TRUSTED TSA

QCVN 138:2025/BKHCN

Clause mapping, implementation approach and assurance evidence for Trusted TSA.

Status data is illustrative and does not mean Trusted TSA has completed conformity certification.

Mapped clauses9

No fabricated compliance percentage.

Available technical records3

Protocol profile, matrix and legal sources.

Records pending publication4

Certificates, HSM/TSU, time source and conformity.

Data modeIllustrative

Not a claim of completed conformity.

2.1.1

Cryptography and digital signatures

Publish approved algorithms, key sizes, hashes and deprecation plan.

Cryptographic profile

Under assessment

Cryptographic securityPlanned

30/09/2026Internal cycle

2.1.2

Information and data

X.509, CMS, key formats, TimeStampReq/TimeStampResp.

Technical profile

Documented

TSA architecturePlanned

30/09/2026Internal cycle

2.1.3

Certificates

TSA certificate, trust chain, CRL/OCSP and publication points.

Certificate profile

Pending publication

Certificate managementPlanned

31/10/2026Internal cycle

2.1.4

HSM

Protect TSA signing keys in HSM; claim standards only with evidence.

HSM/TSU assurance

Under assessment

HSM operationsPlanned

31/10/2026Internal cycle

2.1.5

TSA protocol

RFC 3161/RFC 5816 or ETSI EN 319 422.

RFC 3161 profile

Documented

TSA architecturePlanned

30/09/2026Internal cycle

2.2

Operations and controls

Policy, risk, personnel, incidents and continuity under ETSI EN 319 421.

TSA Practice Statement

Draft

Service governancePlanned

30/11/2026Internal cycle

3.1

Conformity assessment

Management-system assessment and technical audit.

Assessment report

Not provided

CompliancePlanned

31/12/2026Internal cycle

3.2

Conformity declaration

Certification/declaration as required.

Conformity file

Not provided

LegalPlanned

31/12/2026Internal cycle

4.2

TSA responsibility

Retain certification and inspection records.

Retention policy

In development

Records governancePlanned

30/11/2026Internal cycle