EXTERNAL / DEPLOYMENT
CA / Device CA
Certificate issuance/status domain. Certificate status is not runtime trust.
TRUST INFRASTRUCTURESERVICE REFERENCE
Cryptographic trust stays inside explicit trust boundaries.
Private keys do not belong in DPP/business repositories. Trust services remain external dependencies unless explicitly part of the deployment.
TRUST DEPENDENCIES
Use each trust service for a precise purpose.
Provider, licence/certificate scope and availability must be deployment-specific.
EXTERNAL / DEPLOYMENT
TSA / Trusted Time
Trusted-time evidence for material events where selected.
REGULATED DEPENDENCY
eSeal / Digital Signature
Use regulated trust services where legally/contractually required; do not imply ThingID itself holds the licence.
CRYPTO BOUNDARY
HSM / KMS
Key protection and cryptographic boundary; no private key in DPP repository.
PKI STATUS
OCSP / CRL
Certificate status from PKI source.
OPTIONAL / PROFILE
Archive / LTV
Long-term evidence retention/renewal according to deployment and policy.