Certificate Authority
What is Certificate Authority?
A trusted entity that issues digital certificates used to verify the identity of individuals, organisations, or devices. Certificate Authorities form the basis of the Public Key Infrastructure (PKI) trust model.
Frameworks that govern certificate authority
What the standards actually require on certificate authority
Requirements naming certificate authority across 6 standards, quoted from the control text.
The 3DS Server to DS links for AReq/ARes and RReq/RRes and the DS to ACS links for the same pairs use TLS with the Annex D cipher suites and mutual authentication, with X.509 certificates for both parties signed by the DS certificate authority, the 3DS Server...
emv-3-d-secure-3ds-payment-authentication-protocol::6.1.2-3 · 6.1.2-3 Links b and c: 3DS Server to DS and DS to ACS →Agencies must generate certificates only with a hardware security module or certificate authority product that has passed an appropriate product evaluation.
new-zealand-information-security-manual-nzism::18.2.11.C.01 · 18.2.11.C.01 Evaluated CA or HSM for wireless certificates →Certificates are generated using an evaluated certificate authority or hardware security module.
ISM-1324 · Certificate generation using evaluated CA or HSM →Issue public key certificates under an agency-level certificate authority or obtain them from an approved service provider, and include only approved trust anchors in organisation-managed trust and certificate stores.
fbi-cjis-security-policy::SC-17 · SC-17 Public Key Infrastructure Certificates →Conformance testing of IEC 62351-6 implementations uses a test environment that resembles the final one as closely as it can with a test equipment able to publish or subscribe and a certificate authority, runs non-intrusively with the device under test carryin...
iec-62351-power-systems-communication-security::100-6:4 · Part 100-6, clause 4: conformance test methodology for IEC 62351-6 (environment, normal and resiliency tests, device under test, test facility, validation, PICS and PIXIT, test cases for subscriber and publisher devices) →Information on the item's operational environment that matters for cybersecurity shall be described, so that threat scenarios and attack paths can be found;
iso-sae-21434::RQ-09-02 · [RQ-09-02] Operational environment description →Questions people ask about certificate authority
What is Certificate Authority?
Why is Certificate Authority important for compliance?
Which compliance frameworks address Certificate Authority?
Where can I learn more about Certificate Authority?
See how Certificate Authority applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.