PKI ‐ CP/CPS Development
Leverage our expertise and experience to streamline the development of your CP/CPS documentation. We specialize in creating and maintaining Certificate and Certification Practice Statements (CPS) that align with industry standards and regulatory requirements.
Overview Of Our Service
The CP and CPS documents describe your specific PKI architecture and include sections on certificate uses, naming, identification, authentication, key generation, procedures, operational controls, technical controls, revocation lists, audits, assessments, and legal matters.
We work collaboratively with your stakeholders to develop a Certificate Policy (CP) / Certificate Practice Statement (CPS) document following the template provided in Request for Comment (RFC) #3647
Document Template
During this process, our team will:
Prepare a CPS document template by RFC #3647
Assist you in drafting the content of CP/CPS
Identify additional operations practices needed for inclusion in the CP/CPS
Review the final draft of CP/CPS with key stakeholders
Certificate Policy (CP)
- A document that sets out the rights, duties, and obligations of each party in a Public Key Infrastructure (PKI).
- The Certificate Policy (CP) is a document that usually has a legal effect.
- A CP is usually publicly exposed by CAs, for example on a Website (VeriSign, etc.)
Certificate Practice Statement (CPS)
- A document that sets out what happens in practice to support the policy statements made in the CP in a PKI.
- The Certificate Practice Statement (CPS) is a document that may have legal effect in limited circumstances .
Our Service Offerings
- Certificate Policy (CP) Development
- Certification Practice Statement (CPS) Development
- Contractual and Policy Integration
- Ongoing Maintenance and Support
- We create policies that define the requirements for all Certificate Authorities (CAs) in your PKI, which helps to ensure compliance with legal, business, and technical standards.
- We provide detailed sectioning that includes policy overview, repository management, identification and authentication requirements, certificate lifecycle, operational controls, cryptographic key management, compliance audits, and business or any legal matters.
- Our CP documentation conforms to the IETF PKIX RFC 3647 framework, ensuring alignment with global PKI standards.
- We incorporate operational procedures that are inclusive of detailed documentation of the procedures and controls used by CAs to implement the CP requirements.
- Each CPS is tailored to the specific operational practices and security controls of your CA.
We provide contractual agreements that support and complement the CP, aligning with corporate policies and legal requirements.
- We regularly update your CP and CPS documents to make sure that you remain up to date with changing standards and business needs.
- We also provide ongoing support to address any policy-related queries or updates.
