SID-KEY-02 — IACA Certificate Management

Property	Value
Owner	platform
Category	technical
CSF Function	protect
Group	Key Management Controls

Description

ISO 18013-5 Annex B compliant IACA root and Document Signer certificate generation with proper EKU OIDs, CRL distribution points, and OCSP responder URLs. Reader authentication via COSE_Sign1 over session transcript.

Components

• VC Issuer/Verifier
• WSCA / HSM

Source References

• vc/mdoc/iaca.go
• vc/mdoc/reader_auth.go

Framework Requirements

EUDI Security Requirements: WUH-8.3.3-Sec-03

FitCEM Wallet Instance: FIT-NF-08

ISO 27001 Annex A: A.8.24

STRIDE Threat Model: VC-I-2, VC-I-3, VC-T-2, CC-I-1