MOBILE-ID · TRUSTED LTANS
CA, TSA and preservation policies
Distinguish CA CP/CPS, TSA policies and LTANS preservation policy.
Three distinct policy layers
| Layer | Document | What to inspect |
|---|---|---|
| CA | CP / CPS | Policy OID, certificate chain, issuance/revocation and responsibilities |
| TSA | Timestamp policy and practice statement | TSA OID, time source, certificates and incident handling |
| LTANS | Preservation policy and service profile | Custody, validation, renewal, retention and transfer |
Register required before production
- Select deployment CA/TSA and official document URLs; record version, date and copy digest.
- Define allowed certificates, trust anchors and policies; retain the context used for verification.
- Do not apply one CA CPS to the whole LTANS service or every supported CA.
Required CA/TSA source record
| Element | Handling |
|---|---|
| Holder / service | Identify the CA, TSA and service; CA CPS does not replace LTANS preservation policy. |
| Version / source | Official URL, permitted retained-copy digest, effective date and applicability. |
| Change | Test new tokens/certificates and retain history/activation decisions; never overwrite old material. |