Certification Practice Statement of the DFN-PKI - Security Level "Global" - DFN-Verein CPS of DFN-PKIV4

Aug 30, 2026

Upload by Aurelia

Certification Practice Statement for DFN-PKI’s Global Security Level, defining the operating specifications, processes, and technical security measures applied by DFN-Verein’s Policy Certification Authority (DFN-PCA) and all subordinate certification authorities (Sub-CAs). It covers certificate usage and lifecycle operational requirements, publication and repository responsibilities, identification and authentication, facility and operational controls, audit logging and record archiving, and key management and cryptographic protections. It also specifies technical security controls, certificate/CRL/OCSP profiles, compliance audits, references, and a glossary for consistent implementation.

LanguageEnglish

CategoryTechnology

FormatPDF

Pages9

Reading Time23 min

AccessFree to download

1 Introduction

1.1 Overview

1.2 Document Name and Identification

1.3 PKI Participants

1.4 Certificate Usage

1.5 Policy Administration

1.6 Definitions and Acronyms

2 Publication and Repository Responsibilities

3 Identification and Authentication

4 Certificate Life-Cycle Operational Requirements

5 Facility, Management and Operational Controls

5.1 Physical Controls

5.2 Procedural Controls

5.3 Personnel Controls

5.4 Audit Logging Procedures

5.5 Records Archival

5.6 Key Changeover

5.7 Compromise and Disaster Recovery

5.8 CA or RA Termination

6 Technical Security Controls

6.1 Key Pair Generation and Installation

6.2 Private Key Protection and Cryptographic Module Engineering Controls

6.3 Other Aspects of Key Pair Management

6.4 Activation Data

6.5 Computer Security Controls

6.6 Life Cycle Security Controls

6.7 Network Security Controls

6.8 Time-Stamping

7 Certificate, CRL and OCSP Profiles

8 Compliance Audit and Other Assessments

9 Other Business and Legal Matters

10 References

11 Glossary

Certification Practice Statement of the DFN-PKI – Security Level “Global” – DFN-Verein CPS of DFN-PKIV4 15 May 2019 non-authoritative English translation This document is a non-authoritative translation of the corresponding document in German language. In case of deviations, the document in German language takes precedence. This document and all parts of it are copyright protected. The distribution without alterations (in copy) is expressly permitted. Contact: [pki@dfn.de](pki@dfn.de) © DFN Verein CPS of DFN-PKI page 2/9 V4 Contents 1 Introduction ............................................................................................................................... 4 1.1 Overview ................................................................................................................................ 4 1.2 Document Name and Identification ......................................................................................... 4 1.3 PKI Participants ...................................................................................................................... 4 1.4 Certificate Usage .................................................................................................................... 4 1.5 Policy Administration .............................................................................................................. 4 1.6 Definitions and Acronyms ....................................................................................................... 4 2 Publication and Repository Responsibilities ........................................................................... 4 3 Identification and Authentication ............................................................................................. 4 4 Certificate Life-Cycle Operational Requirements..................................................................... 4 5 Facility, Management and Operational Controls...................................................................... 5 5.1 Physical Controls .................................................................................................................... 5 5.2 Procedural Controls ................................................................................................................ 5 5.3 PersonnelControls .................................................................................................................. 5 5.4 Audit Logging Procedures ....................................................................................................... 6 5.5 Records Archival .................................................................................................................... 7 5.6 Key Changeover ..................................................................................................................... 8 5.7 Compromise and Disaster Recovery....................................................................................... 8 5.8 CA or RA Termination............................................................................................................. 8 6 Technical Security Controls...................................................................................................... 8 6.1 Key Pair Generation and Installation ....................................................................................... 8 6.2 Private Key Protection and Cryptographic Module Engineering Controls ................................. 8 6.3 Other Aspects of Key Pair Management ................................................................................. 8 6.4 Activation Data ....................................................................................................................... 8 6.5 Computer Security Controls .................................................................................................... 8 6.6 Life Cycle Security Controls ..............

FAQs

What does the DFN-PKI CPS for the Global Security Level define?

It defines specifications, processes, and technical security measures for DFN-PCA and all Sub-CAs regarding issuance and handling of certificates. It also aligns with the DFN-PKI certificate policy for the same Global Security Level.

Which authority roles are responsible for operating under this CPS?

DFN-Verein operates DFN-PCA and subordinate certification authorities on behalf of DFN-Verein. The CPS applies to these CAs for the Global Security Level context described in the introduction.

What operational and technical security topics are covered by the CPS?

The CPS covers certificate lifecycle operational requirements, publication/repository responsibilities, identification and authentication, facility and operational controls, audit logging and records archiving, key management and cryptographic protections, and technical security controls such as network security and time-stamping.

Aug 30, 2026

Upload by Aurelia