Operation demands

Certification authority PostSignum QCA complies with the demands defined in the legislative of the Czech Republic for the qualified providers of certification services:

• Law No 227/2000 Coll. on the electronic signature in the valid wording
• Related regulation 366/2001 Coll.
• Law No 101/2000 Coll. on the protection of personal data.

Among other problems the requirements for the security are dealt with both at the technological level and the level of regulation basis.

System and components certification

• 21/DEC/2007: PostSignum QCA system was certified against the ISO 9001:2001 (Quality Management System).  
• 21/DEC/2007: PostSignum QCA system was certified against the ISO 27001 (Information Security Management System).  
• 10/JAN/2007: Software UniCERT obtained the Common Criteria level EAL 4+ certification.
• October 2002: Security device with certification authority keys stored was certified against the FIPS 140-1 level 4.

Technical solution

• PostSignum Qualified CA issuing qualified certificates
• PostSignum Public CA issuing commercial certificates

The core of all three certification authorities is based on the software UniCERT of the CyberTrust company.
Also the specialized applications designed and developed by the ICZ, joint stock company, are used.