Registration

TTP registration

1. TTP RK registers a foreign TTP by following requirements:

1) root and (or) an intermediate certificate of foreign TTP must comply with the standard X.509 (version 3) of the International Telecommunications Union ITU;

2) CRL of foreign TTP or certification authority that issued for foreign TTP certificate, available at a fixed URL on the Internet, the address of which is enshrined in the legal -technical documents. Access to CRL – 24/7/365. Validity of CRL from 24 to 27 hours, periodicity of CRL at least 1 time per day;

3) Foreign TTP uses certified CPI.

2. Registration of foreign TTP on the basis of the Agreement on Mutual checking of digital signatures is signing between RSE “GTS” and foreign TTP.

For the conclusion of the Agreement on mutual checking foreign TTP provides RSE “GTS” with necessary documents in accordance with section 4 of TTP RK regulations.

Registration of kazakhstani CA

1. Registration of certification authority of the Republic of Kazakhstan in TTP RK by following requirements:

1) Root certificates of certification authority must comply with the standard X.509 (version 3) of the International Telecommunications Union ITU;

2) CRL of kazakhstani certification authority available at a fixed URL on the Internet, the address of which is enshrined in the legal -technical documents. Access to CRL – 24/7/365. Validity of CRL from 24 to 27 hours, periodicity of CRL at least 1 time per day;

3) The certification authority implements one of the following cryptographic algorithms: GOST 34.310-2004, GOST 34.10-2001 or RSA # 2048;

4) Certification authority uses certified CPI.

2. Registration of certification authority of the Republic of Kazakhstan is on the basis of the Agreement on registration of certification authority in TTP RK (Agreement on registration)signed with RSE “GTS”. For the conclusion of the Agreement on registration certification authority of the Republic of Kazakhstan provides RSE “GTS” necessary documents in accordance with Section 5 of TTP RK regulations.

Registration of foreign CA

1. Registration of foreign certification authority in TTP RK by following requirements:

1) root certificates of foreign certification authority must comply with the standard X.509 (version 3) of the International Telecommunications Union ITU;

2) CRL of foreign certification authority available at a fixed URL on the Internet, the address of which is enshrined in the legal -technical documents. Access to CRL – 24/7/365. Validity of CRL from 24 to 27 hours, periodicity of CRL at least 1 time per day;

3) foreign certification authority is created and operates in accordance with the laws of the host country;

4) time operation of a foreign certification authority on the territory of the host country at least 5 years, except for the state foreign certification authorities;

5) foreign certification authority uses only certified CPI and tools for secure electronic signature key information storage media.

2. Registration of foreign certification authority is on the basis of the Agreement on registration of certification authority in TTP RK (Agreement on registration)signed with RSE “GTS”. For the conclusion of the Agreement on registration foreign certification authority provides RSE “GTS” with necessary documents in accordance with Section 6 of

TTP RK regulations.