Electronic Signatures and Infrastructures (ESI); Policy and security requirements for Trust Service Providers issuing certificates; Part 2: Requirements for trust service providers issuing EU qualified certificates (V2.2.1)
The present document specifies policy and security requirements for the issuance@ maintenance and life-cycle management of EU qualified certificates as defined in Regulation (EU) No 910/2014 [i.1]. These policy and security requirements support reference certificate policies for the issuance@ maintenance and life-cycle management of EU qualified certificates issued to natural persons (including natural persons associated with a legal person or a website) and to legal persons (including legal persons associated with a website)@ respectively. The present document does not specify how the requirements identified can be assessed by an independent party@ including requirements for information to be made available to such independent assessors@ or requirements on such assessors. The present document however provides in annex B a checklist of the policy requirements specific to TSP issuing EU qualified certificates (as expressed in the present document) as well as all the requirements incorporated by reference to ETSI EN 319 411-1 [2] and ETSI EN 319 401 [1]@ that can be used by the TSP to prepare an assessment of its practices against the present document and/or by the assessor when conducting the assessment for confirming that a TSP meets the requirements for issuing qualified certificates under Regulation (EU) No 910/2014 [i.1]. NOTE: See ETSI EN 319 403 [i.6] for guidance on assessment of TSP's processes and services.