Standard
Certificate Authority Management Standard
Defines requirements for establishing, operating, and maintaining the internal Certificate Authority (CA) infrastructure. Governs certificate issuance policy, CA hierarchy design, use-case scope, and the boundary between the internal CA and externally trusted commercial CAs. Supplements the Cryptographic Key Operations Procedure, which addresses day-to-day certificate lifecycle operations.
- Type
- Standard
- Version
- 1.3.12
- Date
- 2026-09-16
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Operations
- Review frequency
- Annual and upon material platform or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Governance
- 4. CA platform
- 5. CA hierarchy design
- 6. Use case scope and constraints
- 7. Certificate profile requirements
- 8. Certificate validity periods
- 9. Trust distribution
- 10. S/MIME key history and encryption key retention
- 11. CA audit logging and privileged administrative access
- 12. Boundary between internal CA and commercial cas
- 13. Framework alignment
Frameworks it maps to
- ISO/IEC 27001:2022
- NIST SP 800-57
- RFC 5280
- CA/Browser Forum Baseline Requirements
- S/MIME Baseline Requirements
- CSA CCM v4.1
- COBIT 2019
Related documents
- Encryption and Key Management Policysecurity
- Privileged Access Management Standardsecurity
- Production Security Requirementsoperations
- Cloud Security Configuration Baselineoperations
- Change Management and Configuration Control Procedureoperations
Next
All Documents