1. © ETSI 2018 All rights reserved
UPDATE ON STANDARDISATION UNDER eIDAS
Presenter: Arno Fiedler
CA / Browser Forum Meeting in Washington – March 2018

2. eIDAS Regulation and Trust Services
Source: Andrea Servida, EU Commission H4, 2016

3. eIDAS Standards Framework:
Published Standards
3
Trust application
service providers
x19 5xx
TSPs supporting
digital signatures
x19 4xx
Trust service status lists
119 6xx
General Framework
Trust services for:
Issuing certificates
Time Stamping
Signature creation services
Validation services
Trust services for:
Registered eDelivery /
eMail
Long term preservation
Signing Devices
419 2xxCC Protection Profiles
QSCD ‐ Smart Cards
HSM used as QSCD
HSM used by TSPs
Remote QSCD
Signature Creation
& Validation
x19 1xx
Procedures for AdES
creation & validation
Formats:
XAdES (XML)
CAdES (CMS)
PAdES (PDF)
ASiC (containers)
Cryptographic suites
119 3xx Signature suites
‐ Hash
‐ Asymmetric crypto
‐ Key generation
‐ Lifetime
Standards framework
Common definitions
Guides
List of approved QTSPs &
services supervised by
National Bodies
119 0xx
© ETSI 2017. All rights reserved

4. TSP European Norms Overview
© ETSI 2017. All rights reserved4
EN 319 403
TSP Conformity Assessment
EN 319 411-1
TSP issuing
Certs
CA Browser Forum
/ Other
EN 319 411-
2
TSP issuing
Qualified Certs
eIDAS
Qualified
Policy
Profiles
EN 319 412
(X.509)
Ref.
EN 319 401
General
TSP
General
Ref
EN 319 421
Time-stamping
Qualified / Other
EN 319 422
(RFC 3161)
Ref
Time‐
stamping
Ref
Replaces
TS 102 042
Replaces
TS 101 456
Based on
ISO 27002

5. Updates to TSP Policy Requirements:
EN 319 411‐1/2
Each individual requirement clearly identified : (in total 540)
and related to a specific service component
e.g. “REG‐6.2.2‐01 The TSP shall verify the identity ….”
Alignment with new CA Browser Forum requirements
OCSP & CRL: OCSP recommended (not mandated),
Other detailed clarifications of existing requirements
Under Final EN approval ballot, aim publication May 2018.
http://www.etsi.org/deliver/etsi_en/319400_319499/
31941101/01.02.01_30/en_31941101v010201v.pdf
5 © ETSI 2017. All rights reserved

6. Web (SSL/TLS) PTC Supplement on
EN 319 403 Audit Requirements
Supplement to EN 319 403 audit requirements cover specific
requirements for SSL/TLS Publicly Trusted Certificates
Template for audit attestation
• Meets requirements of Mozilla Policy
• Takes into account existing proposed templates (e.g. ACAB‐c)
Specific Web PTC Requirements
• Annual full audit
• “Period of time audit”
Aim public review draft May 2018, finalise July 2018
© ETSI 2017. All rights reserved6

7. Keep up to Date
• Information on available standards and current activities:
https://portal.etsi.org/TBSiteMap/ESI/ESIActivities.aspx
• ETSI standards: available for free download
http://www.etsi.org/standards‐search
Updates on standardisation:
https://list.etsi.org/scripts/wa.exe?SUBED1=e‐signatures_news&A=1
© ETSI 2017. All rights reserved

8. QUESTIONS?
THANK YOU ! Arno Fiedler, Member of ETSI
8