BankID TSP Merchant V1.0.pdf

- Introduction (p.12-14):
- Overview: BankID TSPS Merchant v1.0 outlines the operational requirements for Trust Service Providers (TSPs) issuing qualified certificates to merchants.
- Document Name & ID: BankID TSPS Merchant v1.0
- PKI Participants & Responsibilities:
- TSP: Responsible for information security policy practices.
- Registration Authorities (RAs), Subscribers/Subjects, Relying Parties, and Other Participants have defined roles.

- Certificate Usage (p.17):
- Appropriate Uses: Digital signatures, encryption, and non-repudiation.
- Prohibited Uses: Impersonation, fraud, and illegal activities.

- Policy Administration (p.17-18):
- Organization & Contact Person: Responsible for document administration.
- TSPS Suitability & Approval: Procedures for determining and approving TSPS.

- Definitions & Acronyms (p.19-20):
- Key definitions and acronyms used in the document.

- Publication & Repository Recommendations (p.22-23):
- Repositories: Secure storage for certification information.
- Publication: Timely and frequent publication of certification information.
- Access Controls: Ensuring secure access to repositories.

- Identification & Authentication (p.24-31):
- Naming: Types, meaningfulness, uniqueness, and recognition of names.
- Initial Identity Validation: Methods for proving possession of private keys and authenticating identities.
- Re-key & Revocation Requests: Identification and authentication processes for these scenarios.

- Certificate Life-cycle Operational Requirements (p.33-35):
- Certificate Application: Submission and enrolment processes.
- Certificate Application Processing: Identification, authentication, approval, or rejection of applications.