The eIDAS Regulation (EU 910/2014) has established a unified digital market for trust services across the European Union, giving Trust Service Providers (TSPs) a central and strategic role.
Under eIDAS, TSPs are responsible for ensuring the electronic identification of signatories and for delivering services that rely on strong authentication mechanisms, secure digital certificates, and legally valid electronic signatures.
eIDAS also defines how trust service providers must deliver authentication, integrity, and non-repudiation services, and sets the rules for their supervision, regulation, and cross-border recognition across all EU Member States.
Since 1 July 2016, individuals, businesses, and public administrations have been able to perform secure, convenient, and legally valid electronic transactions across EU borders. The European Union’s rules on electronic signatures, electronic seals, time stamps, qualified electronic delivery services, website authentication, and electronic documents apply directly in all 28 Member States, ensuring uniformity and legal certainty.
PRIMECert TSP supports organisations in becoming Trust Service Providers (TSPs) by helping them meet all eIDAS certification requirements and accelerate their time to market.
PRIMECert TSP is a comprehensive, turnkey solution for launching an eIDAS-compliant Public Key Infrastructure (PKI) business. It seamlessly integrates:
- hardware
- software
- organisational structures
- trained personnel
- policies
- operational processes
Together, these components enable the creation, management, storage, distribution, and revocation of digital certificates. The result is a simple, redundant, highly reliable, scalable, and ultra-secure platform for both device and user authentication.
PRIMECert TSP is a fully managed service offering that enables organisations to build and operate their own PKI infrastructure—either independently or with full/partial support from TrustPro QTSP. It provides expert-driven digital certificate management while leveraging the best practices, security, and high availability of a PKI platform designed and maintained by specialists in certificate lifecycle management.
Built on a proven, robust, and highly reliable infrastructure, PRIMECert TSP shortens time-to-market and significantly reduces the cost and complexity of creating and managing a PKI. This allows organisations to focus on delivering solutions rather than maintaining underlying cryptographic infrastructure.
The solution includes a Certification Authority (CA), the core component of any Public Key Infrastructure, responsible for establishing a trusted hierarchical chain and issuing the digital credentials used to authenticate and validate user identities.
PRIMECert TSP removes the burden of planning, deploying, and operating a PKI, while still allowing companies to retain full internal control over the issuance, suspension, and revocation of digital certificates.
Although customers must still obtain their eIDAS certification, all the essential building blocks required for compliance are already provided—putting every piece of the certification puzzle firmly in place.
Main Features
- Certification Authority (CA) for issuing digital credentials used to certify user identities.
- HSM certified to Common Criteria EAL4+ and FIPS 140-2 Level 3, ensuring the highest levels of cryptographic security.
- Collaborative security architecture designed to guarantee high operational protection standards.
- Infrastructure and processes certified according to the requirements of the eIDAS Regulation (EU) No. 910/2014 for Qualified Trust Service Providers.
- Full compliance with ETSI standards:
I. ETSI EN 319 401
II. ETSI EN 319 411-1
III. ETSI EN 319 411-2
IV. ETSI EN 319 412 (parts 1, 2, 3, 5) - Complete ecosystem of hardware, software, personnel, structures, policies, and processes designed to meet all stringent eIDAS technical requirements for achieving TSP status.
- Security pre-assessment to minimise interactions with the external assessor on security matters.
- Guidance and consulting for completing all required documentation to fulfil eIDAS obligations.
- Advisory and hands-on assistance throughout the CAB (Conformity Assessment Body) evaluation phase to obtain the CAR (Conformity Assessment Report).
- Technical support available 8×5 or 24×7 provided by PKI professionals, including continuous updates to the PKI software and infrastructure.
- Full or partial operational management by TrustPro QTSP (to be defined at the conclusion of the CAB assessment).
- Software updates and new releases included.
- Hardware support for all PKI components.
- Integrated RA (Registration Authority) services.
- Fully digital processes — eliminating paper-based workflows.
