According to the provisions of Clause 2, Article 36 of Decree No. 130/2018/ND-CP dated September 27, 2018 of the Government detailing the implementation of the Law on electronic transactions on digital signatures and digital signature authentication services. , conditions for operation registration of organizations providing specialized digital signature certification services of agencies or organizations include:
a) Agencies and organizations must have personnel responsible for: System administration; operate the system and issue digital certificates; ensure the security of system information. These personnel must have a university degree or higher, majoring in information security or information technology or electronics and telecommunications;
b) Set up a system of technical equipment to ensure the following requirements: Store fully, accurately and update subscriber's information for the issuance of digital certificates during the validity period of digital certificates; Ensure key pair generation only allows each key pair to be generated at random and exactly once; has the feature to ensure that the private key is not detected when the corresponding public key is available; Has the feature of warning, preventing and detecting illegal access on the network environment; Designed in the direction of minimizing direct exposure to the Internet environment.
c) Having a plan to provide subscriber information online for the national digital signature certification service provider, serving the state management of digital signature certification services;
d) The entire system of equipment used to provide services is located in Vietnam;
dd) Having an office and place where machinery and equipment are located in accordance with the requirements of the law on fire and explosion prevention and control; resistant to floods, earthquakes, electromagnetic interference, illegal human intrusion.