Index of documents supporting the Grant of Approval to Trustis’ Certificate Factory service.

  1. What the tScheme Approved Service Mark signifies.
  2. Approved Service - Service Description
  3. Approval Profiles used in the assessment:
    Base Approval Profile tSd0111 3.00
    Approval Profile for Certificate Generation tSd0104 3.01
    Approval Profile for Certificate Dissemination tSd0105 3.01
    Approval Profile for Certificate Status Management tSd0106 3.01

Back to Grant details

What the tScheme Approved Service Mark signifies

When a trust service carries the tScheme Mark, you can be secure in the knowledge that:

For each service, tScheme approval is regularly reviewed and may be withdrawn.

This Grant of Approval does not affirm or endorse any claims of conformance to standards or adherence to guidelines not explicitly listed as forming part of the service assessment.


Approved Service - Service Description

Certificate Factory

Certificate Factory is designed to allow an organisation wishing to issue Digital Certificates, over which it has full control, to do so without the need to commit the significant investment required to establish a PKI. It allows the organisation to maintain complete control over all important commercial aspects such as the certificate policy; registration practices etc. while Trustis runs the technical PKI infrastructure at its secure Trust Service Centre.

In the Certificate Factory each organisation’s Certificate Authority (used to manufacture the digital certificates) is separate from all others and is run in accordance with its requirements and specifications. The digital certificates produced are manufactured to the organisation’s specification and are internally identified as that organisation’s certificates.

Key features of the Certificate Factory are:

The Certificate Factory is designed to satisfy organisations operating in a wide variety of fields including Finance, Government (Local and Central), NHS, Manufacturing, IT, telecoms and law.


The tScheme Code of Conduct

Participants in the electronic trust services industry strive: