ETSI EN 304 624 V1.0.0 specifies cybersecurity requirements and assessment criteria for Public Key Infrastructure (PKI) and software used for digital certificate issuance. The standard addresses security aspects related to the components and functions involved in managing and issuing digital certificates.

The standard covers areas including security, vulnerability handling, protection of information and system integrity. It has been developed as part of ETSI’s work supporting the EU Cyber Resilience Act (CRA) and is intended to support manufacturers and providers of relevant software in meeting applicable cybersecurity requirements.

You can find the document here: ETSI EN 304 624 V1.0.0

All feedback and comments are welcome by 28 October 2026.