 3 specification for D2 interface, which specifies C-plane and U-plane aspects.

O-RAN D2 Interface: O&M Requirements v1.00

This specification summarizes the requirements on D2 configuration parameter and PM counter.

O-RAN Architecture and Requirements for RAN Fronthaul over Converged Packet Transport Network v1.00

This document provides a functional reference architecture of the RAN Fronthaul over Converged Packet Transport Networks.

O-RAN Application Packaging General Aspects & Principles v1.00

This document specifies the general aspects, principles, use cases, information model, and requirements pertaining to the format and content of an Application Package which then allows the Network Operator to Onboard the Solution Provider's Application to the SMO through the Onboarding SMOS.

Figure 1: O-RAN Logical Architecture

Overview of O-RAN ALLIANCE Specifications Published Since November 2025

WG1: Use Cases and Overall Architecture Work Group

O-RAN Use Cases Analysis Report v19.00

This document describes potential O-RAN use cases at a very high level, emphasizing how the use case is enabled by the O-RAN architecture along with basic input data expectations and resulting actions. This version of O-RAN Use Cases Analysis Report includes addition of two Energy Savings sub-use cases (External power source coordination-based energy saving and PA power optimization-based energy saving) and addition of a clause with void content as placeholder for RAN intent-driven management services use case.

O-RAN Use Cases Detailed Specification v19.00

This document describes selected O-RAN use cases in further details to facilitate relevant O-RAN Work Groups to define requirements for associated O-RAN functions and interfaces. This version of O-RAN Use Cases Detailed Specification includes a new use case addition (RAN intent-driven management services), addition of four Energy Savings sub-use cases (RF channel reconfiguration for network energy savings, Advanced Sleep Mode for network energy savings, External power source coordination-based energy saving and PA power optimization-based energy saving), updates to Cell shaping optimization use case and editorial corrections.

O-RAN Communication and Computing Integrated Networks v2.00

The communication and computing integrated networks study (TR) presents the use cases for integrated communication and computing in O-RAN. This version includes a new solution for edge application orchestration on O-Cloud via SMO, enhancing the framework for integrated service provisioning and lifecycle management.

O-RAN RIC Enabling NTN Deployments v2.00

This technical report investigates the various optimization use cases which concern 5G Non-Terrestrial Networks, as well as their coordinated coexistence with 5G Terrestrial Networks. This version has added and updated Intra-NTN Mobility Use Cases.

O-RAN Architecture Description v16.0

The O-RAN Architecture Description document specifies the overall architecture of O-RAN. It describes all O-RAN architecture elements and relevant interfaces that connect them. This version replaces the detailed figure “SMOSs in the SMO SBA representation” with a higher-level figure “SMO architecture overview”. The associated text has been updated to align with the new figure.

O-RAN SMO Architecture v2.00

The SMO Architecture specifies the O-RAN SMO architecture. It includes a service-based SMO architecture diagram, and it provides a description of the SMOSs (SMO Services) in the SMO. It also describes aspects such as SMOS Communications, R1 interface and R1 termination, and support for external service/data producers and/or consumers. This version adds an introduction to intent-based network management, introduces the SMO services, and describes the SMO role as southbound interface consumer.

WG2: The Non-real-time RAN Intelligent Controller and A1 Interface Work Group

O-RAN R1 interface: General Aspects and Principles v13.00

The O-RAN R1GAP Specification summarizes the R1 interface specification objectives and specifies the principles and procedures related to the O-RAN R1 interface. The specification version was published after updating the data registration procedures and the AI/ML model training capability registration services.

O-RAN R1 interface: Use Cases and Requirements v12.00

This document describes use cases and requirements for the O-RAN R1 interface. This version of the specification has been updated to include the use case for retrieving data jobs from a registered DME type.

O-RAN R1 interface: Application Protocols for R1 Services v10.00

This document contains a realization for the procedures identified in O-RAN R1 interface: General Aspects and Principles. This version of the specification is published with the following updates: enhancements to Open APIs to include the SCCL license; modifications to data availability notifications for the Data Access API and the Data Offer API; and updates to the Configuration Schema API to the release version.

O-RAN Type Definitions for R1 Services 4.02

This document specifies the Type Definitions for R1 Services. It is part of a TS-family covering the R1 interface specifications. This version of the specification is published with the addition of the SCCL license to the JSON schemas.

O-RAN R1 interface: Test Specification v5.00

This document specifies test cases for conformance testing and interoperability testing of the rApps and R1 services over R1 interface. This version of the specification includes the following test cases:

  • Configuration Management Service
  • Fault Management Service
  • DME — Query Data Subscription
  • HTTP Push
  • HTTP Pull
  • Configuration Schema
  • AI/ML model training
  • AI/ML model deployment
  • AI/ML model discovery

O-RAN A1 interface: General Aspects and Principles v5.02

This document specifies the general aspects and principles of the A1 interface. This version brings updated A1 ML related procedures.

O-RAN A1 interface: Application Protocol v6.00

This document specifies the application protocol of the A1 interface. This version brings updated software license statements and definition of A1-ML/v1 (A1 ML model management service).

O-RAN A1 interface: Type Definitions v11.01

This specification defines the data types for A1 Policies and A1 Enrichment Information in a reusable and extensible way. It allows new policy types to be created independently of the generic application protocol parts. This version brings updated software license statements.

O-RAN A1 interface: Test Specification 5.00

This document specifies test cases for conformance testing and interoperability testing of the Non-RT RIC and the Near-RT RIC over the A1 interface. This version brings removes negative test cases related to callbacks.

O-RAN A1 interface: Use Cases and Requirements v5.00

This document describes use cases for the O-RAN A1 interface. This version brings use case for AI/ML model training cancellation.

O-RAN Study on Impact of Decoupled SMO on Non-RT RIC Architecture and Interfaces v2.0

This document specifies study aimed at exploring the integration of the principles and recommendations of the Decoupled SMO Architecture TR into the WG2 specifications. This version includes WG2 Non-RT RIC architecture, A1, R1, UCR related aspects impact analysis and recommendation.

O-RAN Non-RT RIC & A1/R1 interface: Use Cases and Requirements v11.00

This document describes O-RAN WG2 Non-RT RIC use cases in detail including the required datasets, the flows, and the interactions within and outside of Non-RT RIC with other O-RAN components. As a result of the use case analysis, this specification captures the requirements imposed by these use cases on the Non-RT RIC architecture, A1 and R1 interfaces as well. This version of the specification includes the addition of four new Energy Savings sub use cases (Spatial and power domain optimization, SSB-less SCell optimization for inter-band CA, PA power optimization for O-RU energy saving, External power source coordination-based energy saving) and updates to address ETSI PAS Review Comments.

WG3: The Near-real-time RAN Intelligent Controller and E2 Interface Workgroup

O-RAN Use Cases and Requirements v10.00

This document details the functional and non-functional requirements on Near-RT RIC and E2 interface from the O-RAN use cases under study in O-RAN WG3. This version of the specification includes addition of four Network Energy Saving sub-use cases (Deep hibernate, Spatial and power domain, SSB-less SCell optimization and PA power optimization), addition of descriptions for these sub-use cases to Network energy saving use case and editorial corrections.

O-RAN Y1 interface: General Aspects and Principles v1.02

The document specifies the general aspects and principles ((incl. services, supported information types, protocol structure) of the Y1 interface, which connects the Near-RT RIC with an authorized Y1 consumer. This version contains editorial improvements and corrections for O-RAN Drafting Rule (ODR) alignment.

O-RAN Y1 interface: Application Protocol v1.02

The document specifies the application protocols (API definition, solution sets) of the Y1 services. This version contains editorial improvements and corrections for O-RAN Drafting Rule (ODR) alignment.

O-RAN Y1 interface: Type Definitions v3.00

The document specifies data types that are applicable on the Y1 interface. This version includes enhancement on the granularity of RAN analytics information (RAI), and new attributes for the RAI type “RAN performance analytics”. It also includes editorial revisions to align with O-RAN Drafting Rules (ODR).

O-RAN Near-RT RIC Architecture v8.00

The O-RAN Near-RT RIC Architecture TS specifies the Near-RT RIC internal architecture and functionalities, and the stage 2 definitions of Near-RT RIC APIs. This version includes enhancement on E2 Guidance services, simplification for SDL Information service, and O-RAN Drafting Rules (ODR) related corrections and improvements.

O-RAN Near-RT RIC APIs v3.00

The RICAPI document specifies the Near-RT RIC API stage 3 definitions. This version of RICAPI document introduces the definitions for AI/ML APIs, and the definitions for E2 query and E2 subscription modification for E2 Subscription API. This version also integrates various general improvements and corrections, including the removal of SCTP protocol support and the simplification of message table formats.

WG4: The Open Fronthaul Interfaces Work Group

O-RAN Control, User and Synchronization Plane Specification v20.00

This document specifies the control plane, user plane and synchronization plane protocols used over the fronthaul interface. The summary of updates for this version is below:

Introduction of new as well as enhancements to existing functionalities, including:

  • PUSCH repetition indication for DMRS-BF
  • Support of current slot UE frequency offset measurement in DMRS-BF
  • Support of Multi-User interference level measurement in DMRS-BF-EQ
  • Single value per section SINR reporting for DFT-s-OFDM
  • Removal of support for information element rb=1 in uplink
  • Removal of information element regularizationFactor in Section Type 6
  • Clarification to reporting of supported transmission and reception bandwidth in NB-IoT
  • Clarification to sending of PRG size information using Section Extension 21

Clarifications, to:

  • C-Plane constraints applicable when information element reMask=0
  • Usage of information element regularizationFactor in Section Extension 8

Corrections, to:

  • Conditions for support of Block Floating Point compression in DMRS-BF
  • Applicability of Quality-of-service classes to different types of Open Fronthaul traffic
  • Interaction of Section Extension 10 with Section Extensions 1, 11 and 19

Editorial changes and fixes to typographical errors.

O-RAN Management Plane Specification v20.00 & YANG Models

This specification defines the Management Plane for the O-RAN Open Fronthaul based on the selected lower-layer split point as defined within the Open Fronthaul Control Plane, User Plane and Synchronization Plane specification. The summary of updates for this version is below.

Addition of new functionality, including:

  • Introduce sub-module handling
  • Add new feature POINT-A-OFFSET-TO-ABSOLUTE-FREQUENCY-CENTERTX
  • Switch TLS1.3 to be mandatory
  • Configurable SSH algorithms
  • Import IETF Features for SSH and TLS Servers
  • Self-tunable transceiver diagnostics
  • O-RU autonomous re-keying
  • CRL checking requirements
  • re-pnf-registration-timer
  • invalid FOE indication
  • MU interference level RRM measurement
  • capability for single value SINR report for DFT-sOFDM

Clarifications and corrections to v19.00:

  • Correct missing MEAS-UE-RADIAL-SPEED and MEAS-UE-POS features
  • Clarify maximum simultaneous eAxC ID formats
  • Address ETSI PAS comments
  • admin-state and availability-state dependency clarification
  • Correct ALD DC enabling
  • Performance measurement statistics calculation cleanup
  • Clarify CMPv2/HTTPS
  • Align password definitions
  • Update to history table format
  • Clarifications to delete carrier operations
  • Correct cross references to CUS-plane specification
  • Clarify Trust Anchor Provisioning
  • Clarify operation with vendor signed certificates
  • Clarify TLS Certificate handling
  • Corrections in performance management
  • Clarification of low-level link creation
  • Correction of PM format examples
  • Clarification of handling different M-Plane versions
  • Clarify certificate enrolment requirements
  • Clarify NETCOF authorisation

O-RAN Fronthaul Interoperability Test Specification (IOT) v15.00

This document specifies the interoperability testing (IOT) for O-DU and O-RU from different vendors connected using the O-RAN fronthaul (FH) interface. This version brings:

Addition of new tests, including:

  • Extend Radio L3 initial data transfer test to record early/late packets
  • Add bi-directional throughput test
  • Add N-UE uplink test
  • Add NES M-Plane testcase
    • Update test equipment to measure M-Plane Netconf notifications

Enhancements and clarifications to v14.00:

  • Clean-up of IOT beamforming profiles
  • Clarify/update number of required UE data layers in beamforming tests

O-RAN Conformance Test Specification v15.00

This document defines tests that validate the conformance to the protocols defined for the Lower Layer Split Option 7.2x interface between the O-RU and the O-DU. This version brings:

Addition of new test cases, including:

  • Expanding the M-Plane test cases when O-DU is the DUT:
    • 3.1a.11, 3.1a.1.2, 3.1a.1.3 and 3.1a.1.4 Transport and Handshake tests.
    • 3.1a.4.1 Retrieval of Netconf Server’s Information Elements.
    • 3.1a.5 Fault Management.
    • 3.1a.6.1 Software Update and Install
    • 3.1a.7.1 Software Activation.
    • 3.1a.8.1 Sudo on M-Plane Architecture models.
    • 3.1a.9.1 Netconf Server configurability test.
    • 3.1a.10.1 ALD Communications test.
    • 3.1a.11.1 and 3.1a.11.2 Log Management tests.
    • 3.1a.12.1 and 3.1a.12.2 Connectivity Check tests.
    • 3.1a.13.1, 3.1a.13.2 and 2.1a.13.3 Energy Savings tests.

Enhancements and clarifications to v14.00:

  • Enhancements and edits on M-Plane O-RU trace test.
  • Enhancements and edits on the CU-Plane for beamforming tests when O-DU is the DUT, clarification on Uplink requirements in TDD test cases and counter granularity for the Delay Management Tests.

WG5: The Open F1/W1/E1/X2/Xn Interface Work Group

O-RAN NR C-plane profile v17.00

The scope of C-Plane profile spec is to further clarify (i.e. profile) for each RAN node the expected behavior (still within the scope of the 3GPP specifications). E.g., Usage of IEs for each use case, general behavior of each node, etc. C-Plane profile spec contains profiles of X2/F1/Xn C-Plane procedure for EN-DC use cases, NR-SA use cases and NR-DC use cases.  This version implements 12 CRs for corrections/clarifications on existing use cases.

O-RAN Interoperability Test Specification (IOT) v15.00

The scope of WG5 IOT spec is to specify interoperability tests for RAN Node from different vendors implemented in accordance to the WG5 C-plane and U-plane profiles in the specification WG5.C.1. and WG5.U.0, respectively. In this version 10 CRs for new test cases of C-plane profile or correction on existing test cases are implemented.

O-RAN D2 Interface: General Aspects and Principles v3.00

New specification to specify general aspects and principles for the interface between DUs (D2 interface).
C-plane – fundamental control signaling (D2 setup, UE add./mod./del., etc.) are specified. U-plane – procedure on transferring user data between O-DUs are specified. Synchronization/Transport – specified that existing WG9 requirements and specifications can fulfill the requirement for D2. This version implements CRs for correction/maintenance.

O-RAN D2 Application Protocol (D2AP) v1.00

This is first version of the stage 3 specification for D2 interface, which specifies C-plane and U-plane aspects.

O-RAN D2 Interface: O&M Requirements v1.00

This is first version of the specification which summarizes the requirements on D2 configuration parameter and PM counter.

WG6: The Cloudification and Orchestration Work Group

O-RAN O2dms Interface Specification: Profile based on ETSI NFV v10.00

This TS specifies the O-RAN O-Cloud’s DMS interface protocol and data model based on the ETSI NFV solutions. This version of the O2DMS INTERFACE ETSI NFV PROFILE adapts the document to the latest version of the O-RAN TS template. No technical changes have been introduced, and this version only includes editorial corrections and template alignment.

O-RAN O2 Interface General Aspects and Principles v10.00

This specification defines O-RAN O-Cloud functions and protocols for the O-RAN O2 interface. This version of the O2 General Aspects and Principles specification adds support for connectivity and timesync, placement, and fixes some editorial issues.

O-RAN O2dms Interface Specification: Kubernetes Native API Profile for Containerized NFs v7.00

This specification outlines the deployment management services of the O2dms interface profile based on Kubernetes Native API for containerized NFs. This version of the O2dms K8s Profile specification adds support for the following K8s resources, ServiceAccount, Role, and RoleBinding.

O-RAN Report on FOCOM and NFO SMOSs Northbound Interfaces v2.00

FOCOM SMOS Use Cases, covering O-Cloud infrastructure and resources provisioning, O-Cloud performance data collection and monitoring, Software management. Potential requirements introduced for FOCOM SMOS NBI. Recommendations for further analysis related to the FOCOM SMOS NBI Technical Specification. This version of the FOCOM and NFO SMOS technical report adds FOCOM use cases for alarms, logs, and software update.

O-RAN O-Cloud Information Model v6.00

The O-Cloud Information Model provides the logical model of information elements and their relationships.

This release brings changes to element attributes and inclusion of stage 3 YAML (Open API Specification) files for all namespaces.

O-RAN O-Cloud Interoperability Test (IOT) Specification v2.03

This document provides O-Cloud IoT specification, and includes definition of the interoperability testing methodology and a set of tests for the O-Cloud Notification API. This version voids the normative reference [2], [6] and [7].

O-RAN O2ims Interface Specification v11.00

This specification defines O-RAN O-Cloud IMS interface functions and protocols for the O-RAN O2 interface. This version of the O2ims specification updates the Performance API to add support for PM Jobs, and the Provisioning API for new and updated data types.

O-RAN Cloudification and Orchestration Use Cases and Requirements for O-RAN Virtualized RAN v15.00

This document introduces different use cases for O-RAN orchestration of virtualized RAN and the interfaces used for management and orchestration, in particular the O1 interface between the service management and orchestration framework and the RAN managed functions and the O2 interface between the service management and orchestration framework and the O-Cloud Infrastructure Management Services/Deployment Management Services that controls resource assignment for Virtualized Network Functions. The Cloudification and Orchestration Use Case TS v15.00 incorporates a number of editorial corrections and terminology alignment (such as "Managed Infrastructure Template (MIT)") and new use cases for Provision/Update Resources using MIT, Log Discovery, and WebSocket based PM Streaming Reporting.

WG7: White-box Hardware Work Group

O-RAN Hardware Reference Design Specification for Outdoor Micro Cell with Split Architecture Option 7.2 v5.01

This document specifies the hardware reference design as required by architecture and requirements for the Outdoor Microcell and deployment scenario and base station classes specifications. This revision contains Software Defined Radio (SDR) SoC based hardware reference design for Outdoor Micro Cell with split architecture option 7.2.

WG8: Stack Reference Design Work Group

O-RAN Base Station O-DU and O-CU Software Architecture and APIs v17.00

This specification defines the O-CU and O-DU software architecture, functional blocks, and API definitions. This version brings Massive MIMO (GoB) description update and D2 procedures description update.

WG9: Open X-haul Transport Work Group

O-RAN Xhaul Transport Requirements v2.00

This document defines the requirements for an Open Xhaul transport infrastructure. This version adds transport requirements of the D2 interface.

O-RAN Xhaul Packet Switched Architectures and Solutions v10.00

The document is intended to describe best practices for O-RAN Transport Network (TN) based on end-to-end packet switching technology. This version adds a subsection on D2 interface and updates the subsection 9.1 on Physical layout and xHaul transport options. It also adds a section on Applicability of IETF Computing-Aware Traffic Steering (CATS) to O-RAN Scenarios.

O-RAN Architecture and Requirements for RAN Fronthaul over Converged Packet Transport Network v1.00

This document provides a functional reference architecture of the RAN Fronthaul over Converged Packet Transport Networks.

WG10: OAM Work Group

O-RAN O1 Interface Specification v18.00

This document specifies management services for the O-RAN O1 interface and includes requirements, notifications and protocols. Summary of the changes since the previous version:

  • Updated the Fault Supervision for AlarmList states and the reliability of Alarm Lists
  • Clarified PNF registration notification
  • Clarified Alarm requirements

O-RAN Information Model and Data Models Specification v13.00 & YANG Models

The O-RAN Information Model and Data Models document specifies the Information Model and the Data Models that are foundational for O-RAN’s model-driven architecture and for the functions carried out over O-RAN interfaces. Summary of the changes since the previous version:

  • Correction for probableCause attribute description
  • Dictionary attributes update
  • Editorial updates
  • Release version update

O-RAN Operations and Maintenance Architecture v17.00

The O-RAN OAM Architecture identifies management services, functions and interfaces supported in O‑RAN, including the interworking between SMO and O-RAN O-Cloud components. Requirements are derived from end-to-end OAM use cases, including the initial provisioning of O-RAN service across VNFs and PNFs and the collection of measurement data. Summary of the changes since the previous version:

  • New end-to-end OAM use cases for:
    • Basic Resiliency for O-CU-CP
    • Basic Resiliency for O-DU
    • Advanced Resiliency for O-CU-CP
    • Advanced Resiliency for O-DU
    • Network Energy Savings – PA Power Optimization
    • OFH-related O1 Alarm handling by O-DU
  • Clean-up of errors in O-RAN Provisioning use case.
  • 3GPP TS 28.541 added to Informative references, and subsequently in Table 4.2.4.4.2.2-1, Step 7-10, "F1 Startup step. See 3GPP TS 28.541 [x], Annex A.1.", [x] has been given a proper reference number.
  • Corrections to Hierarchical O-RU use case formatting.
  • Compliance with ODR:
    • Smart quotes changed to straight quotes throughout the document.
    • The word "section" changed to "clause" throughout the document.
    • Corrections to notes in the E2E use cases.
  • Added List of figures & List of tables.
  • Release number changed from R004 to R005.
  • Copyright year changed from 2025 to 2026.
  • Voided Annex Z now removed.

O-RAN O1 Performance Measurements Specification v5.00

The present document specifies the O-RAN Performance Measurements (PMeas) for 5G networks that may be supported on the O1 Interface. This version brings:

  • Addition of a new measurement for the number of SgNB addition requests
  • Correction of volume-related measurements
  • Alignment with 3GPP on PM family names
  • Editorial adjustments

O-RAN Topology Exposure & Inventory Common Information Models and Interface Specification - Stage 2 v6.00

This document specifies the Information Model used to support TE&IV services within the SMO. The TE&IV Information Models described in this document are structured using the concept of Namespaces. In addition, relevant sections in this document include information imported from existing standards and industry work that serve as a basis for O-RAN TE&IV. Summary of the changes from the previous version:

  • Update the “Resource” Phrase for the TEC
  • Fixed references
  • Updated the attributes for the TE&IV Cloud Model

O-RAN Topology Exposure and Inventory Data Model Specification - Stage 3 v4.00

This document specifies the TE&IV Data Models used to support TE&IV services within the SMO.

Summary of changes from the previous version:

  • Added YANG definitions for the TE&IV Physical Model
  • Added a “Presence” field for YANG attributes
  • Updates to Stage-3 TE&IV Cloud YANG Module as per TE&IV Stage-2 CIMI updates

O-RAN Topology Exposure and Inventory Application Protocols Specification - Stage 3 v4.00

This document specifies the TE&IV APIs used to support TE&IV services within the SMO. Summary of the changes from the previous version:

  • Removed unused error codes in the TE&IV API
  • Replaced O-RAN Alliance license with the SCCL License

O-RAN Application Packaging General Aspects & Principles v1.00

The present document specifies the general aspects, principles, use cases, information model, and requirements pertaining to the format and content of an Application Package which then allows the Network Operator to Onboard the Solution Provider's Application to the SMO through the Onboarding SMOS.  

WG11: Security Work group

O-RAN Security Test Specifications v12.00

These specifications validate the proper implementation of security requirements and protocols, emulate security attacks, and validate the effectiveness of security mitigation methods. The version 12 of the STS document introduces several important security enhancements, including new clauses on MACsec, password policy enforcement (covering default password changes, salted password storage, encrypted client secrets, and O-RU–specific password rules), and expanded controls on unauthorized port behavior, authorization policy enforcement, certificate-verification applicability, SSH key–based authentication, and NACM authorization validation on the Open FH M-plane. Alongside these updates, some content has been removed for simplification or consolidation, specifically the sections on API Consumer, NACM logging monitoring, SSH certificate–based NACM access control, and application image deployment security.

O-RAN Security Requirements and Controls Specifications v14.00

This Technical Specification contains security requirements and controls for O-RAN architecture elements, O-RAN defined interfaces, and transversal security requirements and controls for the O-RAN architecture. The version 14.00 of the technical specification introduces updates to the D2 interface, continuous security monitoring requirements which includes DoS Packet Flooding and unusual resource usage alarms/counters, as well as security requirement for key management for IEEE 1588 Authentication TLV, AAL-specific logging. It mandates TLS 1.3 for Open FH M-Plane, enhances least privilege enforcement, authorization expiration, and refines password controls for all credentials. Security requirements are added for AppLCM software updates, Software Onboarding SMOS verification of software authenticity and integrity, AI/ML model dependency checks, and AI/ML continuous security monitoring. Further updates cover Non-RT RIC, rApps (including ZTA function requirements for data access), O-RU vendor credentials, and shared O-RU NACM support. Requirements and controls for AAL components are updated based on ZTA O-Cloud gap analysis and HAM changes, voiding supply chain controls for AAL. The SBOM clause is refined, and Threats/Security Requirements mappings are added in the Annex D of the specification.

O-RAN Security Protocols Specifications v14.00

This document provides security protocol specifications for an O-RAN compliant implementation. Version 14.00 of the technical specification updates the AES-GCM related definitions for SSH, fixes a number of errors in the references clause, updates the definition of salts for password protection, introduces the support for OAuth access token expiration and fixes one of the definitions for key exchange algorithm support.

O-RAN Security Threat Modeling and Risk Assessment v8.00

The O-RAN Security Threat Modeling and Risk Assessment Technical Report (TR) identifies critical assets and outlines potential security threats to the O-RAN system, along with guiding security principles to mitigate those risks. It also evaluates the likelihood and potential impact of each identified threat on the overall system. Version 8 enhances the definition of AAL and E2-related assets, introduces new AI/ML threats focusing on evasion attacks along with their risk assessments, and updates the existing AI/ML threat set by explicitly incorporating the associated vulnerabilities.

O-RAN Study on Security Configuration Management v2.00

Security Configuration Management technical report identifies the security YANG models for O-RAN framework fulfilling the security requirements specified and applies to relevant O-RAN interfaces (O1, Open Fronthaul M-plane). It also performs the security gaps related to security configuration such as certificate configuration, NACM configuration and LDAP configuration. The version 02.00 of the SCM TR consists of a security threats analysis for general security configurations, NACM configurations, and LDAP configurations.

O-RAN Study on Post-Quantum Cryptography v2.00

The O-RAN Study on Post-Quantum Cryptography is to aid in the migration to Quantum Safe Cryptography (QSC), which essential to ensure the long-term security and resilience of O-RAN networks against potential quantum computer-based attacks. Version 02.00, in addition to minor editorial updates, adds coverage for CMPv2, cryptographic operations as defined in the SPS clause 5, RADIUS and LDAP in the cryptographic inventory.

O-RAN Study on Certificate Management Framework v6.00

The Certificate Management Framework Technical Report studies a comprehensive framework for certificate management across the O-RAN environment. Certificate Management Framework Technical Report version 6.0 addresses certificate management for the Shared O-RU.

O-RAN Study on Security for Artificial Intelligence and Machine Learning (AI/ML) in O-RAN v5.00

This technical report provides the threat model and risk assessment for AI/ML in O-RAN.  The report identifies threats and risks and recommends potential security controls to protect against those threats through safeguards or mitigations. Version 05.00, in addition to minor editorial updates, changes impact and likelihood defined for T-AIML-SC-06, aligns the asset definition with that of the TMRA, adds assets missing so far and the related asset coverage and  adds watermark stripping and model dependency as  additional threats.

O-RAN Study on Zero Trust Architecture for O-RAN v5.00

This technical report studies the applicability of a Zero Trust Architecture (ZTA) to the O-RAN Architecture. It identifies assets and security controls in pursuit of a ZTA while considering those already existing in WG11 specifications. The fifth version of the ZTA technical report continues the maturity assessment based on CISA’s Zero Trust Maturity Model. In this version, gap analysis resolutions towards the Initial maturity stage are added for the Non-RT RIC, rApp, SMO, Open Fronthaul, and O-Cloud. Gap analysis resolutions are in progress for other architecture elements and transversal functions and will be included in later versions of the technical report. Recommendations towards a ZTA are also added to this version.

O-RAN Study on Security for Fronthaul CUS-Plane v6.00

The Fronthaul CUS-Plane Security Technical Report examines the security aspects of the CUS-Plane on the Open Fronthaul interface between the O-DU and O-RU. It identifies critical assets, key issues, threats, and potential risks, and proposes security requirements and solutions to effectively secure CUS-Plane traffic. Version 06.00 of the technical report includes updated references aligned with O-RAN documentation guidelines and addresses key S-Plane security issues.

O-RAN Study on Security for Near Real Time RIC and xApps v7.00

This technical report considers the security aspects of the Near-RT RIC platform and xApps, as well as the associated network and management interfaces (E2, A1, O1) and APIs. The study analyzes a list of key issues in the Near-RT RIC overall architecture and proposes solutions in order to derive security requirements. Version 07.00 provides a maintenance update, removing all ‘FFS’ notes and updating the reference clause.

O-RAN OAuth 2.0 Security v7.00

The technical report defines the authorization framework for O-RAN architecture elements using OAuth 2.0 and applies to the HTTP and Kafka based APIs used in the O-RAN interfaces. This TR also performs the security threats for OAuth2.0, key issues & solution use cases (like R1 services). Version 07.00 of the technical report provides additional key issues and use cases related to rApp certificate capabilities as a prerequisite for supporting token binding (RFC 8705).

O-RAN Study on Security for Service Management and Orchestration (SMO) v8.00

This technical report documents security analysis for the SMO. The TR provides assets, threats, risk scoring, and recommended security controls for SMO, SMOS, and interfaces. Threat analysis is based upon the STRIDE model and risk scoring is based upon likelihood and impact. The recommended security controls in this TR are used to form normative requirements specified in the SRCS. Version 08.00 of the TR provides updates to align the security analysis with Decoupled SMO architecture, including SMOS. Updated clauses are References, Abbreviations, Assets, Threats, General SMO Threats, and General SMO Risks.

O-RAN Study on Security for O-Cloud v9.00

The O-Cloud security technical report analyzes the security of O-Cloud components and interfaces. It includes a risk assessment of the cloud deployment models (Private, Community, Public and Hybrid), identifies the assets that need to be protected, identifies potential security risks and vulnerabilities, and proposes recommendations and best practices for reducing risks and improving the security of O-Cloud. The identified assets, threats and recommendations are intended to be part of O-RAN security related specifications. This version of the TR updates the references clause in the document.

O-RAN Study on Continuous Security Monitoring v2.00

This TR contains a study of continuous security monitoring which was spun off from the zero trust architecture study item. This version of the TR contains additional key issues some related to threats on O‑RU, additional solutions for key issues that were not covered in previous release like API related as well as elaboration on the recommendations which is a step towards normative content.

TIFG: Test&Integration Focus Group

O-RAN Certification and Badging Processes and Procedures v13.00

This document describes the certification and badging processes and associated detailed technical procedures for the Open Testing and Integration Centres (OTICs) and various other testing entities.

Objectives and scope:

  • Revising the format and instructions of CB-ICS proforma based on the latest O-RAN Test Specification Framework
  • Clarifying the test case applicability
  • Introducing the CB-ICS proforma for E2E badge and clarifying E2E badging process based on field feedback
  • Revising CB-ICS proforma on A1 service certificate and IOT badge based on the new format
  • Improving the readability of the whole document
  • Introducing O-RAN Security Assurance Program (SAP) (deferred to March 2026 train)

Changes from previous version:

  • Revised the format and instructions of CB-ICS proforma based on the latest test specification framework
  • Clarified the availability and referencing of CB-ICS proforma across the document
  • Clarified the E2E badging process and introduced the CB-ICS proforma for E2E badge
  • Revised CB-ICS proforma on A1 service certificate and IOT badge for nearRT-RIC & NonRT-RIC based on the new format
  • Clarified the applicability of test cases across the whole document
  • Added the definition of terms: repeatability and reproducibility

O-RAN End-to-end Test Specification v8.00

This test specification is focused on validating the end-to-end system functionality, performance, and key features of the O-RAN system as a black box. The changes from previous version:

  • New clause 6.15 on testing of user-plane latency
  • New clause 8.10 on testing of stability of simultaneously RRC connected UEs
  • Updated clause 10.2 (table 10.2-1) with randomized traffic patterns
  • New informative Annex B with example of test configuration profile including pseudo random sequence generation for UE activity
  • Editorial updates