1877622 - Pakistan ECAC: Documents for Root CA

Status: ASSIGNED

(CA Program :: CA Documents, task)

Description

[ecac.pkimgr]

Attachment: ECAC WebTrust for CA - Assurance Report & Management Assertion (6).pdf

Steps to reproduce:

Electronic Certification Accreditation Council (ECAC) Pakistan is using Bugzilla bug-tracking system to store the documents and get a URL for use in the CCADB.

The above information is required while filling the application form of "CCADB Access Request for New CA" for enrollment of ECAC Root CA in CCADB.

This URL will be used to share audit report from a Qualified Auditor (an enrolled WebTrust practitioner) opining that our organization’s CA followed its key ceremony during its Key and Certificate generation process and the controls used to ensure the integrity and confidentiality of the Key Pair.

The same report is also available on CPA Canada Webiste and can also be accessed on the following URL:
https://cpa.cpacanada.ca/webtrustseal?sealid=11282

Comment 1

[ecac.pkimgr]

The aforementioned link (https://cpa.cpacanada.ca/webtrustseal?sealid=11282) can be accessed from ECAC Public Repository on the following URL:

https://ecac.pki.gov.pk/repository/index.html

Comment 2

[ecac.pkimgr]

Attachment: 1.0 Key Generation - Assurance Report - ECACv1_signed.pdf

Please Find Attached Audit report from a Qualified Auditor opining that our organization’s CA followed its key ceremony during its Key and Certificate generation process as per requirement shared via Email.

Comment 3

[ecac.pkimgr]

Attachment: ECAC_Independent_Report_for_CA_2024_v4.pdf

Comment 4

[ecac.pkimgr]

Attachment: ECAC_Root_key_generation_Independent_Assurance_Report_Crowe_2025-01-24-v3_signed.pdf