CP Compliance scheme for HMG PKI

Overview

The UK Government is establishing a pan-government Public Key Infrastructure (PKI) that will be a strong enabler for building trust and confidence within the government domain and provide a convenient mechanism for government to authenticate itself to those outside.More details can be found in HMG PKI Overview v1 Dec02.pdf. The process by which eligible CAs apply to join this PKI is detailed in the "HMG PKI - High Level Processes and Procedures" document, the latest version of which can be found at http://www.hmgpki.gov.uk/

Compliance against CPs

Part of this process is a requirement to demonstrate that the CA operates in compliance with one or more of the Certificate Policies (CPs) used by the HMG PKI. tScheme has worked with CSIA and the HMG PKI Policy Management Team to develop a scheme that will allow applicant CAs to demonstrate such compliance.Under the terms of this scheme, each CP (and versions thereof) supported by the HMG PKI is reviewed by tScheme and those that are agreed as being assessable and available for applicants to seek compliance against are contained in the documents section of this part of the website, click here.You will also find there other supporting documents giving the details of the operation of this scheme plus some model agreements etc.

Compliant and Applicant Organizations by CP

By clicking on the appropriate policy, you will see a list of all organizations that have either been assessed as compliant with that particular CP or are in the process of being assessed:

Assessors

The assessment of compliance against these CPs can only be performed by assessors that are already recognised by tScheme as being capable of performing assessments against tScheme’s Approval Profiles.

Click here for Directory of tScheme-recognised Assessors

Applicant Organizations

Where you see this logo, you will be able to click on it and be taken to this website, directly to the organisation‘s information. This will name the organisation and list the specific CPs that they have applied to demonstrate compliance with. If there is no link, or you don't get taken to the specific organisation‘s page within the tScheme website, please contact us immediately. Click on the logo to see all such organisations.

Click here for the list of all UK public sector bodies (as defined in the relevant CP) that have applied for assessment and are currently following the process leading to their demonstrating compliance against one or more of the policies listed above.

Compliant Organizations

Where you see this logo, you will be able to click on it and be taken to this website, directly to the organisation‘s information. This will name the organisation and list the specific CPs that they have demonstrated compliance with. If there is no link, or you don't get taken to the specific organisation‘s page within the tScheme website, please contact us immediately. Click on the logo to see all such organisations.

Click here for the list of all UK public sector bodies (as defined in the relevant CP) that have successfully demonstrated compliance against one or more of the policies listed above.

tScheme-Approved Organizations

Where you see this logo, you will be able to click on it and be taken to this website, directly to the Service Provider‘s information. This will name the organisation and list the specific CPs that they have demonstrated compliance with. If there is no link, or you don't get taken to the specific organisation‘s page within the tScheme website, please contact us immediately. Click on the logo to see all such organisations.

Click here for the list of tScheme-approved Service Providers that have also successfully demonstrated compliance against one or more of the policies listed above.