← Government of The Netherlands, PKIoverheid (Logius) cases
Bugzilla #1983276
Certificate Problem Report
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #16 – EJBCA Configuration
RESOLVED
FIXED
Government of The Netherlands, PKIoverheid (Logius)
AI Summary
The incident report details a minor non-conformity identified during the 2025 ETSI audit regarding KPN's EJBCA configuration not aligning with documented certificate profiles. The issue was recognized during an annual audit, and corrective actions have been initiated to ensure compliance. KPN has committed to improving work instructions and implementing checks to maintain alignment between certificate profiles and system configurations. All action items related to the incident have been completed, and a closure request is forthcoming.
Chronology
- Profile change documented and partially implemented.
- Auditor identifies finding.
- Corrective Action Plan created.
- Corrective Action Plan approved by auditor.
- All action items completed.
Participants
Policy Authority PKIoverheid
External References
Similar Local Cases
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #13 – Restore Test
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #14 – Back-up
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #12 – Outdated Software
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #2 – Supply Chain Management
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #8 – Logical Access
PKIoverheid: TSP KPN Findings in 2025 ETSI Audit - Incident Report #9 – Lifecycle Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #1 – Document Management
PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #4 – Incident Management