Skip to main content

Services

The BIT offers signature and verification services on behalf of the DTI division and operates the necessary Trust Centre, which contains the central SG PKI.

Time Stamping Authority (TSA)

The Time Stamping Authority (TSA) of the Swiss Government PKI is a certified service and can provide qualified confirmation of the time of signature when signing documents. In order to be able to use the TSA service correctly, it must be specified for use in the signature software used in each case.

TSA in DesktopSigner

The DesktopSigner signature software (Fed. Adm. software layer 1) contains the Swiss Government PKI's TSA service as standard. You can find more information on DesktopSigner on our FOITT client platform in the user manual (in German).

TSA Server

  • Swiss Government PKI TSA
  • Service-URL: http://tsa.pki.admin.ch/tsa

Online Certificate Status Protocol (OCSP)

The Swiss Government PKI's OCSP (online certificate status protocol) is used to check the status of an issued certificate

The Swiss government offers a rule-compliant OCSP certification service: RFC 6960 – X.509 Internet Public Key Infrastructure Online Certificate Status Protocol – OCSP (ietf.org).

The verification address (URL) is contained within the certificate, in the attribute «access to office information».

HSM service for specialised application and system components

HSM (Hardware Security Module) is a dedicated crypto processor unit for the secure storage and management of cryptographic keys and enables the secure execution of crypto operations. The HSM service is produced on this basis. The service (HSM service for specialised applications and system components) enables partners to easily integrate certificates and the associated key material securely into their applications or provide them for the system components they operate. The service is offered for use via a standard interface.

Signature verification service

With the signature verification service (SD), the recipient of a document can ensure that the electronic signature was issued by an authorised body and that the document was not altered during transmission.

The market performance is divided into the three individual services:

  • Signature Validator Webservice
  • Discrete validator
  • Special validation