Certifying Authority security obligations require secure systems, reliable services, digital signature secrecy, privacy, and compliance with prescribed standards.

Certifying Authorities must use hardware, software and procedures secure against intrusion and misuse, provide reasonably reliable services suited to intended functions, and maintain security procedures assuring the secrecy and privacy of digital signatures. They must also comply with further operational and security standards prescribed through regulations.

---

---

---