{"id":7956,"date":"2024-01-16T13:29:30","date_gmt":"2024-01-16T12:29:30","guid":{"rendered":"https:\/\/esysco.pl\/?p=7956"},"modified":"2024-01-16T13:39:34","modified_gmt":"2024-01-16T12:39:34","slug":"utimaco-hsm-re-certification-according-to-eidas-pp-en-419-221-5","status":"publish","type":"post","link":"https:\/\/esysco.pl\/en\/en_news\/utimaco-hsm-re-certification-according-to-eidas-pp-en-419-221-5\/","title":{"rendered":"Utimaco HSM re-certification according to eIDAS Protection Profile EN 419 221-5"},"content":{"rendered":"

Utimaco HSM re-certification according to eIDAS Protection Profile EN 419 221-5<\/h1><\/h1><\/div>
<\/span><\/div><\/div>
<\/div><\/div><\/div><\/div><\/div>

For the second time, Utimaco <\/strong>obtains the<\/strong> Common Criteria EAL4+-<\/strong>certification <\/strong>according to eIDAS Protection Profile EN 419 221-5<\/strong><\/h3>\n

2018, 2023, 2028 – Utimaco, a leading manufacturer of Hardware Security Modules (HSM), received the Common Criteria (CC) EAL4+ re-certification for its CryptoServer CP5 HSM based on the eIDAS Protection Profile EN 419 221-5. The Utimaco CP5 was introduced in October 2018.<\/p>\n<\/div>

<\/div><\/div><\/div><\/div><\/div>

Utimaco CryptoServer CP5 \u2013 the eIDAS HSM<\/strong><\/h3>\n

Back in 2018, the CryptoServer CP5 was the first HSM in the market with a CC certification based on this protection profile, making it a future-proof choice for eIDAS trust services. These included local and remote electronic signing and sealing, issuing of certificates, website authentication and timestamping. For application development and regression testing, Utimaco offers a dedicated\u00a0CryptoServer CP5 HSM simulator\u00a0to prospects and customers.<\/p>\n

<\/h3>\n<\/div>
<\/div><\/div><\/div><\/div><\/div>

eIDAS Protection Profile EN 419 221-5 \u201cCryptographic Module for Trust Services\u201d<\/strong><\/h3>\n

The German hardware security specialist was engaged with and contributed to the creation of the security requirements and protection profiles within the Technical Committee 224, Working Group 17 of the European Committee for Standardization (CEN).<\/p>\n

Protection profiles<\/a>\u00a0(PP) according to the\u00a0Common Criteria<\/a>\u00a0certification scheme define the requirements for information technology security functions. The eIDAS Protection Profile EN 419 221-5 was certified by an accredited evaluation laboratory in late 2017 and approved by the EU member states earlier this year. With this Protection Profile, CEN standardizes security requirements for cryptographic modules being used as Qualified Signature Creation Device (QSCD) according to the eIDAS regulation.<\/p>\n<\/div>

<\/div><\/div><\/div><\/div><\/div>

Utimaco certification <\/strong><\/h3>\n

In December 2023, Utimaco has just renewed the certification for their eIDAS flagship CryptoServer CP5. This results in new certification documents that can be downloaded here:<\/p>\n

a) The NSCIB NSCIB-CC-2300142-01 certificate<\/p>\n

b) The Security Target Lite for CryptoServer Se-Series Gen2 CP5<\/p>\n

c) The certification report for the CryptoServer CP5<\/p>\n<\/div>

<\/div>
<\/div>
<\/div>
<\/div><\/div><\/div>
<\/div>
<\/div>
<\/div>
<\/i>The NSCIB NSCIB-CC-2300142-01 certificate<\/span><\/a><\/div>
<\/div>
<\/div>
<\/div>
<\/i>The Security Target Lite for CryptoServer Se-Series Gen2 CP5 <\/span><\/a><\/div>
<\/div>
<\/div>
<\/div>
<\/i>The certification report for the CryptoServer CP5<\/span><\/a><\/div>
<\/div><\/div><\/div><\/div><\/div>

The eIDAS HSM user cases<\/strong><\/h3>\n

The principal aim of the eIDAS regulation is to facilitate a true digital single market in Europe. The related services for electronic identification and trust services lend themselves to a variety of use cases. These include<\/p>\n