TIPAKTHYHA TIPABHJIA 3A TIPYXKAHE YCJIYTE H3ABAIA KBAJIM®HKOBAHHX EJIEKTPOHCKHX CEPTH®HKATA HA JIM4HAM KAPTAMA Beorpas, aj 2020 Bepsuja: 1.0e ‘CerrmenKaumono Te0 Ha octosy wala 31. crap 2, 3akoWa 0 exeKTpOHCKOM AOKYMeNTY, exeKTpOHCKOj MueHTHpHKAUHjH H yemyraMa Os MOBepetba ¥ eneKTPOHCKOM rloctOBarby (,,Cay2KGeHH racHHK PC, 6poj 94/17) # anana 4, YpeaGe 0 yerOBHMa 3a MpyAkaibe KEANMMpHKOBAHHX Yoayra OA nopepetsa, (,,CayaGenn raacunx PC*, 6poj 37/18) MMHUCTap YHYTPAMIHLHX fOCTOBa NOHOCH Ipaktuuna npapuaa 3a Mpy2karbe ycsyre H31aBaba KBaJIHPHKOBAHHX eeKTPOHCKHX CepTHpHKata Ha JIM4HHM KapTama 1. You Munucraperso yayrpaunsux nioctosa (y aawem texcty ,MYIT") Kao npyxanay Kpaiuxopane yenyre of nosepera, yncat 07.05.2018. roaune y ,Peructap npyxanaua knanmukowaHux yeryra on noBeperta” pewleisem Gpoj: 345-01-258/2018-12, npy:xa yonyry WoAABAIA KBAAMDMKOBAHHX CNIEKTPOHCKHX CepTHIbuKATA Ha THIHHM KapTaMa y cknay ca BaKOHOM © CNCKTPOHCKOM AOKYMeHTY, eseKTPOHCKO] MACHTHpHKALNjM H Yeayrama on NoBepersa y eneKTPOHCKOM nocnoBary (CayxGeHH ractMk PC, 6poj 94/17), y sabem TexcTy: 1 3akon w caraacHo Ypea6u o yerosuMa 3a Npy Kalbe KBAIMDHKOBAHX yemyra O11 NoBeperba, GCayaGenn raactuk PC*, 6poj 37/18), y aanem Texery ,Ypea6a". MYTT npyxxa yeayry Hanabarba Bas uKOBAHUX esEKTPOHCKHX CepTHdukara carnacHo 3axTesuMa crarapza: - ETSI EN 319 401 ,,Electronie Signatures and Infrastructures (ETSI); General Policy Requirements For Trust Service Providers” [EN 319 401]; > ETSI EN 319 411-2 , Electronic Signatures and Infrastructures (ETSI); Policy and security requirements for Trust Service Providers issuing certificates; Part 2. Requirements for trust service providers issuing EU qualified certificates" [EN 319 411-2], + ETSI EN 319 411-1. Electronic Signatures and Infrastructures [EN 319 411-1], onesbak 6.3.6 ,,Certificate renewal” Ceprupxarn xoje MYT usnaje uenyranajy yenone nponicae TpasnariKom 0 yenoBnMa koje Mopajy aa nenyiavajy KeaamKoBaHH esleKTpoHCKH cepracbukaTi (“CayaGenH rack PC”, 6poj 34/18) wy cnaay cy ca npenopy4enuM craHsapanma: + ITU-T Recommandation X.509 Version 3 + ETSIEN 319 412-1 ,,Electronic Signatures and Infrastructures (ESI) - Certificate Profiles Part 1: Overview and common data structures” - ETSI EN 319 412-2 ,.Electronic Signatures and Infrastructures (ESI) ~ Certificate Profiles Part 2: Certificate profile for certificates issued to natural persons" - ETSI TS 119 312 , Electronic Signatures and Infrastructures (ESI) ~ Cryptographic 1e Suites“. + IETF RFC 5280 ,,.nternet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile” + IETF RFC 3739, Internet X.509 Public Key Infrastructure: Qualified Certificates Profile Crpykrypa onor ara je y caagy ca RFC 3647 “Internet X.509 Public Key Infrastructure. Certificate Policy and Certification Practices Framework” [RFC3647]. MYTI je sedunucao onurre yenose npyxkaisa yeayre waaapaiba KBanmuKopannx eaeKTPOHCKHX ceprihukara, KojM cy mpeuHaupann y akruMa: TloauTHKa npy:xaiba yenyre WaqaBata KBAMM>HKOBAHHX CHICKTPOHCKHX cepTHhuKaTa Ha aMNHMM Kaprama (MlomuTiIKa Wsaazaiea cepruduxata) x TIpakTHuHa npaBina 3a npyxarse yeayre wanapanba KBasiMdHKOBAMHX eneKTPOHCKHX cepTHcbiKaTa Ha sMUHNM Kaprama (TIpaktiiHa npasiia 3a voaasaibe cepruipukara). Tloantika vsstanaisa ceprupuxara jedusuile H npewsupa npasiiia Hpyxaiea yoayre usqaparba KEAN HKOBAHHX ENeKTPOHCKHX ceprudukara, a TIpaxriuna paswia 3a waqasaibe ceptucbukara JledpHHMLUy ONepaTHBHe Mpouedype H spyre yonoBe y Wiuby Menytelba saxTesa ompeleHux mlonuTHKOM mpyxkaiba yenyre, TlouTHKa 3gapana cepTidikara H TIpakrH4na npaBiaa 3a usaaBaibe cepTacbukara cy jaBHn aKTH, MYT] je yrapawo FloceGwa wtepHa npasiia paga 2aurTuTe cucrema naqapaiba cepradukata Koja eTamHo onucyjy noctynke M Mepe Koje ce mpuMeryjy npHAHKOM pykoBaia KpuntorpackuM © TapaMetpHMa (aaropHTMHMAa Ms KBy4eBMMa) © 3a—3aBalse MgeHTUdUKAMMOHNX JOKYMEHATA H KBAIMIpHKOBAHHX EEKTPOHCKHX ceprudukata . MwTepwa asia Hicy jasHa H OsHaeHa cy O3HaKOM TajHocTH ,JIPIKABHA TAHA, y exaaay ca 3aKoHiom o TajHocTH nonaTaKa, MYTI je oxtrosopan 3a npy>xkase KoMuieTHe yeayre waqanatka ceprubukara Koja yksyYyje cnesehe: 1) pernerpaunjy kopricHuKa; 2) dopmnpaise ceprucbuxara; 3) aucrpuGyunjy cepracpuxara KopHcHmuuia; 4) ynpassearse 2KHBOTHHM BeKOM (OGHaBmarbe, cycneHaHja, peaxTHeaunja Hw ono3HB ceprucbuxara); 5) oGexGehunaive noysjlaHor XM jasHo ocTynHor cepsuca 3a npoBepy cratyca ceprauKara, 1.2. Hasue axra w wrentHuKaunja Hasue akra: Tipaxtwa npaowa 3a upyxawe — yenyre waqanana pasibHKOBAHIX esleKTPONCKHX cepTHCbHKATA Ha AMNHHM KapTaMa ‘OID: 1.3.6.1.4.1.33589.1.1.0 Bankewe axra: ‘Ona nepanja akra Baan 0 Wajawa Caeaehe Repanjeg 1.3 Yaecumun y IIKH cucremy Octopia yrora HHdpactpyktype cucTema ca jasHuM Key4eBHMa, IIKH cuctema (PKI - Public Key Infrastructure) je moysiao ycnocranatse exlekTpOHCKor wMaeHTHTeTa KOpHCHHKA cneuMduuupanor y oGnky exeKtponcKor cepruduxata. TIKM cuctem MYTI-a je xujepapxujexe ctpyktype. Ha pom HuBoy xujepapxuje je BpxosHo camonornucyjyhe cepruuxaynoxo Teno (RoofCA), a Ha ciesiehem HMBoy cy Noapehewa ceprubuKaunona Tena, HanaBAouH KOpHCHHYKHX cepruduKara. Yuecnnun TIKH cuetema cy ceprudukaunono Teno, perHeTpauwowa Tes1a, KOpHCHHUM H Tloy3zajyhe erpavie. 1.3.1 Cepruduxannono tex0 Cepruduxaunono teno (CA - Certificate Authority) npeactan:sa Hajanuy TauKy noBeperba y TIKM cuctemy. OcHosHa yzora ceprudukauHonor Tena je fa mpouelypom enexTpoHcKor Notnica Ha Gas acHMeTpHAHOr KpHNITOrpadcKOr ANTOPHTMA H CBOr MPHBATHOr K:By4a, KojH Mopa Gut Hajctpoxe wysaHa TajHa, rapaHyje Besy WaMehy jaBHor Kiya H MaeHTHTeTA Kopucnnka ceprndixara, RootCA wsnaje 4 caojuM npuBaTHHN KYM NoTHHcyje cepTadukaTe CepTdpHKAUHOHHX Testa, koja cy my no TIKH xujepapxuju nonpefena, a To cy CA wsfapaouH KopHCHHYKHx cepraiukata. RootCA onosupa ceptuiuKate koje je #3280 M MoTHHcyje AHCTe orlosBaHHX CA ceprupukara (CRL ~ Certificate Revocation List) CA wsnasanau KopHcHHNKHX cepribukata Hsaaje H noTnucyje KopHCHHYKe ceprucbuKate, onlosHBa Hx H rloTHMcyje muCTe ONOSBAHHX KOPHCHHYKHX cepTHdbHKara, 1.3.2 Pernerpaunona teaa Pervcrpanwiona Tena cy opranusaunone jeauunute MYTI-a, koje apwie peructpaunjy KopucHnKa 38 WaaBarbe cepruukaTa, OsHOCHO opraiHsallHone jeNMHHUe HALIEKHE 3a H3MABatbe AHYHEEX WACHTHIpHKALMOHHX AOKYMeHATA. axTeBH 2a HBaRAIE KRAIMUKORAHHX evleKTPOHCKUX cepTHpukata ce noaHoce perHerpannoHHM TemuMa. PervcTpaunja KOpHCHHKa 3a noTpeGe W9NABalba KBANMHKOBAHHX eNEKTPOHCKHX cepTHdHKaTa ce BPI Y OKBHpy npoueaype AKBHSHUMje MOsATAKA Ja H3MABAIe HEHTHPHKAUHOHHX AOKyMeHaTa, y cKNaLy ca 3aKOHCKH AedHHNCAHHM npouestypanta, 3 Kopucumnu Kopucumun cy dvsvuka anna KojMMa ce npyxka yeayra waqasaiba KBaAMdbHKOBAHHX eneKrponexnx ceptixpikara, 1.3.4 Tloysaajyhe erpane Tloysaajyhe crpane cy ¢yswuka HH nipapHa Mua Koja ce moysmajy y KeannbuKopane eulekTponicke ceptudukare, y UMby BepHdpHkOBarba KBANIMGHKOBAKOF esIeKTPOHCKOF NOTHHCA He novapae HxeHTHTeTa KopuicHuKa. TTpe Hero UITO ce Nloyaajy y cepruipukar noyaaajyhe etpane ‘Tpe6a Aa Haapule npovepy craryca KBaNMpHKOBAHOF esTekTPOHEKOr cepTAHKATa, CrpaM sIMCTE onosBaHHX cepruduKata, Koja Ce akKypupa Ha JHEBHOM HHKBOY. 1.3.5 Apyru ysecumun Osa onpen6a Huje npuenuea. 1.4 Ynorpe6a cepruuxata 1.4.1 IIpuxnarsuea ynorpe6a ceprupuxata Ceprnduxat ce Moxke KOpHeTHTH 3a BehHHY cepBHca esleKTPOHCKe yrpaBe H evleKTpoHcKOr ociopawa Kojit cy Gasnpailt Ha yHOTpeSH KBANHDHKOBAHHX eeKTPOHCKHX cepruduKara, Kopucunk je ayant a cepridpukaT KOpHeTH y cKnay ca BAXKeHHM 3AKOHCKHM nponicHMa. owen kopmuhersa ceprupuxara aesunucan je y nowy Key Usage cepruxara. 1.4.2 3a6parsena ynorpeGa ceprubunara Cpaka ynorpeGa ceprudpukara Ban oKBupa aedunncaHior onpexGom 1.4.1 oBor akra Huje osponena. 1.5 Aamuunerpaunja npasaux axara 1.5.1 Opranwsauuona jeunuua naxtexua 3a aammunerpaunjy npapanx axra Oprannsannona jennunua y MYT-y wannexwa 3a wspaay, Hsmene m nonyne TosiKe wanapaiba ceptuukara M oBor axTa je Oscex 3a cepraibuKauHoHH cHcTeM, Osesbetba 3a wihopsaunony GesGeauocr, Cektopa 3a atanHTHky, TeeKOMYHHKANWOHE H HAKpopMaLHoHe TexHonorije, Miuctapersa yHyTPaulitbHX NlocioBa, 1.5.2 Kontakt nogaun Muucraperao yryrpaurisux nociosa Cekrop 3a avianiTiky, TexeKoMyHitKauHOHe H uHbopMauMone TexHosIOrHje Onessene 2a nibopmaniony GexGeaHoct Oncek 2a cepruukawonn cucTem Knesa Moma 103, 11000 Beorpaa e-mai ca@mup.gov.rs website: http://ca.mup.gov.rse 1.5.3 Yexaahuname axara ca npakcom Waanaiwa ceprudpuxara Banocnenm y Oncexy 3a ceprubukaunonn cHctem MYTI-a yoknahyiy dopmy campxaj Tloauruxe wsaasaisa cepridpukata M OBor akTa ca BaxehoM 3aKOHCKOM perynaTHBOM Ht eBeHTYAANHM NpoMenaMa HacTaAHM Y Mpaken W3naBatba cepTHbHKara, Oueny YearsiausenocTH Aaje Teno 3a OlleHHBatbe YcaritalLleHOCTH y CKa\Ly Ca 3AKOHOM 1.5.4 TIpoueaypa ox06panama axara Tlonuruka waqanatsa cepticpHkara H OBaj akT ce npernenajy H axypupajy jenHoM romMUnbe HH uewihe y cnysajy BaxpeanHx npomeria oapehensx oxpexn Koje mpoucTHyy H3 eBeHTyanHHX MpoMetia Y SaKOHCKO} peryaTHBH IH TEXHHYKHM KapakTepHCTHKAMa —MpHMEIBEHHX xpuntorpacoxsnx anropHTawa H AY AMHA KpHMTOrpadcKHx KEyvena. Ceaka HORA Bepsija Mpe oGjasx.usaita Mopa npohi npoueaypy ox0Gpasarba. Hakou kpeupatea WH @kypHparba akata of Crpake 3anocneHHx y Onceky 3a ceprHbuKallHoHH cuctes, axa npersenajy Ile Onceka 3a cepri(pikaunoHH cHcTeM H HaveaHHK Onesetsa 3a unopMaunony GesGeqnoct. Kag ce OHM carmace, akTH Hay Ha O/oGpelbe Ko HayenHHKa Cexropa 3a ananutuxy, TeneKomyHKauMoHe MUN opMauMoHe TexHooruje, AKTa Koja cy oao6pena on crane Haveanixa CekTopa, NoTHHcyje MHHHCTAp YHYTPAUIDHX MOCTOBA. 2. O6jan.usawa nndopmannja Hu A0Kaunja rae ce oOjaBsbyjy Cee unipomaunje Koje ce ofHoce Ha mpyxaie yenyre w3aBarba KBasiMdHKOBAHHX enexrponckix ceprudpuxara MYT oGjassyje Ha we ctpann ceprudpuxausoHor Tesla MYTI-a, hup://ea.mup.go 2.1, Be6 erpana cepraduxaunonor tena MYII-a Be6 ctpania ceptupuxanonor Tena MYTI-a je jasHo zocTynta Kao H cBe HpopMantHje Koje ce Ha oj oGjaBnyjy. Odjannexe undopmannje ce nepnoawato axypupaly. 2.2. Unopmauuje koje ce o6janmyjy MYTI ofjasnyje caenehe umbopmaunje Koje ce omHoce Ha npyxate yenyre wsaasara KBA/IM¢HKOBAHHX esIeKTPOHCKHX cepTHdpHKaTa: = akt [lonHTHka mpy:kahaycnyre W3qaBatba KBANMC)HKOBAHHX — esIeKTPOHCKHX cepriibukara Ha THYHHM KapTaMa, = akt Tpakrytia npapiina 3a npy7karbe Yonyre H3qaBatba KBAMCHKOBAHHX es1eKTPOHCKUX cepradbukara Ha JIM4HHM KapTaMa (OBaj akT), + akt OnurrH yenoBM npyxkaiba yenyre vS/IaBatba KBAAMHKOBAHHX cHIeKTPOHCKHX cepradukara, = OGpazay Yrosopa o npyxkatey yesyre u3saBarba KBAMM(PHKOBAHHX eseKTPOHCKHX cepradnkara, = OGpasaut 3axtesa 3a npy>kaibe yeayre MsslaBalba H OGHABLBArLe KBATHGHKOBAHUXe enextponeknx cepracbukara (O6paaait I.), ~ OGparau saxtesa sa seGioKagom IIMH-a simute kapre (O6pasaut 2.), > OGpasau saxtesa 3a npoMeHy craTyca KBATHGUKORAHUN eneKTpOHEKHX ceprHcbuKara (Odpasau 3.), + CA ceprudpukare, - _Imete onossannx ceprupuxata, + Kopnenusxa ynyrersa, + apyra axra w o6anewrewa, 2.3. pexnennuja o6jasnusawa unhopmaunja Jlucte onospanux ceprupukara ce oGjannyjy na 24 cara. AkTH H ocram nogauut ce oGjaBbyiy HaKoH H3Mella Koje cy Yenojente H onoGpente. 2.4 Kontpoaa npuctyna se6 cajry cepruukaunonor tera MYTI-a Be6 cajr ceprudikauworor tena MYTI-a MMa MMmtemeHTHpaHe aorMuKe HM HHUKE CHTYPHOCHE MeXaHH3Me 3a 3AUITHTY MogaTaKA oO HeoBNaWheHor Gprcaa, JonaBara HAM Npomena. Mpucryn oGjasnenum nonaumma orpaHiven je camo Ha MoryhHocT wirarsa u Tpeysumatea. Maentnpuxaunja u ayrentuxaunja 3.1 Hmena 3.1.1 Bpere umena Y keanndukowanuim eneKtporickum ceptidpukarina koje waaaje MYTI, ue cepriukaunonor Teaa koje usaaje ceprupuxare, nose Issuer H HME KOPHcHMKa cepriiuKara, No-be Subject, cy jeauuctsexa umena (Distinguished Name - DN). 3.1.2 3uaueme umena Hime kopucuuxa ceptdpukara jentosHano noraphyje uaeutirer KopHCHHKa, 3.1.3 ANonMMHOcT HAM HceyAOHAMM KOpHCHHKA Kopuicnium we Mory a8 6yay aHOHUMHH H He Mory a KopHeTe neeynoHHMe. 3.1.4 Tpapuaa 3a Tymayere pasamantax spera umena Visenia kopuicunxa cepracpukara npencrasssea cy oarosapajyhim aaTHHHYHHM/MHpHAWSHHM emoBuMa epreKor jesnKa,e 3.1.5 Jeanuetsenocr mena JequricrseHoct Mena KopHicHika ceptibikara ce ocrsapyje nomohy jeauncTexor cepujckor Gpoja X.509 ceprncprxara, 3.1.6 Tpenosuasatee, ayrenrukannja m yaora saurrutuor 3HaKa Tonasaive 2aurrHtHor sHaka HMeHY KopHcHKa ceprHibuKaTa Hije nOsBOseHO, MMeHa KojUMa 6x ce Kpulnsta HHTeseKTYaIHa HAH ayTOpcKa MpaBa APYTHX HCY 1O3B0sGeHA. 3.2. Haentauxaunja n ayrentaxannja KopnenmKa Hakon noanomersa saxtesa 3a H3jabarbe KBaIKGpHKOBAHOF e:1eKTPOHCKOF ceprHipukara BpUIM ce mposepa HaetTHTeTa KOpHeHHKa KOMe ce Ha.taje cepTHKIKAT. 3.2.1 Meroa zokammnama noceaa npupaTHor Kiby4a Oxo Huje npuMetbuso, jep KopHCHHK He reHepHiue cRoj npHBATHH KAyH, Beh ce y Mpouecy vaqaBalba KBaMGHKOBAHOF eleKTPOHCKOT CepTHduKaTa MPHBATHH K/bY4 TeHepHUe y caMOM anny swine Kapre, 3.2.2 aewruduxaunja u ayterruxannja npapnor anua (Osa onpea6a nuje npucerssinpa, jep MYTT naaaje ceprupuxare nckmysiizo HSHUKHM AMUN, 3. 3 Maenruuxaunja n ayrenruxaunja gyonaKor amua Maenrirer dusuKor simua ce NpHANKOM MonHOUIeBa sexTesa 3a HOAABAHGE cepTHpuKaTA oTephyje Ha ocHoay Bacher HacHTHpuKaUMOHOF JOKYMeHTa, 3.2.4 Henposepenu noaaun 0 kopuennny Kopiicnnk cHioch oxrosopHocT 3a TayHOCT NojaTaKa HaveeHHX y saxTeay 3a oqaBalbe cepruduxara, 3 5 TMpovepa rasmocru noaataka npasvor anna Osa oapeaGa unje npumensonsa, jep MYTI ne waaaje cepridpukare npasnun sMWHMa, 3. 6 Kpurepnjymu nateponepaGuanoctn Osa oapea6a nije npumennea, 3.3 Maewrnpuxauuja u ayrerruKaunja mpi saxrepy 3a 3aMeHom Kby4a Samena kbyya y oKBHpy HeTOr ceprHduKaTa Hje rosBomeHa. Kana ce Meta Ky reHepHule ce HoBnt cepradbakar.e 3.4 Haenrupuxaunja w ayrentukanuja mpi 3axteny 3a on03B0M. ceptuduxata Tloctynax wzentacbuxaunje KopHcHHKa npH nomHouIessy 3axTeBa 3a OnOIHB cepTHKpHKara je NaeHTHMAH Kao NpH NOAMOWEIY 3axTeBA 3a HSsABaIbeM CepTHAUKaTa, 4. Oneparueuu 3axresu y Be3H *AHBOTHOF Beka cepruuKaTa 4.1 Tloanomene saxrepa 3a npyrkaibe yeayre w3aapaibe ceprupuxara 4.1.1 Ko Mowe noanerH saxres 3a npyskarbe yeayre maaapatbe cepruduKara? 3axtes 3a npyxkaise yenyre H3qaBaHbA KBAsIMCbHKOBAHOT eeXTPOHCKOT cepTHKpHKATa MOKE Ja noawece: - [ipkan.nannn PenyGanxe CpOuje, kojx mma paxehy Muy KapTy ca 4ioM, - Crpaii apxannanne, KojH HMa Baxehy GHoMerpujcky aMYHY KapTy 3a cTpauite (Ceptuduxari ce ne uszajy Ha npHapemenHM aHaiHM KapTaMa 3a crpaHte.) 4.1.2 Yeaonn 3a wajapawe KBAANhHKOBAHOT eaeKTPOHCKOr ceprudukaTA ‘YeaoBH 3a waaapatse cepridpukata KOpHCHKY cy: = aa KopuoHmx nocesyje naxehy any Kapry ca sitnOM, = 1a KOPHCHMK perHcTpaLNOHOM Texy AMMO MloANeCe ypeaNo TionyHeH H cBojepy'Ho MOTMMcaH 3aXxTes 3a Mpyxkarbe yenyre woqaBatba KBANHHKOBAHOr eseKTPOHCKOr cepradbukara, = fla ce KOpHCHHK npe nogHoulela saxTeBa ynosHa ca OnuITHM ycnoBuMa npyrKatba Youyre H3jasarba KBaNMHKOBAHOT eneKTpoHcKor ceprH(pukara, = aa Kopuenuk ca MYTI-om saknysM Yrosop 0 mpyxaty yenyre waaanaiba xKnanpukonanior enexrposickor cepradpukara, Kopucuuk y3 3axtes mpuaaxke 28a mpuMepka cBojepy4Ho moTmHcaHor joKymeHTa ,,OnurTH YonoBn npyxkaisa yoayre waqanaiba KRAMIpHKOBAHOr enekTpoHeKor ceptpuKaTa MMe Torephyje aa je ynoauat ca capikajem Tor aokyMewtra. Yropop ce aksby4yje y ABA npHMepKa, no jena 2a cnaxy yrosopiy crpany. YrosopoM cy peryaucana MehycoGa npana 1 oGanexe yrosopHix crpana, 4.2. OGpana saxresa 3a usaaBawe ceprudbuKaTa 4.2.1 Haentnukaunja w ayrerraxannja np npujesy saxtesa Kopucink periierpalwoHoM Teny AMO MoAHOCH saXTeB 3a HBAABAe cepTHbuKaTa, CayxGennk peretpauonor Tena BpwM AeHTHdHKAUHjy KOpHeHHKa Ha OcHoBy Baxeher ngenTuuxaunonor JoKyMena,S 4.2.2 Tipuxearame man onGujatbe saxtena 3a H31anarse ceprupuKara Baxres he Guri npuxpahenl ako cy HCnYHeHH yenoBH Hs osperGe 4.1.2 oBor akra, a onGujeH ako GH0 KojH oA YenoBa Huje HenyreH. CayakOCHMK perucTpaUMoHOr Tena noTaphyje sa je saxtes mpHxeahex caoju normucom Ha 3axTeBy. 4.2.3 Bpeme oGpaze saxrena 2a wajanatne ceprudpuKara Baxres ce cmatpa oGpaljeHuM npuxparaisem saxtega of crpale cayaGenttka perneTpaunoHor ‘Tena, HaKOH Nera CHYKGEHHK 3anOuHibe MpoUec H3zaBarba CepTHduKaTa. 4.3 Hsaapame cepruduxara 4.3.1 AkTHBHOcTH TOKOM H3gaBatba cepTHgaKaTa 'Y npouecy ussapaisa ceprudukata HeomxogHo je yHeTH akTHBAUHOHM Nosarak (IIMH) Koju je mo3HaT caMo KopHcHHKy. KopwcHHK aKTHBALHOHH nosaTaK JOGHja y 3aurTHheHo} KoBepTHt NpHAHKOM mMpey3MMaiba THE KapTe ca YHTIOM. [lotpeSHO je oMoryhuTH KOpHCHMKY fa, y Mpouecy W3iaBarba cepTHduKata Y Kopaky KOjH 3aXTeBa YHOC aKTHBAlWOHOr MogaTKa, caM yHece choj akrHwauoHm nogatak. Y caywajy Ja je KopHcHHK saGopanno ceo} TIMH norpesuo je 2a npe nosHoulersa saxresa 3a H3laBabe ceTHduKaTa, ogHece 3aXxTeB 3a e6T0Kag0M TIMH- a. Y mpouecy ne6noxane IIMH-a, noctasma ce nos IIMH xKoju KopucHuk cam ompebyje. ¥ ceprudhukar he Gur ynucaH e-waiut KOpHCHHKA ako je KOPHCHHK TaKO HaBeO y 2axTeRy. Haxon ynuca cepruipukata y 4Hm aHNHe Kapre cayAGeHHK KOPHCHHKY npesaje aMuHy KapTy W No jeaan npuwepax Yrosopa M OnuTsx yesona waaavarsa ceprudpuxara, Ha opaj nau je 3aBpilieH noctynak uagapaiba ceprupuKara 4.3.2 O6aneurrapane Kopucnmka o usqapatby ceprupuKara Ona ompen6a unje npumersnsa, jep ce noctynak wazanaia cepriuKara cnposoan y npucyersy KopHcuiia, 4.4 Ipuxparame ceprudukata 4.4.1 Tocrynax npuxsarata ceprudakara Cepracpxar ce KopnicHnky aNuHo ypyuyje H cMaTpa ce mpuxeahenHM nppom yriotpeGom ceptudbuxara of crpare KopHCHHKa. 4.4.2 O6jannunane cepruduxara Copruchuxati Kopucunka ce He objanyjy.e 4.4.3 OGanenrranaie noysaajyhe erpane o wsaanamy cepruuxara OGaneurrasarse noysiajyhe crpatte o H3aBatsy cepTucukara ce He BpULH. 4.5 Kopumbierme cepradaxata # acamerpunor napa Kby4eBa 4.5.1 Kopuurheme npusatnor Key4a Kopucnuxa u cepruduKata Tipapatan xpunrorpapckH Ky KOpHCHHKKa ce KOpHCTH 3a KpeHpatke KBanHdHkOBaHOr enekrporickor nornica. KopicHuk npHcTyna cBOM NpHBaTHOM KibY4y yHOUIeHEM axtupauionior nogarka (IIMH-a). Keanuukosann enexrpouckn cepridbukar ce KopuicTH 3a BepucpHKoRate KRAIMD>HKOBAHOF eNleKTPOHCKOF NOTHHCA. 4.5.2. Kopuusherse japnor kby4a KopHcHHKa m cepruduxara Jann Kany M KBaMMcbHKOBANH cepTHKbiKaT KOpHCHHKa noysnajyhe ctpae KopcTe 3a Bepuukauijy enextporcKor nornuca. TMoy3aajyhe crpae npe Hero wTo ce noysnajy y ceprudukar tpeGa aa ocum sepuukauuje waepule u Bannaayniy cepraguKara, onHOCHO TpeOa a mposepe aanat nosepersa (nanan CA cepradukata m3aapaoua) H cTatye ceptuduKata cpa aucre onossaiix cepradukara. 4.6 OSuanmame ceprapuxata Toa oSHambatbem ceprudukata nompasyMena ce reHepHcatse HOBO napa KpuntorpadcKHx koby'ieba H H3aBaHbe KRATHKHKORAHOT esIeKTPoHcKO cepTHDUKATa Ha HHO] KapTH, Koja Beh Ma ynHcast KeazipHKoBAHH es1ekTPOHCKH CepTHpUKAT, AIH My je HCTeKNA BaXxHOCT. 4.6.1 Oxoamocru 3a oGHaB:parse ceptupukata Ceprirpuxar ce KopuicHHky iazaje ca poKoM parkeiba of $ roaHta HH ca pokom Kpahum on $ FoguMa, ako je 0 HCTeKa NepHOa BAXHOCTH HYHE KapTe OCTAO Maibe ON 5 romMHA, Taz ce cepruuKat wazaje Wa NepHoa RAKHOCTH AMYHE KapTe. AKO je HAKOH HoTeKa BaAxHOCTH cepriukata suHa KapTa M sabe Baxcha, KOPHCHHK MOM JOXTeBaTH OGHABmAIbe ceprHdukara. Yenoan 2a oGianatse cepruukara cy a KOPHCHHK noaHece 3axXTeB 3a OOHABIAILE ceprudbuxara, 2a uma paxehn Yrowop 0 npyxkatby yeayre wsqapaiba KeaMdHKoBaHor enektpouekor ceprupukara paxehy anuny KapTy. 4.6.2 Ko Mowe 3axtenaTn oSuan.bawe ceprabunara’ Odtiansnaive cepriipukata Moxe fla 3axTeBA KOPHCHHK cepTHpHKara, 104.6.3 O6pana saxrena 3a oGuansbarbe cepTubuKara Saxtes 32 OSHaBalbe cepTinwKaTa KOPHCHHK TlOAHOCH perHeTpAtIHOHOM Tery, Koje 3axTeR MpHXBara ako cy HETYWeHH yenoBH 43 onpenbe 4.6.1, a oNGuja 3axTes AKO YenOBH HHCY NcryHseHN. HakoH MpHxsaraiba saxTena cmy:KGeHMK pereTpauoHOr Tena pu OOHAB:barbe H yrnc ceptudikara y Yin aMuHe Kapre. 4.6.4 OGaseurrasaie Kopucnuxa 0 OOnapamy ceprupuKara Ova ompenda snje npHmerousa, jep ce noctynax oGnanmaisa ceprudnKara cnposoan y npueycray KopucHuka, 4.6.5 IIpuxnaranse o6nos.nenor ceprndakata OGos.zeHn ceprdukar ce emarpa npuxBaheHUM HaKOH mpBe ynoTpeGe On cTpaHe KOpHCHHKA, 4.6.6 OGjanLuBarwe oOGHoBLeHOr ceprH>uKaTA Ona onpea6a unje npnenssnea, jep ce ceprudukaTH KopHeHmka He oGjanseyjy 4.6.7 OGanemraasse noysaajyhe erpane o oGnan.namy ceprupuxara Ona oapeaSa nije npumerssuea 4.7 3amena japnor Key4a y cepruukaty Banena kny'ena y ceprugukary ce He apuim. Kana ce revepuue HOBH nap Ksby'eBA H3naje ce HOBH cepTi(bukar. 4.7.1 Oxoamocra 3a sameny januor Kaya y ceprudbuxaty Osa onpeaGa nuje npumensanna. 4.7.2 Ko mone 1a saxtesa op japnn Kays? Opa onpea6a nije npumersbuea. 4.7.3 O6paja saxtena 3a 3aMeHoM jaBHor K:by4a, Opa onpea6a Huje npuMenseuBa. 4.7.4 OSaneurrapawe KopucHMka o 3aMenH japnor K-by4a Ova omperGa Huje npHwerenea, u4.7.5 Tpuxparatbe cepraipukara ca samemenum j HUME KyHEM. Osa oapena nuje npumenbusa, 4.7.6 O6jansuname ceprupuxara ca zamerbenum jaBiHM K>byHeM Osa oapen6a nije npumenssusa. 4.7.7 OGaveurrawaie noysaajyhe crpane o 3amewn jannor kya cepruuxara Ona oapeaGa nnje npuennea, 4.8 Moanuxaunja cepruuxara Moanuxaunja cepruukara noapasyMesa npomevy noaaraka y ceptudukary Ges npomene januior kay'a ceprigpukara, Moanpukaunja cepradpuxara ce He apuit. 4.8.1 Oxoanocra 3a moanduxannjy ceptauxara Ona onpenGa nuje npunenssisa. 4.8.2 Ko Moxe saxtenaru moanpunannjy ceprauxara? Oba onpen6a Huje npunenssuea. 4.8.3 O6pana saxrena 2a Moaupuxanujy cepruduxara Osa oapen6a nuje npumenssnsa. 4.8.4 O6aneurrapatbe KopucHuka o Moan uKaunjm cepricbuKaTa Osa oapen6a nuje npumenssnsa. 4.8.5 Tpuxnarate moamukonanor ceprupkara Osa onpea6a nuje npumersusa. 4.8.6 O6janaunarse Moauduxonaor ceprubuxara Osa onpen6a nuje npumersauea. 4.8.7 OGaneurrapatbe noy3tajyhe crpane o Moamdukaunju ceptuduxara (Osa onpenGa nije npumersnsa, 2e 4.9 Onosus, cyenensuja u peakTupaunja ceprupukata Onosne ceprupikata je NO™YHO YkHIAHKE BaxKeIbA ceprHuKaTa 1 HeroRO OGjanreuBae Ha aucTH onoseaninx ceptacbuxara (CRL suerH). Cycnenanja ceprupuxara je mpuapemeno ykuaame naxema ceprudikata H eroxo oGjapsbusarte Ha CRL ancta, Cycnensija rpaje oHonHKO Ayro KomHKo Tpajy yos10BH 360r Kojux Je saxresana. Kaxa oni yenonn npecraity 2a Baxe, KOpHCHHK MoxKe 3axTeRATH peakTHBALUHjy ceprughukara. Peaxtupaunja cepragukara je nonoBHo axTuBuparse ceptudukara KojM je 6H0 cycrieHOBAH H wserob0 Opearte ca CRL acre. 4.9.1 Oxoawoctu 3a onosue cepraipuiara ‘Onosie cepricpuxara ce apusn Kaga: 1) nosis ceptitbikata saxtepa Baacunk cepticpikaTa HLH WeroB NyHOMOHHNK, 2) anactx cepruipukara HaryOn nocnoaHy enoco6Hocr; 3) ce yrapan aa je nowarak y ceprucbukaty norpewiar; 4) ce yrapam aa cy mona 3a nposepy KBamM>HKoBAHor eseKrpoHCKOr noTHHca yrpoxeHH Ha HAMHH Koj YTHYe Ha GesGeaHocT H Nloy3qaHocT ceprHdHKaTa; 5) ce yTapait a cy NOAUH 3a EeKTPOHCKO MOTHHCHBAlbe YrpOxeHH Ha HAYHH KOjM yTHYE Ha GesGeanocr # noyssaHoct enexrpoxckor nornHca; 6) wsnasasian cepruduxara npectaje ca palom HK My je pas sa6parsen. 4.9.2 Ko moxe 3axtepaTH onosue cepruuxara? Onosus cepruipukara Moxke 3axTeBATH KOPHCHHK H.1H HeroR OBTaUIheHH MyHOMOBHHK, Kopicnnx je Ayal a O2MaX saTpaxKH onosHB cor ceprdpukara y eayyajy ryOwTKa Ha ourreheta cpeeTsa WH nlogaraka 3a KpeHpaise eleKTpOHCKOr MOTHHca HM y cayuajy Komnpomrranuje HM cyMibe y KOMMpOMMTalIAjy CBOr NpHBATHOF KiBy'a. 4.9.3 Hoetynax onosusa cepruukara KopvcHHk perverpaliHoHoM Tey mlomHocH 3axTes 3a oM03HB ceprHduKata, CayaGenuk PernctpauMoHOr Teva HaKOH NipHjeMa JaxTeBa Ges omTaraisa BpUI onosHB ceprucbuKara, CayaGenmx norephyje aa je npumHo 3axres 9a onosHBoM cepriduKara cBojuM MOTHHCOM, Haxox nonHowiera 3axtesa 2a onosHBoM ceprupukara cayaGeHMk 3arounibe Mpouec on103HBa ceprubuxara, CayxGenHk omiaxke Ha HyBaibe 3axTeB 3a ONOSHBOM CepTHbHKATa, a KOPHICHHKA oGancurrasa 2a je KOpHCHHKoS ceprHpukaT OMloaBaH, uITO MOApasyMeBa TpajHo ykHAaIbe BaKeHA CepTHdpHKaTa HM HerORO OGjaRUBAHE Ha JIMCTH oNlO3BAHNx cepruduKara (Ges Moryhnocru peaktnpaunje). 4.9.4 Bpeme o6page saxresa 3a on0sHBoM 3axtes sa ontosuBom ce oGpahyje oaMax Hakon npujesa 6e3 osnaraisa H cepriuKar ce onMax onoana, 3g 4.9.5 Bpeme 3a Koje ce cepruuxat Koju je onossan ynucyje Ha cry onozpanux ceptubukara Una ce onosoBe ceptucpikar ce yniicyje Ha TMCTY onosRaHix cepTacbuKara. HaxoH onoaHBa cepticbukara reepmiue ce HOBa sCTa OnOsBAHHX cepTHhHKATA. 4.9.6 Tposepa craryca ceptaunara Tloysajyhe crpane npe nero wo ce noysaajy y cepracbuxar apuze nposepy cratyca ceptuukara, oAHOcHO nposepasajy Aa aM ce cepridbikat watasH Ha aMcTH ono3BaHHX ceptucpuxata (CRL- Certificate Revocation List) 4.9.7 Opexsenunja o6jaseupawa aucte onospannx cepruduara (CRL ancte) CRL ancra ce o6jannyje cpaknx 24 cara. 4.9.8 Maxcumaauo kaunsemse y o6jansunamy CRL anere Y cayyajy onosusa am cycnensije cepricbkara renepmte Hosa CRL aucta oGjanmyje oaMax HakoH reepHeaiba, pe penoBHe O6jaBe, 4.9.9 Pacnosoxnpoer mponepe eraryea ceprudpuxara Aaxypua CRL anera je yeex aocryna na ve6 cajry ceprudpukaunonor Tera MYTI-a, 4.9.10 3axrenu 3a nponepy cratyca cepruduxata Tloyanajyhe crpane cy aykHe aa nposepe crarye ceprudbukara y KojH ce noy3zajy Ha ocHoBY jaBvo aoctynue aMcTe ono3BanHx cepTHdaKara. 4.9.11 [pyre dope pernerpa onospannx ceprupunara Osa onpenGa Huje npumereuea, 4.9.12 ToceGun saxrenn y c:rysajy KoMnpomuTaunje KBy4a Y caysajy cysise y KOMMpomMTaltijy CBOr NPHBATHOF K:by4a KOPHCHHK je ayKAH 1a onMAX pecrante ca iberoBiiM KopHiuheHbeM H NlomHece 3axTeB 3a onosHB cepruduKara, 4.9.13 Oxoanoctu 2a cycnenanjy u peaxtupaunjy ceprupuxara Cycnenauja ceprupuxata ce Moxe HaBpULHTH ako OapeheHt nepHoA He NocTojH norpeda 3a xopnuihenem ceptuduxara, Y cnysajy aa ce nocae ompeherior nepHosa noHoBo nojaan rorpe6a 2a KopuusherseM,, cyerleHAOBANH CepTHAKAT ce Moke peakTHBMpATH, 14e 4.9.14 Ko moxe na saxtesa cycnensujy m peaxTusaunjy ceptupuxata? Cycnensujy # peaxtusannjy cepricpixara 3axresa KopHCHHK. 4.9.15, Tloctynax cyenensuje n peaxtupannje ceprnakata 49.15.1 Tocmynax cyenenouje Kopcunk peruetpaivoHom Tey noaHocH saxtes 3a cycneHsnjom ceptuukata. CayaGennk To npujemy saxtesa sa cycnensijom Ges osumaraisa BpuiH cycnensKjy cepradpuKara. HakoH NaspuleHe cycnensije cayAROHHK OMAK Ha HYBakbe 3aNTeB 38 cycreHsHjom cepTHCpHKaTa, @ KopHcHuka OGaneurraza a je KOpHCHHKOB cepruibuKar cycneHsoBaH, uITO MlogpasyneBa TPHBPEMeHO YKHIAIE BaxEHA cepTHDHKATA H erOBO OOjanHBAIE Ha THCTH ONOsBAHHX cepradikara, 49.182 acmynax peaxmuscysje Kopucnnx pernierpauntoniom Teny rtoawocn saxren 2a peaxrupaunjo cepricpukara, CayaGenmx To npujemy saxteba sa peaxrHBaunjom Ges ouiaratba BpulM peakTuBaunjy cepruduKara, HakoH voBpleHe peakTHBaUMje cHyKGCHK OMTaKE Ha YyBaIe 3AXTEB 3a peaKTHBALMjoM cepruibikara, a KopHCHHKa oGaneurrana aa je KOpHCHHKOB cepruipiikat peaxTHBHpaH, WTO NlompaxyMesa OpHcaise ceprdpukara ca sIMcTe oMlosBaHHX cepTHdpHKaTa M Spahaise y aKTHBaH crarye. 4.10 Ceppucn nponepe cratyca cepradpuxata 4.10.1 Onepatusne kapaktepucruKe Onoseann H cycrensosaHn cepraduKarn oOjasyjy ce Ha sIMCTH onosBaHHX cepTucbuKara (CRL ancra) koja ce objassnyje Ha 24 cara, a y cayuajy onoanea u cycriesaije axxypupa ce mpe penoBHe objane. 4.10.2 Hoeryntocr ceppuca Jlueta onossannx cepricpuxara je cramxo aoctynva (24/7) Ha Be6 cajry ceprudpukannowor Tena MYTI-a. 4.10.3 Hoaatne kapaxrepncrane Iucta onossannx cepriibukara caapku cepieke Opojese cepruipukara, jlaryM, speMe M passior ‘onosupa cepruduxara. 4.11 Tipecranax xopuuthera cepruguxara Kopucnnx npectaje aa Koper cepradbnkar Haxon onoanea ceprupKara. 15e 4.12, Orkpupare u o6HoBa mpuBatHor Key4a KopHeHHKA TIpuparin kny' KBanHtpHKoBaHor cepTHdbikaTa 3a eeKTPOHCKH MOTHHe reHepulue ce y CaMOM uuiny ANYHe Kapte H HAFe Ce OCHM Ha HHINY He HYBa, TaKO Ja ce He MOXKE OTKPHTH HITTH o6HoBHTH. 5. @u3nuKa, npouexypanna HM Kagposcka 6e36equocna KOHTposa 5.1 ®usiuka kourpoaa 5.1.1 Jlokaunja Lestoxyniia onpema GesGennnx cncTema 3a waaanaibe ceptuibukara (cepsepu, KpuntorpaeKn ypehaju octana onpema) emeurrenn cy y Beorpaay, y srpaan Muttwetapersa yyTpaiibix ocaosa y yanun Knesa Muoura Gpoj 103. Onpema citcrewa sa usnasatve cepraduKara Hasiasi ce y mpocropyju, Koja ogronapa norpeGama wsspurerba onepauuja BucoKe Gex6eqHocTH (@apanejes kases). $.1.2 Kourpoaa usnxor npucryna aparejes Kanes y KoMe ce Haas ONpeMa cHCTeMA 3a H3/laBalbe cepTHOHkaTa cMeuITeH je y Gex6eanoj 30HH 3rpage, y oKeHpy LleHtpa 3a nepcoHanwsaunjy MAzeHTHGUKALMOHUX noKymenara (Tlepeouentap). Y GexGeanioj 20nK wMMeMeHTHpaH je MexaHHsam GusHaKe KoHTposte MpieTyna 2acHoRaH Ha GeckOHTAKTHHM eMapT KapTitiawa. TIpocropijanta y OKBHPy GesGeaue sone Mory ja NpHeTyne camo 3anocaeHH y Mepcouentpy H 3anocaeHH y OnceKy 3a CepTHUKAWNONH CHCTeM, Koj HMajy CMapT KapTHLIe ca Osle-AeHHM jo3B0I0Ma 3a npHeTyR oapehenmm npocropijama y Ge3Geau0j 20mm. Korrtposta npueryna Mapanejenom Kapesy, re je cMeurtena onpeMa cucrema 3a HaaBaibe cepTivpHkara, orpanuvewa je Ha 3anocnene y OsceKy 3a cepTidpukaunonn cucreM. ¥ @apanejenom Kasesy nocTapmeHe cy cHrypHOcHe KaMepe, TaKO za je nog craamus Haxsopow. CHeTeM KoHTpone (pHaHYKOr NPHCTyNa ENeKTPOHCKH eBHAIeHTHpA cpaki ysiasak y Dapanejes Kanes. 5.1.3 Hanajame # kanmatusannja Llenokyna onpema cvcTema 2a waqanawe cepriipukara mpikayyeHa je Ha cHcTeM 3a HenpekHaHH H3BOp Harlajarba eeKTPHYHIOM eneprijom H cTaGumNsauNjy HanoHa. CHCTeM 3a kcimMaTigaunjy oMoryhasa KoHTpory H OpxaBalbe TeMMepaType M BIGAHOCTH BaSIyXa y edurucaHom oncery. Hanajae u BeHTHaauija ce H3BpllaBajy ca pefyHsaHCoM BHCOKOr unBoa, 5.1.4 3aurruta oa nonaapa Y @aparejesom Kasesy Hema Borosoanux uncTasauja. TIpeaysere cy TeXHMYKe Mepe SAULTTHTE On EBEHTYATHNX NOMLIABA Of BONOBOAKHX HCTATALMja Y OKPYDKEHY. 16e 5.1.5 3aurrira ox nowapa aparejes Kases onpesuben je CHCTeMOM 34 paHO OTKPHBAHE HM ayToMaTeKY Jlojany no‘apa, eTeKTOpHMa AHIMA H CHCTEMOM 3a TaLIeHe MOxapa, KojHt Hije LITETAH 3a JBYsIe, PAYHEPCKY H KOMYHHKaUHOHY onpeMy. 5.1.6 Yyparse meanja Con payyapeKH MeaHjH, Koj CAPE NPOAYKUMOHH copreep, apxHBy storoRa H pesepaHe KonHje Moxaraka cHeTeMa 3a Haanaibe ceprudukara, cMeurrajy ce y satpootnopue GexGeaHe cecbose, saurruhene cHcTemMMa u3HKKe H AOrH4Ke KoHTpOse NpHeTyna. 5. Bauame ornaga Haxo npectanka notpeGe 2a Kopmuiheisem noaataxa, aoKyMeHTaunje 1 ypehaja, nesaHHx 3a ay cucTena 3a usasaise CeprHipHkaTa, NOAALH, JOKYMeHTAUMja H ypehajn ce yHNWTABay. TlanmpHa JoKyMeHraunja ce YHMUITaBa NponyuTatsem Kpo3 MawlHY 3a ceNeme namupa. Tloaaum ca pauyrapeKHx Menija ce HenospatHo GpHWly, a paYyHapcKH Meaujn ce usHHKH yanurrasajy. Kpuntorpadexn ypehajat ce dbuanukn yuyusrapajy. 5.1.8 Uypame pesepsunx Konuja Vinaemenrupan je cHctem 3a npasibetse pesepsHHx Konija (backup) nosataka M noroBa cucreMa 3a waqapaise cepricbuxara, Pesepatie Konuje ce wyBajy y GesGennun cedosnna sauTHheHHM cHcTeMHMa cbH3HYKe M JIOH4Ke KOHTPore mpuctyna. PesepsHa KonHja 3a npouesypy onopasKa on Katactpote (disaster recovery) ce ¥yBa Ha ysazbeHO} TOKALHjH, 5.2. Mpoueaypasna xowtpoaa 5.2.1 Honep.sune yaore Banocaenuma y OaceKy 3a cepTadpHkauHOHO Tes1O AOeEHE cy GesGeaHocHe dyHKunje Koje nonpasymesajy cneaehe nosepssune yaore: - TAQBHM aaMHHUcTpaTop Ge3GeaHocTH, ofroBopaH 3a aIMMHCTpHpaie uMniementaunjy GeaGeqHocHHx ¢byHKuHja H mpouenypa, Kao HM ynpaBsbare AKTUBHOCTUMA Ha jONATHOM yHanpefersy NOCHOBA HEAaBAIbAa M YIIpaBcbakbA HBOTHHM BeKoM cepruuKara, ‘cucTeM aAMMHHeTpATOpH, OATOBOPHH 3a HHCTANALjy, KOHDUTYpHCAHbe HM OAIpHKABAHLE GesGemHnx cHcTeMa 3a vanaparbe cepTucbikara, ‘cucrem oneparop, oftroBOpHH 3a pa GesGenHHX cHCTeMA 3a HaqaBarbe CepTHKpuKaTa H 3a HMTLTeMeHTaLMHjy cHeTeMA 38 bopMHpalbe PesepBHEX Koja H TIpoUeAype onopaBKa, CHCTeM eBHAeHTH4apH, OATOBOPHH 3a Npervieaibe H OAPISABArKE APXHBA H OF (bajs1oBa GesGeqHUX CHCTeMa 3a H3iaBarbe CepTHHKaTa. 5.2.2 Morpe6an 6poj sanocaienux 3a wsppurasame mpouerype 7e Vvnaemenrnpaia je crpora npoueaypania KoHTposa, Koja saxteba BHUecTpyky ayTopHBaujy 3a MSBpUIABarse NpolleAypa BHCOKOr HHBOA MOBepsHBOcTH. HeonxogHa je ayTeHTHKauKja najwaive Ba sanocieHa ca nloBepsMBHM YstoraMa ta OH GMO Moryh dyBNKH H sOrHUKH TNPHeTYM KPHTHSHHM CHCTEMHNA 3a HOZABAIbe cepTHduKaTa H KpHTTTOrpadeKHM ypebajusa. 5.2.3 Haewtupuxanuja u ayreuTuxanuja 3a cpaKy yzory anaementupatia konrposta iaH4xor 4 slorMukor npHetyna oMoryhaga: = fa ce H3HYKM npHctyn GesGeaHuM soHaMa ocTBapyje BOCTpyKOM ayTeHTHKALHjoM, 3acHORAHOM Ha MpHMeHH CMapT KaPTHUAs + ma ce 3a nOrHuKH npueTyn GesGeaHHM cHcTeMHMa saXTesa ayTopHsauIMja sarlocmeHHX, sactosatia Ha aonenk onrosapajyhux noBepsbMBHX yit0ra. 5.2.4 Tlosep:buse ys1ore koje 3axtepajy pasapajame jyxKHocTH Visspurasaise npoueaypa sHcoKor HHBOa NloBepybMBOCTH YaxTeBa NpucycTBO H yueUhe HajMarwe Aiba 3anocsena ca nosepmHeHM ynorama. [lpema ToMe, pasitBajaise ayKHOCTH y OKBHpy jemHe nopepsbue ystore uuije HoTpeGHo. 5.3 Kaaponeka 6exGeauocua xoutpoaa Tipe sachiupaita paanor oHoca apuin ce npopepa noxOGHOCTH H KoMMeTeHUHje KAHAHAATa 3a ogpeeHo patio Mecto. Kamar He Me GUTH KaKibABAH HTH KPHBHYHO Foren. 5.3.1 Kean uxaunja u nexyerso Kananaat Mopa 2a 3aq0B0s6H onpefeHe saxtene y norseny ctpy4ne Keanuukaunje u paqHor VCKycTBa Ha HCTHM WIM CAMHHHM nlocsOBHMa. HeonxoaHo je 1a KaHAaNaaT, 3a cRaKO paso Meco Ha Koje ce axiraxyje, uMa ogrosapajyhu cteneH cTpyyHe cnpeme 13 oGaactH uHopMalHOHO KOMYHHKANHOHHX TeXHOnOrHja HM HOTPeGHO paaHo UckycTBO y O6nacTH oapxanatta H GeGeanocti nibopwannonix cHcTesa. 5.3.2 BesGeanocua kourposia Tpe sactsaisa panuor oatoca y MYTI-y spuie ce GexGeatocue nponepe KanzMaaTa y ckiiaay Ca 3aKOHOM H Ha Ha4HH MpomMcaH MoAsaKOHCKHM akTHMA, 5.3.3 3axresu 3a oGyuenouhy Banocnenn ca nosepssuBHM yaorama TpeSa Aa noceryjy ekeneprcKo sHaibe H3 oGaacTH onpkazatsa u GesGenHocTH HitbopMallHOHHX cHeTeMA, 5.3.4 @pexwenunja nonosunx o6yKa 18e Tlorpe6xo je a sanocnenh ca nosepruBHM yoraMa HajMarte jeaKioM roaMube noxahajy OGyKe H CeMHHape ¥ WHEY OOHABarba sHarba O HOBHM GesOeAHOCHHM mpeTHbaMa H AkTYesIHHM GexGeaHocunw npoueaypama. 5.3.5 Poraunja nocaos: Osa onpea6a Huje npumerabiBa. 5.3.6 Caukunonucatse HeayTopHsoBaHux akTHBHOCTH. BanocaeHH ca NoBEpIbHBHM YToraMa AYAHH cy a MpeAySHMajy CAMO OHE AKTHBHOCTH 3a Koje cy ayTopHsoBaHH Ha ce NpHAPKaBajy NPONMcAHHX HitTepHAX Mpouesypa pana M sauNTHTE cHicTeMa vsnasarsa cepruukara. HeaytopHaoaaHe akTHBHOCTH HM Kplelbe mporicaHnx poutestypa pasta cmarpahe ce noapenom cayAGeHe AYKHOCTH. 5.3.7 3axtenm 3a come capaannke Tlosepmuse yore ce we goxenyjy cnomunm capazumunma, Y cayyajy norpe6e 3a anrakoBaibeM COMAUX capAHHKa, CHOHHM capaAHHUMMA Ce JOIBOrbABA MpHCTYN y3 MpaTiey 1 HAz30P ayTOPHIOBAHHX 3anOCTeHHX ca NOBEpIHBHM yrloraMa. 5.3.8 Joxymenraunja Koj ce Aocrassba sanocaenuma BanocreHMa ca NosepmHBHM ysoraMa, Mpe OveTKA gpUleHA AYKHOCTH, OCTAB:LA ce AOKYMeHTauHja, Koja cap HTepHe mPoueaype pana M 2aUITHTe cHCTeMa H3ZARAIA ceptuukara, Kako Gu Mora ala cBoje AYAHOCTH OGanrbajy y ckaRy AA MpoMMcaHHM npoueaypasa, 5.4 Tpouexype Genewetsa aorahaja Cen aorahaju Koja ce omHoce Ha OGaBmaise genaTHocTH npyxaiba yenyre wanaparea ceptacbuxara ce Genexe y stor dajaose (Audit Logging), a uenoKynHa joKymeHtauija pHNubeHa Y3 5aXxTeB 3a WaNaBAKKe CepTHdHKaTa ce uyBAa Y eBMeHUKjaMa y CKALY 3aKOHOM Koj ypebyje esnaenunje M oGpaay nogaraka y oGaacTH yHYTpaulHbMX nloczoBA, 5.4.1 Bpere aorabaja koju ce Genexe Benexke ce eve axrusHocTa npeayseTe y npoulecy npijema saxreaa W u3aaparba ceprnpnkara, Yksuy4yjyhW jaTyM H BPeMe MOTHOUIEHA 3aXTeBA H TTONATKE O 3arIOCmIeHOM, Koj je TPAMHO 3axres. 5.4.2 Opexwenunja nper:texa zor daj.zona Tlosaum us nor ébajaosa ce jemtiom HeessH0 npersesajy. 19S 5.4.3 Tepwog sysarsa sor dbajaona Haxon apxnpupaisa sor dajnonn ce uynajy HajMaise ecer roauna, 5.4.4 3aurrura sor éajzopa Jor chajaioan cy saurTHheHu of Heayropu3oBanior nperaeaawa, MoaNhuKaunje M Opucatba. 5.4.5 TIpoueaypa npan.serba pesepaux Konuja aor ajzona Pesepsue Konuje nor ¢bajnopa npape ce jenHo Mece4Ho, 5.4.6 Cucrem caxynpaisa noaataxa sor ajsiona Cuerem caxyn.na nogarke 4 n0r dajone yea y peanom apewenty. 5.4.7 OGaweurranarse sanocaenor Koja je H3a3Ba0 MHUUeHTAN Zorahaj Y cayuajy muunaentHor aorahaja, sanocnenn Koj je norahaj wsaspa0 ce He oSanewiTasa, O MHUHZeHTHOM Aorahajy oGaseurraga ce wet) Ogcexa 3a ceprHdHkalHOHH CHCTeEM. 5.4.8 Tpouena passupoctn enctema Aviaii3a pusHka H npouleHa parbHBocTH cHcTeMa BPI ce jeAHOM roqMUItbe. 5.5 Apxupupame nogataKa 5.5.1 Bpere nogataxa koja ce apxusupajy MYTI y ckaaay ca WiaHom 3akoHOM Koj ypebyje eBnzenunje H oGpany nonaraka y oGnacTH YHYTpaUNoHX noca1oBa 4yBA Y CBOjoj APXHBH LEOKYMHY AOKYMeHTANIKIY ¥ BesH ca MpyAaHBEM yenyre sjtanaisa ceptacbukara: ~ AOKyMeHTaUHjy KOpHCHHKa (saxTeBe O npyxkarby yenyre wsnapaiba ceprubuKara, yrowope 0 MIpyxarsy yenyre u3aBaiba CepTH*UKaTa, 3aXTeBe 3A NPOMeHOM cTaTyca ceprudukara, 3axTene 3a te6n0Kagom [IMH-a ausHe Kapre...); mpoueaype pata (noceGHa MHTepHa Mapua pasa H 3a/THTe cHCTeMa 3a HBaBaIDe cepruipuxara); mnicTaauione dajiione anankaiunja cHcTeMa 3a H3saBaibe cepTabuKara; stor ¢ajsoBe. 5.5.2 Tepoa uysara apxune Kownserna 2oxymenauuija 0 ¥3eTHM H OnosBAHKM ceprHHKaTHMa H sor ¢bajzoBH ce HyBajy 10 roauia no npectaiky Baxkersa cepTacbHkara y CKNAAY ca 2aKOHOM. 20g 5.5.3 3aurrnra apxmne Apxupa je samtuheva onrosapajyhnm cHrypHOCHHM MexaHHaMHMa ((bHSHYKO-TeXHHIKOM 3aWTHTOM HM HAA30POM, OTpAHHYeHHM TOrHYKHM TIpHCTyTIOM, wWMd>paMa HM KsEy¥EBHMA). TIpuetyn apxnsawa o380%eH je camo opnamihesnm mata, 5.5.4 Tpoueaype npan.verba pesepanx Konmja apxupe Pesepante Konuje apxitse ce mpane jenHom mecesHo. 5.5.5 Bpemeniexa o3naka apxHBpannx noxataKa ApXHBupann nonaltH Hoce BpeMeHCKY OsHaKy ca cepBepa KOjM je CHHXpOHHSOBAH ca HSBOPOM ‘TauHor Bpemena, 5.5.6 CuereM apxusupatba (aiTepHn Han excrepHH) Kopuctu ce KOMGHHOBaHH CHETeM apXHBHparsa. 3anocseHH ca NOBEpBHBHM. ysOraMa cy OgFonOpHN 3a aPXHBMpaise enekTPOHCKHX nojATaKa. 5.5.7 Tponeaype 3a npucryn nosaunma w3 apxuse APxHBHpaHit eneKTpOHCKH MosAMLH “YBajy Ce Y CHFYpHOCHHM cedoBHMA, 32 YHje OTBAPAIBE cy norpeSva Ba Kry¥a, Ceipos cy mocrasmeHn y sauTHhenNM mpoctopjama ca PeCTPHKTHBHHM H ayTOpHSOBaHHM MpHCTYTOM. 5.6 3amena Kmy4ena cepruhukanHonor Testa Samewa Ksnyena cepritbuKanHoHOr Tea mospasyMesa reHepHcame HOBHX KmyNeBa CepTHHKaNHOHOr Tella HM BpUIM ce y chy¥ajy HCTHUAHA MepHOA BAKHOCTH KiyYa, KOMMpomuTaunje Kuy'¥a wa mpometa oarosapajyhux onpen6u, Koje mpoweTH¥y H3 eBeHTYAINHX —NpOMeHa Yy 3aKOHCKO} peryslaTHBH WIM TeXHHNKHM KapakrepHcTHKaMa TDHMeHCHHX KPHTTOrpAhCKHX aAtropHTaMa H AYAHHA KeyYeEA. BaMeHa KEYHeBA BPLIM ce y cknazy ca NpOLIEAypOM epMHHCAHOM y NOCeGHHM HETePHHM MpABHAMMA pana H sauITHTe cHcTeMa 3a w3aaBaibe cepTudpukara, 5.7 Onoponax cucrema nocae Katactpoe 5.7.1 Hpoueaype y caywajy umunzenara 2g Y cayajy nojane wnunsenra, ToKOM pasla cHcTeMa 2a HajaBaibe ceprHpuKara, santocnenm ca onepsBueHm yaloraMa nocynajy y ckany ca cAgjHM MATepHHM MpoueAYpaMa pasta. 5.7.2 Hponeaype y eaysiajy ynnurrema rexumaxux cpeacrana 'Y cayuajy mrere Hacrane Ha TexHHUKHM cpeacTBHMa (xapaBepy H coppreepy) HK MonauHMa, cepsicn ananKanuje cHcTema 3a Hsnapaise cepradbiKara One nloHOBO ycnocraBmeHM y Hajxpahem Moryhem poky. 5.7.3 TIpoueaype y cay4ajy Komnpomurauuje npusaTHor K:by4a ceprHukannonor Tena MYTI y caysajy Komnpownrannje HI cyMHe Y KOMMpoMMTaLHjy pHBaTHOr KBy'a ceprduxayuorior Tea: mpecraje ca wazanarsem cepruibuxara; unopwmue cee KOpHcHKKe mM noysaajyhe crpaxe o KOMMpomurauijH puparuor Key‘; Janno oGjasnyje uuopmauuje 0 ToMe aa wanarH cepruukaTi, KAO Ht uniopwaunje 0 cratycy onoananocTa ceprichiKara, Buute HCY Bache; BpwLH ONOsHA CRUX H3/ATHX cepTUcbukaTA OMAX, a HajKacHHje y PoKy on 24 vaca y cxnaay ca 3aKOHOM. 5.7.4 Hacranax pata naxon Katactpore Hakon karactpope # orkrarbaiba menu nocneaMua MYT he y wajxpahem poxy aa aoweze cvleTeM y MpoAYKUHOHO CTaHke H HAaCTaDH ca NPYAaHweM yenyre HananaIba ceprUdHKaTa. 5.8 Tpecranax mpy:xata yeayre naqaparba ceprupuKaTa Y caysajy npecranka npyxaiba yestyre on noepetsa MYTI he wactojaru 2a KopHcHMuMa, oGesGean Hactasak Mipyxkatba yeuyre KON Apyror Mpyxkaoua Yeayre Oj HoBepetba, KOME he AOCTABHTH CBY JOKYMeHTALMjy H HeOMXOAHa TEXHUYKa cpestcTBA, AKO Hije Moryhe o6e36eauTH HacTapak npy:katba yeayre KOR Apyror mpy:kaoua yenyre, MYTI he TpH Meceua npe npectanKa mpyxxatba yenyre OGasecTHTH KOpHCHHKe H noyaitajyhe cTpaxe O HaMepH npecranka OOaBsbaiLa genaTHOCTH, HaKOH 4era he H3BPUIMTH PacKH yrOBOpA H OTIO3HB CBUX H3LATHX ceprHdHKara, 6. Texumuke Ges6eqHocne KoHTpone 6.1 Tenepucate # nicraaanuja napa KpunTorpadcKux Kby4epa 6.1.1 Penepcame napa kpunrorpadexux kay'ena cepruipuxannonor Tera 22g TIpupatin ksyyenn cepradukaunonor Tena reepuuny ce Ha GeaGeslaH HaYHH, KopHutherben GexGeanux u nloysqaHHX cHCTeMa Hy ckaAy ca npenopyyeHuM craxzapauMa, TIpHMewyly ce HeOMXOAHe MpeBeHTHBHE Mepe Y UMby cnpevaparba KOMMPOMHTaLHje HIM HeayTOpH30BaHOr Kopnuheisa —npusarunx Kay4ena ceprudbuxaumovor Tena, TIpuaatH —Kmy¥eRH ceprudukaunovor Tea rewepHuly ce y KpunTorpapeKum ypehajuma, xapsepcKo- xpuntorpackum Moaysuma (Hardware Security Module - HSM) y npoueaypu Llepemonnje konyuena", Koja Saxena BHULeCTPYKY ayTopHBaunjy sanocneHNX ca oBepAMBHM yzOraMa. 6.1.2 Tenepucawe napa Kpunrorpadexux Kayyesa 4 nperaja npupatior Key4a Kopitcanky Tlap kpunrorpadcknx kuby'4eba KOpHCHHKa reHepuilie ce Ha cMapT KapTHUH (s1M4HO} KapTH ca ‘nnom), Koja je cpencrBo 3a opMuparse KBaIMpuKOBAHOr eneKrpoHicKor nornHca (Secure Signature CreationDevice - SSCD). TIpubariin ksy4 H ceprugukar KopHcHHKa reHepHuly ce y pHcycTey Kopuciika H KOpHCHMKY ce ypy"yiy OAMAX HAKOH reslepHarba, 6.1.3 Joctasa jasnor xpunrorpadexor kxysa ceprudukanuonor Tea KopHCHAWUMA Jasnn kpuntorpadexu Key4 cepridpHkaunoxor Testa je eo cepracbuxara cepracbkaunonor ‘Tena MYTI-a, Koja je aoctynan KopHCHMUMMa Ha ReG cajty cepruukautMoHor Tea MYT-a. 6.1.4 JJocrapa jasnor xpunrorpadexor Kny4a ceprupukauuonior Testa noy3ajyhum crpanama Jann KpuntorpadckH Key’ ceprMduKAUOHOr Tena JOcTynaH je noyanajyhum crpanama Ha CTH Ha4nH Kao H KOpHCHMUHMA, uITO je onHcaHO y TaNKH 6.1.3, 6.1.5 Jlyaune kpunrrorpagcKnx Kyuena Kpuntorpagekn kayyean spxostor ceptacpikaunoHor Tea (RootCA) cy styAnne 4096 Gua, KpunrorpapckH Kssy¥eaH mospeheHor ceptucbKaUHOOr Teno, HaqaBAOLA KOpHICHHMIKHX ceprucukara cy ayxuie 3072 Gura, a KpunTorpadcxH Ky4eRH KOpHCHUKa cy ayAHHe 2048 Gura, 6.1.6 Penepcame xpuntorpadexux napamerapa w mposepa KBautera Kpuntorpadexn napamerpu, tj. achMerpH¥HH naposH Ksey¥esa ce reHlepHuly noMohy XapABEPCKHX reHlepaTopa caywajHHx Gpojesa, KojH cy peamioRAHH Ha KpHMTorpadcKo- xapapepcKHM ypehajuma: HSM (Hardver Security Module) ypehaju — 3a xpuntorpadexe kuy'ebe cepraukaunonor tesa (Ceapr kapriua (1H4Ha KapTa) — 3a KpHNTorpadpcke KbyYeBe KOPHCHUKA. Keanuter Hanna renepiicatsa nloeHyTHX KpHmTOrpadpCkHX NapaMeTapa HeKBY4HBO 3aBHICH 02. knautera Xapagepekor reHepatopa cayyajanx Gpojesa ua HSM ypehajnma m cmapt kaprauama, 2Bg C oGsupow aa cy w HSM ypehaj a cwapr xapriue ceprndpuxonane no cranaapay FIPS 140-2 Level 3, KBanIHTeT TeHepHeaHMX KpHNTOrpadeKHX napaMerapa je sarapartronan. 6.1.7 Hamena kayua Hamena kroyva sterpmnncana je y X.509 8.3 nomy Key Usage ceptabuxara. Tipuearan kpuntorpaexn Ky cepricbukauMoHor Tesla ce KOpHETH 2a noTnHcuBaHbe ceptuduxara xoje usaaje 3a nloTmHcHBawKe awcTe onosaaHHx ceprudukaTa. JapHH KpuntorpapckH Kiby'4 cepTMpHKaLMOHOr Tea ce KOpHCTH 3a BepmdpuKauHjy notnuca. Cepruduxar ceprubukaunonior Tea y nomy Key Usage uma ynicae speswocth Certificate Signing, Off-line CRL Signing, CRL Signing. Tpasarin KpHntorpackH Ksuy4 KOPHCHHKa Ce KOpHCTH 3a KpeHparse KBanMpHKoBaHor eaekTporickor noTnica. JaBHH KpunTorpad/cKH Ksby4 KOPHCHHKA Ce KOPHCTH 3a BepHdHKOBAlDe KBaMpuKOBAHOr eneKTPOHCKOr HoTHNca M OGesGehuBaise Henopeunsocru. Cepruduxar kopucuxa y nosy Key Usage una ynucane speauoctn Digital Signature, Non-Repudiation. 6.2 3amrura npwpatHor Kpuntorpaekor = KBy4a =H KOHTposa Kpuntorpadcxor ypehaja 6.2.1 3auTura npusatuor KpuntorpadeKor KBy4a TIpuaarau Kpuntorpadexn Kmyenh cepTipHkauoHor Tena reHepHily ce H YyBajy y xKpunrorpadcxum HSM ypehajuma, Koju 3aq0posbapajy onropapajyhe 3axTepe y cKnany ca MebynapoaHuM crasitapaom FIPS 140-2 L3. Menytseise osor cranaapna rapanryje a je Guo Koji noxyuiaj Hapywiasaisa uHTerpHTeTa ypehaja Hax Kpuntorpadexe Memopije HeToBpeMeHO neteKToBaH. Tpueari kpuntorpadexi KnysieBH KOpHCHHKa reHepHWly ce Ha cMapT KapTiaMa (nHYHHM kapTawa) KOPHCHHKA H 3a IbHXOBO “Barbe OATOBOpAH je KOPHCHHK. 6.2.2 Kowrposa npueryna npupatHoM Kby4y # Kpuntorpadexom ypebaiy HSM ypehaju cmewrenn cy y @apasejenom Kapesy, KoMe ¢iaHKH MpHcTyn uMajy camo aariocsieHH ca nonepssHBHM ys.oraMa. IIpHeTyN MpHBATHOM K:ey4y saxTeBA pHUecTpYKy ayTopHsauMjy, MPH HeMy ce MO: m 3aNlOCAeHHX ca NoBepALHBHM ysloraMa Mopa ayrenTuikopaTi a 6x npHeryn KBy4y GHo Moryh. 6.2.3 BesGeauo 4yparse # pykopatse npuBaTHuM KpunTorpadckuM K:by4esuMa TIpuzaran kpuntorpadcxn Kibyenn KojM ce 4yBajy y HSM ypehajuma Huxay He Hanyurrajy ypebaj y orBopeviom o6nuxy. TMpoueaype 4ysaisa H PyKonatba MpHBaTHHM KpumrorpabeKHM 24e KoyweBHMa cy seo TloceSHitx miTepHHX mpasWia pana W 3auITHTe cHcTeMa HanaRaiba ceprucpuxara. 6.2.4 Kpeupatse pesepsne konuje mpusaruor Kiby4a Konuja npusatior xeysa ceptacpkannoHor Tena KpeHpa ce y ckmIaRy ca MpouezypoM 3 kpenpatse Konuje npuBaTHor KsyYa ceprudpuKaKHoHOr Tea onucaHoM y oKBMpy TToceOHUX MHTepHHX MpaBia pana H 3aUITHTe CHCTeMa H3jaBarba cepTuduKata. Kpenparse peseppHe KONHje MpHBaTHor Kby4a 3aXTeBa BHUeCTpyky ayTopH3aunjy. Pesepsra Koja npHBaTHor Kobysa 4yBa ce y IMpoBaHIOM OGaNKY. aja KojH CapAH pesepaHy KonHjy NpHBATHOT K:By'Ia uimposan je AES anroputmom. Jeumm>povarse aja moryhe je camo y HSM ypehaiy, npx Memy ce TaKohe 2axTeRa BMLeCTpYKa ayTOpH3ALHja 6.2.5 Apxusuparbe npuBaTHor kaby4a Hakon kpenpatba pesepate Konuje npuBathH KpumtorpadcKH Kby4 cepTHukauMoHor Tena ce ApXHBHpa M eMeulTa y BaTpOOTHOPHH GesGennH ced), saUrTHhen cHCTEMHMA GusHYKE H TOrMHKE KouTposle npuctyna, 6.2.6 TipeGaunpare npunatuor kaby'4a y Apyrn KpunorpadeKs moay.t TIpusatw Ksby4 HuKkaqa He Hanyurra HSM ypehaj y oTpopeniom o6anKy. Excnopt Kiya 13 HSM ypehaja sa norpeGe Kpenpaisa pesepsiie Konuje, noapasymesa Kpepaibe wMibposanor ‘aja, Koj ce More aeumposarH cao y HSM ypehajy. ¥ cayyajy Keapa M samene kpuntorpadpexor moayaa (HSM ypehaja), xpuntorpacKn Keyy he GHTH HMMOpToBaH y HOBH HSM ypehaj, y3 suuectpyky ayTopiaauujy sanocneHHx ca noBepssiBHM yslorAMa, 6.2.7 Uypane npunarnor xpuntorpadexor kx.y"a y KpHnTorpaexoM Moay.ty TIpusarhw xKpuntorpapexn Key4eBH ceptuduKauHonor Tena 4yBajy ce y MeMopHjn xpunrorpaipekor ypehaja H Mory Ja ce KopiicTe caMo ako cy Ha npaaiinaH Hail akTHBHpAHH, 6.2.8 AxTHBaunja npupatuor Kaysa TIpuparun xpuntorpadckn Kxy4 ce akTHBHpA yHOUIeIeM aKTHEALHOKOr nonaTKa AKTHBaUHOHH NogaTaK 3a NpHBATHH KpHNTOrpadcKH KBYY cepTutuKAUMOHOr esa cacTojH ce 3 pMUe AenOBA (AeLEHHX TajHH), MPH YeMy je 3a yHoc cBaKor mena onroBopaH jenaH 3anocseHH ca NlOBepHBHM yzoraMa, 6.2.9 Jleaxrupannja npapatHor Kya Hako# rawetba anauxaunje npHsarHn KiBy4 ce AeaKTHBHpa, 6.2.10 Meroa yuuurretba npusatuor Kya 25,g Tpuearnn xsey'ten cepriuxaunovor tesa ce He OGHaBajy # Guhe yHMuITeHH Ha Kpajy cBor SkUBOTHOT WHKIYCA Y UMALY Tapanunje Aa ce Hehe HHKAsa MOHOBO AKTHBMPATH H KOPHCTHTH. Tipoueaypa yanurreia npiinaTiix Kiby'4eBa NompasyMena Opicaibe KmyYeAa Ha HSM ypebaja, YHHUITABAISe Pe3epBHHX KONHja KsbYYEBA H {ENOBA AKTHBALHOMHX NOAaTAKA (JeEHHX TajHHt), lo ce JOKyMeHTyje 2amHCHAKOM. 6.2.11 Kaacnduxonamse xpunrorpapexux Mozy Osa onpen6a nnje npHmersensa, 6.3 Ocraan acnekTH ynpanmata napom Kby4epa 6.3.1 Apxmupaibe januor kpuntorpapexor ya Jasin Kpuntorpaexn Ksmy4eRM ce Hamas y CepTHHKATHMA H NHHE FLHXOB cacTABHH 1¢0. ApxHBHpaiem cepridpHkata apxnpnpajy ce H jasiin KpunTorpadickH KBYYERH. 6.3.2 Pox naxnocta ceprupuxara u kpunTorpagexux KByseBa Pox naxxnocta cepriibukata spxosHior ceptucbukauHonor Teta RootCA je 20 roauna. Pox BaxHOCTH ceptuukata noapeheHor cepticbuKauHoHor Tera, H3AaBaoUa ceprHHKata kpajibux KopHcnnka je 10 roauna. Pok BaxHOCTH KOpHCHHYKIX cepruduKara je 5 roaMHa HAM Kpahe, ako je 20 HeTeKA poKa BUAHOCTH JIMHE KapTe ocranO Male OA S roma, Tana ce ceprHukaT Hozaje Ha POK BaXKHOCTH sINSHE KapTe. 64 Axrupannonn nozaun Axtipaunonn nogaum cy nosunke wim TIMH Koqo8H norpeSHH 3a akTuBaujy mpHsarHor xpunrtorpaipekor Ksby4a. 6.4.1 Tenepucamse m ynorpe6a axTupaunononx nonaraKa AKTHBAUMOHM NOAALM MpHBATHOT Kya CepTHDUKANMOHOT Tea, AOSHHKe, reHepHUY ce ToKoM Hspoheiba ,Llepemonnje KayYexa” H KOpHCTe HX HCksby'4HBO SanocsteHH ca oBep:sHBHM YsoraMa TOKOM HSBpIaBaHbA HHTEpHHX NpOUEAYPA pana H sauITHTE cHeTeMA 3a woapaibe ceptuhukara AkTHpaumoHH nozarak KopHcHnka, TIMH Koa, revepmue ce y npouecy nepeonannsaunje HaeHTU>UKALMOHOT OKyMeHTa (AMHE KapTe) H 3ajeAHO ca IBHM Ce ypy4yje KOpHCHAKY y saurrufieroj Konepta. Kopucanukn TIMH wa 4eTapit HyMepH4Ka KapaxTepa. 6.4.2 3amTura akTHBaNHOHNX nogaTaKa 26BanocaeHH ca MOBep.HBHM YOraMA CY AYAHM Ja 4YBajy JOSHHKe 3a akTHBALNjy npHBaTHOr Kopywa ceprudukauoor Tena Y ckialY ca MPONHcaHHM HHTepHHM MpollesypaMa pala H salTire cHcrema 3a uagaBaise ceprupuKara, Kopucnmx je ayxan 2a 4ysa coj TMH 3a aktupauyjy npusarvor Kmy4a on HeoBauhenor npuctynia u ynorpese. 64,3 Ocraam acnexrn y neu akTHnanuonNx noxaTaKa Osa ompen6a nuje npusenuina, 6.5 BesGeanocne konrposte pauynapa 6.5.1 Ceumusnu saxrepn 3a Gesbeqnocr payynapa Cepsepu cictema 3a u3qapaise ceprudpukata 3auTHhenn cy cHcTeMMMa busHUKe HW TOrHYKe saurrire, Cepsepi ce Haase y Papaejesom Kapesy, KoMe GHSHYKH Mory NpHeTyMHTH camo sarocaIeHH ca NOBEPLHBHM ysIOraMa, JIOTHYKH MpHETYN cepBepHMa OcTBaPyje Ce BHLECTPYKOM aytopusaujom. 6.5.2 Kaacuduxaunja GexGeanocrn pasynapa Osa onpes6a nuje npuenusa, 6.6 2KuBoTHH HHKaye TexHH4KO-Ges6eaHOCHHX KOHTpora 6.6.1 Konrpoaia passoja enerema 3a HaaaBatbe ceprabuKara Vinuiementupane cy cnezehe Konrpone pasnoja cHcTema: Corpraepeke Kommouenre cy ausajHupane # pasBijeHe y KoHTpOAHcaHOM oKPYAKeIbY, Ha CcHOBY JOKYMeHTOBAHE PasBojHe TeXHOOrHje, ca AedUHMCAHMM HW sOKyMeHTOBAHHM. pasBojHum npoecHma, - Xapapepeke coprsepcke KOMMOHEHTe cHcTeMa cy HerlopyycHe Ha Ges6enaH Ha4HH, Koj rapaityje a nije Ox00 Heopmamhevor npuctyna HijenHo) on KOMMOHeHTH cucTema, Y cucremy 3a wsaanatse ceprupukara Hastase ce camo co*praepeke H xapasepeKe KommoHeHTe HeonxoaHe 3a pam cHcTeMa; He nocToje HHCTanupane apyre anaMKauje, Ypehajn, MpexkHe KoHeKLje HIM CospTBepCKe KOMMONEHTE Koje HHCY HEOMtXoAHE 3a past ‘cucresa, Boa ce pasyxa 7a ce sloHamepaH KO” He YUHTa y eHeTeM, Cee KOMMoHeHTe cHCTeMa HHCTAMMpaHe Cy O% CTpaHe 3aMocseHHX ca NOBEpLHBUM yaoraMa Ha HauHH mmponcall MitTepHHM mpouemypama pala M saurTHTe cHeTeMa 3a uajaparbe ceprupukata. 6.6.2 Ynpapzame GexGeanocnum KoHTpozama 27g ‘Cermtoneatono TE10. Koniurypaunja cuctema 3a u3nanaise ceptucukara, Kao H cae Moampukauuje H Hazorpasive cuicreMma ce noxyMenryjy # KoWTpommuty. 6.6.3 Kupornn wuxaye GexGeanoenux KoHTpoaa Munemenrupane GexGeanocne Koutpone ce rio norpeGu yranpehyiy. 6.7 Koxrposte GesGeanocrn pauynapene mpexe Himnaementpan je Mexannsam Mpexkne GeaGeaHocTH BlCOKor HilBoa, 3aCHOBaHt Ha npHMeHH firewall ypehaja u cucrema 2a npesenuiy 1 3auiTHTy of Hanaaa. 6.8 Bpementexa osnaKa Ceprucpuxaru u auere onossanux cepriukara uMajy BpeMeneky oaaky JaTyMa H Bpewena MailaBaiba, AaTYMa M BpeMeHA NipecTaHKa BAKeiba CepTHHKATa M jlaTYMa H BpeMeHa HSjIaBAKbA cnesiehe nicTe onossaHHx cepruduKara. 7. Tipopuau ceprupuxata, CRL aucte n OCSP 1 Mpodpua ceprupuxara Canpxaj ceprupuxara cmeurren je y tpu gepunucana Gnoxa: thsCertificate, signature algorithm w signatureValue. Brox tbsCertficate ce cactojn on noma Koja Ha jeaniicraen Haun naentuduxyjy ceprupukan, kopucnuka cepruipukara m ceprngpikanHoHo Tea0 Koje je Hana0 cepruipuKar. To cy cneaeha nossa: version — pepanja X.509 cepracbuxara serial number — cepujckn 6poj ceptuduxara signature — waewtadpukarop aropitTva Kopuuihenior 3a notmucuBarse cepracpukara issuer — Hasue ceprupHxauMoHOr Tema HaaBAOUA H floTMCHHKa cepradukara validity — nepwog saxerba ceprudukara subject ~ ume Kopucnnka subjectPublicKeyInfo ~ nonaus 0 japon Kaxy'ty KopHeHHKa extensions ~ excTeuauje ceptudpukara Baox signature algorithm canpxu wleHTubaKatTop aaropHtma KojH cepruduKauHoHo Teo KOpHcTH 3a nloTnucHBaise cepruuxara. OBO noe Mopa fa caApAH HCTH MAeHTUd>HKATOP aropHtNa kao uiTo je HaBeseHo y nosey signature Gnoxa tbsCertificate Baox signatureValue caapxx exekrpouckH nornMe ceprupikaunonior Tena Koje je waaa10 cepraibuxar. Ceprudukaunono Teno c#ojaM noTnucoM rapaHTyje 3a BANMAHOCT NoxaTaKA 12 Gnoxa tbsCertificate. Authentic tion and Encryption certificate Qualified electronic certificate 28e rsnationo TE Subject Subject ‘CN = Jona Jonanionnh 123456789 ‘CN= Josan Tonanowuh 123456789 G= Jona G= Jona SN = Josawosih SN = Josanoouh SERIALNUMBER=PNORS- 1234567890123 SERIALNUMBER=PNORS- 1234567890123 ‘SERIALNUMBER = CA:RS-123456789 ‘SERIALNUMBER = CA:RS-123456789 L = Beograd L= Beograd S= Srbija S= Srbija C=RS CoRS CN = Josau Jopanoouh 123456789 + IK po} amsne xapte) ‘SERIALNUMBERPNORS- 1234567890123, ¢—— JMBI” (jeancrsenn warwuna Gpoj rpahana) SERIALNUMBER = CA:RS-123456789 JK (jeanuerseun waentucbaxatop xopuciaxa) 7.1.1 Bepauja MYTH usnaje X.509 ceprucpukare nepanje 3. Cepricpuxarn X.509 23 oct ocHORHHX nossa Koja uMajy X.509 ceprupuxatu sepanje I 2 uwajy H onaTHe excrenaHje, 7.1.2 Excremuje cepruuxara Ceprudxara xoje MYTI naaaje umajy enestehe exerenanje: Authority Key Identifier - naewrudaxatop jasvor kiya Koja je nap npuBaTHoM Kby4y Kojn je xKopmushe# 3a noTnMcHBarbe ceprudukara Subject Key Idemifier - uxentudukatop jastor Kya KopHcHiKa Key Usage ~ nedpunmmie nameny Kseywa caapxanor y cepradukaty Certificate Policies ~canpku wieHTuuKaTop nosurTHKe HaaBaiba cepTucpukara (Object Identifier - OID) u yaudopwin pecypen xoKatop (Uniform Resource Locator -URL) 3a NpeysuMatbe NomMTHKa WonaBaKba cepTAd>HKATA Subject Alternative Name - asrrepwatusio une ceprudukara. ¥ 080M nosy Moxke a ce HaBene aapeca eek Tpolicke mourre KopHicHika ceprudpukata Basic Constraints ~ oauaka xopuenisikor ceprudpukara CRL Distribution Points- URL 3a npeysumaise aucte onosaanux ceptucakara, Qualified Certificate Statements ~ osnavava Ja je cepruukar KeanubukoBaHt Authority Information Access — URL 2a npeysumatse ceptadpikara ceprupuxaumowior Tera 7.1.3 Haentapuxannona osnaxa aaropatwa 3a notnucusarse cepradpukara npuwersen je arroputam SHA-S12.ca RSA enxpurunjos ja je uaenTupuKauHona o3aKa shaS12RSA 7.1.4 @opme umena Mimena kopucHika 1 H3napaoua ceprudukata cy jeanHcrBeria umetta (Distinguished Name - DN). 29g 7.1.5 Orpanusierba y umenuMa Y umennma nije 203Bo2.eH0 Kopnuuherbe crremHjannHx Kapaktepa, AtpHGyr ,commonName” nona ,subject™ e cme sa ce saspiiasa ca 13 Han BME ysacronHHX HYMEpHYKHX KapakTepa, HHTH J1a Ce 3aBpullaBa LIpTHHIOM H3a Koje cue s1Ba c:TOBHA Kapakrepa H HHS HYMepH4kHX KapakTepa, 7.1.6 Macutpuxarop noantuxe saapatba ceprudaxara (OID) Haeurugukatop nommrike wanapaiba cepTidprkara ynucyje ce y nose Certificate Policies cepraduxara. ‘opmar ctpykrype OID-a je caenehu: 1.3.6.1.4.1.33589.2.6.8 Bpoj 1.3.6.1.4.1 npeacranxa onturrH npeipuke 3a private-enterprize 6poj ca cajta: http://www. jana. ora/assignments/smi-number 33589 je Private Enterprize Number (PEN) aonesen Munuctapersy yytpauitsnx nocaiopa PenyGauke CpOnje. a THM aoKyMeHTa 1+ anna xapra 6.0 - pepanja aoxymenra (apumep 6.8 = 1.0) 7.1.7 Ynorpe6a excrensuje Policy Constraints Osa oxpeaGa nnje npumenensa. 7.1.8 Keaauduxatopy noamruKe Y oxeupy excrensuje Certificate Policies xopuctu ce Policy Qualifier=User Notice y Kome je HapesteHo 1a je eNeKTPOHCKH CepTHDbHKaT KBAIMGHKOBAH. 7.1.9 Tiponecnparse xpuriunux excTensija Excrensuje oaaviene Kao kpitTisine ce oGaBesHo npouecipaiy. 7.2 TMpoua aucre onospanux ceprupuxara (CRL ancre) JIncta onosnannx cepracpukara capaci crucak cepijekHx Gpojesa onoseannx cepracbuxara, aaTyM W Bpeme onosiea. Tlonaun KojH uaeHTupuKyjy AMeTY onosBaHHX ceprHpiKaTa cy ‘oprannaonanu y 1pH GroKa: rhsCeriList, signatureAlgorithm u signature Value. 30e Baok thsCertList caapisn eneneha nossa: - Version - sepsija X.509 nucte onosBanux cepruduKara, - Issuer - une ceprutpuxauoHor Tena koje je Nomnucao sMcTy onosBaHHX cepraipukara Effective Date - 1aryM 4 ppeMe vajapaisa nucre onosanux ceprudpuKara, Next Update - nary 4 speme cieueher wsaabaiba sMcTe onosBanHx ceptacpuKara, - \ Baok signaturedlgorithn canpku weHtudukarop anroputwa Koj ceptubukaynolio Tes10 KopiieTit 3a nomnucusarse cre onosBAHHX ceprHcpikara, Bao signature Value capa estexrporick notnuc ceprudpukauHoHor Tes Koje je noTmHcaIO AMCTY onosBaHHX cepTHpHKara. 7.2.1 Bepauja Jucra onossasnx cepruipukara je X.509 sepsuje 2. 7.2.2 Exerensuje CRL auere CRL ancre uvajy cnenche excrensuje: Authority Key Identifier - ugewrupuxatop jasior key'a Koji je nap npupatiom KEy4y Koja je Kopmuihen 3a nornucneaiwe CRL acre CRL Number — pent Gpoj CRL snere Reason code - pasaor onoaisa ceprudpuxara Invalidity Date - natys onosuea cepradpukara 7.3 Mpodusa OCSP (Online Certificate Status Protocol) Munuctaperso yytpauib4x noctosa omoryhasa on-line nposepy cratyca keaaupukoBanor eek Tpouckor ceptudukara nocpesietsom OCSP nporoKona. OCSP nporpun je y cKtany ca xoKyMentom RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP. 7.3.1 Bepsuja Bepsuja OCSP je nocras.sena na v1.0. 7.3.2 OCSP excreusuje OCSP excrensnja Koja mome 1a ce kopucru je Nance (npoussoman 6poj). 8. Pesusuja ycknahenoctu u apyre npouene MYTI apum witepny pesianjy yeknahenocTH npyxatba yesyre uanaBaia cepruduKara ca 31e BaxkehHM 3aKOHCKHM MponHcHMa KojH peryaMWy OGmACT KBaNHHKOBAHUX yeayra Om MOBepera W oapeaGana onor aoxyMenTa, ExcTepiy Pesiijy BpuIM Tes10 3a oueHSHMBAISE YCArAAUIeHOCTH y cklaly ca 3akonom. HakoH H3BpuleHe peBH3Hje ca4HibaBa ce w3BelITaj O OLCHH yearnamenocti, 8.1 DpexsentHocr H oxomHoctH peBusuje Pestosia wirepHa peavauja apn ce Hajmarbe jentiom y 12 meceu. Pegontia exctepia peswanja apuin ce Hajsaise jentiom y 24 Meceua, Baxpenna pesusija spuim ce y cayuajy Hevanoponanajyhux pesyarara npetxoane pepusije WIM AKO HACTYNM HHUMJeHT KOjH y 3HAuAjHO) MepH yrpoxkaBa WM HapyulaBa HAcOpMauMoHY GexGennocr. 8.2. Haenturer/kpaauduxaunje pesusopa 3a cnpoaohere nitepHe peausije H oApehusaise Mua Koja Bpile MHTTepHy peBHaHjy onroBopaHL Je med Oncexa 3a ceprubuxannonn cHctem, Jina koja apie HitTepHY pesusijy Mopajy umaTH wcKycrsa y noapyyjy texwosoruje mabpactpyktype jasHHx Knyyesa HM mpyKalba kBaltpHKOBAHHX YCuyTA On oBeperba, Ekcrepiy pesuaijy apuin Teo 3a oueHuBaibe YcarnameHocTH, Koje je y cKaaAY ca 3aKOHOM KojMM ce ypehyje axpeanTauitja, akpeaHTOBaHO 3a OlleHbHMBaHe YearaMIeHOCTH npyxkAOUa KBATM(PHKOBAHHX Yenyra O MOBEPelAa H KBATHPHKOBAHHX yoayra on MOBeperA Koje OHM mpy2Kajy. 8.3. Oanoc pesusopa npema npeamery pesusuje JImua koje apuie uutepy peavanjy Mory OurH sanocaeHH y OnceKy 2a ceprudbuxaunonn cucrem. IIpeaMer niepue pesnanje cy pernerpausona Tena, ExcTepiy pesisijy spit HesaBvcio Teno 3a oueHuBatbe yoarnauteHocTH. 8.4 Tpeamer pesusuje Pepusisjom ce nposepana yeknahenoct npyxkarba yenyre waqanaisa cepriipukara ca naxkehiMt 3AKOHCKHM NpoNHcHMa KO}M perynMuy OGnACT KBANMpUKOBAKHX Yeayra ON MOBeperba H npenopyenns craraapanma, 85 Tpeay3ere akrupnocru kao pesyartar mponabenux HegoctaraKa Y caysajy ga ce MHTepHOM HTH eKCTepHOM peBHaHjoM yTBpZe HenpaBMAHOCTH y Mpy>karby yeayre watanaiba ceptidukara, mpeaysnmajy ce Mepe aa ce y uTo xpahem poxy NempasiiaocTH OTKAIOHe, 328.6 Odjanmupame pesyatara pesusnje HaKkon waepurene pesisuje caumbana ce H3BeurTaj 0 oueHH yearaauleHoctH, Mazeurtaj 0 oueHH YoaralcHOCTH caYHHbcH HAKOH HHTepHe pesHsHje je MHITepHH AKT H He OOjaBsbyje ce. 9. [pyr nocaosnn 1 npapun acnekTa 9.1 Haxnage MYTI GecnaarHo npyxa yonyry HanaBara KBaNHEhuKOBAHHX eNeKTPOHCKHX cepTHcpHKaTa Ha AWYHHM Kaprawa ca HHITIOM., 9.1.1 Haxknaga 3a npy:katbe yeayre w3abatba H OGHaB.barba cepruduKata Vsnasaiva cepriibukara wa aMsHHM Kaprama ca 4utiom ce He Hanutahyje. Koper Kone je HCTeKNa BAKHOCT cepTHipHKaTa, a AMYHA KapTa je joul yRek BaxKeha MOE MOAHETH 3axTeB 3a oGHaBsbatbe ceprucpukara 6e3 nuahata HaKHaze. 9.1.2 Haknaga 3a npucryn ceprupukaty Ceprucbuxari ceprupuxaunonor tesa cy japHo JocTynHH Ha eG cajry cepruipuKausoHor Tena MYTI-a H Moxe HM ce npuctyniTH Ges Timahawsa HakHaze. KopucHnuxi ceptacbikatH ce He oGjanseyiy. 9.1.3 Haxnaga 3a nponepy eratyca cepruukata TIposepa cratyca cepriikata BpumM ce cnpaM HcTe onospaHHx ceprucbuKara, Koja je jaBHo aoctyn#a Ha se6 cajry ceprupuxaunonor Tea MYTT-a u Moxke HM ce npveTynuTH Ges ruiaharwa naxwane, 9.1.4 Haknaga 3a apyre yeayre MYTI saapxasa npaso aa Haniahyje apyre yenyre y 2aBcHocTH oA pete npyxeHe yenyre y KOHKpeTHOM enya. 9.1.5 Pepynaaunja Osa onpea6a Huje npumersinea, 9.2. Marepujamna oarosopHoct MYTI coc matepujatny onrosopHoct 3a npyxaise yenyre wananarba cepru*pukara y cknaay ca BaXKCHHM 3aKOHCKHM MIponHcHMa. 33e 9.2.1 Ocurypame MYTI je ayxxan 2a oGexGean HajHinKH H3HOC OcHTypaiba Of pHsHKa ofroBopHocTH 3a Moryhy urTeTy HacTany npy>xkatseM yenyre wajasaHsa cepTihuKara y ckaAy ca BaxehHM MponHcHMa, TaKo na: ocurypaHa cyMa Ha Kojy Mopa GUTH yroBopeHo ocuryparse m0 jeaHOM wITeTHOM norahajy He Moke WaHocHTH mats 03 20.000 € (espa) y ANHAPeKoj NpoTHBBPEAHOCTH, nospasymesajyht np TOM KaO w!TeTHH storahaj ‘nojeamHayHy urrety Hacrany ynlotpe6om jeaiior KnannukoRanor eneKrpoxickor cepriibukara y jeaHoM axry y mnpagtom npoMery Yykyna OcHTypania cyMa Ha Kojy Mopa GHTH yroBopeHo ocHrypaibe on O;OBOPHOCTH Cepriukausionor Tera KyMYsIATHBHO Ha TOAHUIIKEM HMBOY, 0 CBHM UITeTHHM orahajuma, He moxe Gurr ninKa oa 1,000,000 € (espa) y anHapcKo} npotuBBpeaHocTH. 9.2.2 pyr bouton Osa onpenGa nnje npumenzusa, 9.2.3 Ocuryparse nam rapanunja 3a Kpajibe KopHcHMKe Ccurypaise nan rapanuija 2a xpajtse KOpHICHHKe onnicano je y oapen6H 9.2.1 oBor aka. 9.3. Toseps.usocr (rajuocr) nogataka 9.31 Oncer rajunx noxaraKa Tajun nosaunt cy cBe HH opMauuje H rogaUM KOjH Ce OHOCE Ha NpuBATHE KpNTorpacbeKe kobysene ceprHdukauHoHor Tea, aKTHBAUHONE OAATKE (OSHHKE 3a aKTHBALKjy NpHBATHOr Koya) 1 aor dajnose cucrema 3a wsnanatbe ceprudbuxara. Osum nonauuMa ce pykyje H ogauH ce uyBajy caraacHo oxpeGaMa 3akoHa 0 TajHocTH nozaTaKa, Tloce6ta uitrepHa mpapiia pada M sauITHTe cucTeMa HsjaBatba ceptHibiKaTa y KojMMa cy AeTaHO OMMcaHH MOCTyNUM HM Mepe, KOjM ce —MpHMelyjy —NPHANKOM pykoBarba KpunrorpapckHM — niapaMerpama (aroputwaMa HM «Kby4eBHMa) 38 HS aBAHbe HeHTHC>UKALHOHAX AOKYMeHTA H KBATHDHKOBAHHX exteKTPOHCKHX cepTHDHKATa, O3HANeHA CY ‘o3HaKom TajHocTH ,IPKABHA TAJHA‘, y ckiiaay ca 3akowoM 0 TajHocrH nogaTaKa. 9.3.2 Monaun Koju ce ne emarpajy Tajuum He cmarpajy ce TajHum can nogauH m unc opmauuje, Koje ce oGjasnyjy Ha ne6 cajry ‘cepriipukaunoror tena MYTI- 349.3.3 OarosopHoer 3a saMITHTy noBep-oHBHX Muopmaunja 3anocrenH ca noBep-bHBHM ysOrAMA, KOjH Y TOKY OGapsatba CBOjHX Moc.TORA HMAjy KOHTAKT ca Novep.sHBHn HuGopMauHjaNta H TajHHM TlORALMMA Ze HHHCAHHM OApEGOM 9.3.1 OBOT akTa, CY Yy oGasesH na uiTuTe TajHocT MlomaTaka, a HX He OTKPHBAjy HeOBIAUheHHM THUMM H Ja MpH Pykonaiy TajuHm nogawua MpHMeHyiy Mepe saUITHTe TajHHX nozaTaKA sedHHNcaHe oceSHuM MHTepHHM MPABHTHMa pasa H SAIITHTE CHCTeMA HaABaHSa CepTHIpHKaTa H 3aKOHOM 0 Tajnocru nogaraKa, 9.4 3amrTHTa nogataka 0 MH4HOCTH 9, 1 Maan samture nogataka o aumocrn MYTI je ayxxan aa ce pHANKOM MpyxKaiba Yenyre HanaBarba cepruuKaTa, peMa AHHH Hogaumtwa KOpHCHHKa OAHOCH carnacHo OApEnCANA 3aKOHA 0 JALUTHTH NlORATaKA O HYHOCTH. 9.4.2 Honaun o awmocru xoju cy saurruhenn BaurTHhenH cy COM MORAUM © KOPHCHHUAMA Ha HaYHH MponicaH 3aKoHOM o 2aMITHTH NonATaKA © auinocrn, 9.4.3 Toaamm o amsnoctn Koja Huey samrrHhernt Ona oapea6a Huje npumensuna, jep ce oapenGe 3akoHa o 3aluTHTH MosarTaKa o ANMHOCTH TpHMeWbyjy Ha cBe NlodaTKe o AHMHOCTH, 9.4.4 OxropopHocr 2a samrrury aminnx noxaTaKa MYTI je y oGasesn aa uur nogaTKe © KOPHCHMUNMa, Aa HX He OTKPHEA HeoBAAUheHHM AMUMMAH sla HX KOPHETH HCKsEYYHBO y COPXY Mpy:xaiba yonyre HaAaBaHbA CepTHipHKaTa, 9.4.5 Caraacnoct 3a kopumherse awanux noqaraka Osa oapenGa nije npumerseusa, jep 3a Kopuuherse MMH logaTaKa O KOPHCHHKY ¥ CBPXY Tpyxaisa yenyre wsaanaisa ceptibuxara nuje notpebia caraacnoct KopucHnKa, Koananna mojataka 0 aM4¥HOCTH Kojy MYTI oGpahyje y cBpxXy W3/aBalba eneKTPOHCKHX cepTHipHKaTa aedunncata je saxoriom Koja ypehyje eBnAeHUMje H OGpamy nosaTaka y OGsIACTH YHYTpAUIILAX. noca0na, 9.4.6 Orxpupame ansiux noaaraxa y cay4ajy yapaBuor waH cyaeKor noctynKa Tloaaun 0 amsHocTH Guhe OTkpHBeHH Ha saxTes HaaTeKHor oprava My ApyruM caysajeaunca peaBubenins 3aK0HOM. 359.4.7 Apyre oxosmoctu 3a orkpuBatbe AMHHMX MonATAKA Oxoanocta 3a oTKpHBaibe JMYHHX nonaTaka jledMHcaHe cy oAperGoM 9.4.6 oBor akra. 9.4.8 OSancurranatse o noBpeaM NogaTaKa 0 aMHocTH MYT je y oGanesn 2a y cny'ajy noapese nogaraka 0 aNHOCTH o ToMe oGaBecTH TlosepeHuKa H AIMUe Ha Koje ce Nou OAHOCe, Ha HayHH nponvicaH 3aKoHOM oO 3aLITHTH NosaTaKa Oo AusHocTH, 9.5 Tpaso unresextyaane cpojune Cea npasa nirrenextyanne cpojune octajy Hckmy4nB0 BaacHuurrso MYTI-a 9.5.1 Tpano miresexryaaue cnojuue waa cepruipukaTuna H aucraMa onospanux cepraipukara MYTI aazprxapa npano HiTeneKTYamHOr BNACHHUTBA Has WoAATHM cepTuKpuKATHMA H ACTAMA onossannx ceprupukata. Kopycunut 4 noystajyhe crpane umajy mpano aa ceptudpuxare 1 HIMCTe ONlOsBAHUX CepTHdpMKaTa KOPUCTE y CKJA/Ly CA 3aKOHCKHM MPONHCHMA Ht OBHM AKTOM. 9.5.2 Tpano mureaextyaane enojune Haq akTuma MYTI saapixaza npaso HiTenekTyaHOr BAACHHUITBA HA OBMM AKTOM H CBM AKTHMA KOM ce ‘oatioce Ha mabpactpykrypy cncTema ca jabunn Kuysennma MYTT-a 9.6 Tpana u oGanese 9.6.1 TIpana u oGasese MYTI-a MYTI je onrosopan 3a npy:karse KOMIMIeTHe Yonyre H3MaBaiba CepTHdUKaTa Koja yKRyUyje: pernerpauitjy KopHcHHKa, (bopmuparse cepTucbukara, aneTpHOyUnjy cepracbuKara KOpHCHHUNMa, YnpasRarse XHBOTHHM BeKOM (OHaBAaIBe, cycneHsHja, peakTHBaLINja H onoane) ceptudukara, oGesGehuparse noy3qaHor uM jaBHo jocTyNHor cepsHca 3a npoepy cratyca ceprarpuxara, MYT je y oGanexn na 4ysa nogarke Kopnuthene y pererpaunja KopHcHiKa H cae uHopMauije 0 AKHBOTHOM UHKNYCy HSMATOr CepTHGHKATa KOPHCHHKa; 1a BOAM aKYpHY HW GesGeany epntenunjy HeBaKehux (oosBAHHX H cyCHeHIOBAHHX) ceptuduKaTa H Mopa 3a cpakn cepradbuxar, 3a Kojit je wa2e0 nmbopMaujy o Herono} BangHocTH, Ty HAopMauiljy Y4HHH jaBHO JocTyNHOM NyteM ceppHica 2a MpOBepy craTyca oroaBAHOCTH eNeKTPOHCKHX cepruukara, MYTI je aysxait 2a waspuin onosHa cepracbukata Kaze: ono3HB cepTicpukara 3axTeBa BAACHHK CepTHMpHKaTa HIM HeroB MyHOMORHHK, BAACHHK CepTHdukaTa HaryGH ocAOBHY COCOGHOCT; 36MyiI S yrapan aa je noxarax y cepracbuxaty norpeuras; Yrapaut a cy nogauut 3a nposepy KEanHd>HKOBAHOT enexTpoHcKor NoMMHca yrpoxeHH Ha HaYHH KojH yTuYe Ha GesGesHOCT H NoysnaHocr cepradaKara; YTBPAN Aa cy NOAM 3a ETEKTPOHCKO NOTMHCHBAHLE YIPOAEHH Ha HAYILH KOM YTHME Ha GexGeaniocr # noy2zaHoct eeKTpoHeKor noTmHCa; mpectaje ca pazom HH My je pad 3aGparsex. je ¥ oGanesn 2a y caysajy KoMnpomuraunje cBor npHBaTHor acHMeTpHYHOr mpHBATHOr kopy4a: 9.6.3 Kopne npectaje ca wanasarsem cepracpukara; WHOPMHINe CBE KOPHCHHKE M Apyre saMHTepecosane cTpaHe o KOMNMpomMTaNjH MpuarHor Ksysa; jasno oGjasxzyje miopmaunje o Tome a HsAaTH cepruduKarH, Kao M Hupopwaunje o cratycy onoasaniocTu ceprucbikara, aMule Hcy Baxkehe; BpUIH OTI03MB CBHX H3AATHX cepruduKaTa OMAX, a Hajkacuuje y poKy on 24 waca y ckstaay ca 3aKoHoM, Tipapa u o6apese kopuenuxa "HK je ¥ OGaBesH 2a: AoctabH TauHe M KoMMeTHe HHdopMauHje y cKAaay ca JedHHUCAHOM NpoueAypoM peructpaunje; cK/bY4HBO KOPHCTH CBO} ACHMETPHYHM NpHBATHH KeyY 3a opMupawe KBasIM()HKOBAHOr eneKTPoHCKOr NoTHIMca y cksay ca oApenGama 3akona; oleMoryhi Heossauhex mpictyn cBoM npHBaTHOM KEY; OaMAX OGaBeCTH HsaBAOlIA CepTHKbuKaTA AKO ce Npe HCTeKA BAKHOCTH ceprHduKaTa HaaHaeHOr y caMOM CepTHdHkaTy: KOPHCHHKOB NpHBATHH KBy4 H3ryOH, yKpage HIM HaCTYTIM OcHOBaHa cyMiba Jla je KOMNPOMMTORAH, MPecTaHe KOHTPOra Hast KOpHUhereMt KopHcHHKosor npHeaTHor KsEy¥a Ha paaiora KOMMPoMHTaLIje AKTHBALHOHOF NoNaTKA (IH) 3a cpeacrso 3a (bopmuparke Keanuduxovanior enexrpockor notnuca (auuHa Kapta) 11H pyrHx passiora, ycTaHOBH HeTaYHOCT HAIK H3MeHA calp>Kaja ceprHduKaTa; pekuse Kopmiuhe#se CBOr NPHBATHOT KIbY4A YKOAHKO NOCTO}H OCHOBAHA CyMIbA y Konmposraunjy K2by¥a NAM KONTPOMY Has AKTHBALINOHOM nOMATKOM. Kopuer ourrehi 9.6.4 HK je AYKaH 1a OnwaX saTpAKH onOsHB cBOF cepTHukaTa y cayyajy ryGHTKA HAH jetba cpesICTBA MAK NOAaTAKA 2a KPenPparbe e-leKTPoHeKor MOTHIHCA. Tipasa u oGanese noysaajyhnx erpana Tloysnajyhe crpave cy y oGasesH npe Hero urro ce noysnajy y ceprudpuxar: 9.6.5 sia W3BPUIe —MIpoBepy cTaTYca ceprudbukaTa, crpaM @KypHe McTe onosBaHNX ceprupuxara, sia ce ynosajy ca oAFoBOpHOCTHMA H OrpaHHYelbHMa OA OsFOBOPHOCTH sediHHCAHEM BKM akTOM, YrOBOPOM H BaXKeHM 3aKOHCKHM NponHcHMa. Tipava u oGasese apyrux yuecunka 37e (Opa onpen6a nije npMenuna. 9.7, Henpusnaparbe oxronopHocrH MYTI ne npuxpara Gio Kakey sApyry OfTOBOPHOCT OCHM OH Koja je H3pHYHTO ompeheHa OBHM aktom, YronopoM 4 BaXKehiM 32KOHCKHM mponicHMa, 9.8 Orpannuena onropopHocry Ceaka ynorpe6a ceprudukara Koja Huje y carnacHocTH ca BaxkeHM 3aKOHCKHM NponHcHMa 1 oBHM akTOM HHje qo3BomeHa. MYII He MpHXsata osropopHocT 3a uTeTy HacTany mpH Kopuwhewy ceprucuxara Bax OKBHpa HCTAKHYTHX OrpaHietba. 3a eBeHTYAIHY WTeTy HacTAly HenpasniHHM —M MedO3BO:KeHHM KopMuUhemeM cepruibuKata oaroBOpaH je KOpHCHHK ceprugpuxara. 9.9 OGemreherse Kopucuuk uma npapo Ha oGeurTehesse 2a urrery Hacrany Kopmuuhersem ceptuipukata, ako ce AOKaKe aa je wera HacTana Np Kopuuhersy ceprMduKaTa carnacho BaXxEHHM 3aKOHCKHM NporwcuMa HY OKBHpY HCTAKHYTHX OrpaHHuersa. 9.10 Tlouerak m mpectanak Baxema opor aKTa 9.10.1 Toverak Baxkea opor akTa naj axr nowmive na ce npAMeHyje AaHoM ZoHOMeHA. 9.10.2 Tpecranax saxkera opor akTa Onaj akr ce npuneryje u BaxM 10 AOHOULeIbA HOBO akra, HAM AO NpecTaHKa Mpy>xarba yoayre uaqanaiba cepruikata. 9.10.3 OGanese y caysajy npectanka upyxatba yeayre OGanexe MYTI-a y cayyajy npecranka npy°karba yenyre usgasarsa cepricpuKata jedunucaHe cy oapea6om 5.8 opor axra, 9.11 OGaneurraname u KomyHuKaunja ca KopucHMMuMa Cea norpedtia oGaneurTeiba HaMereHa KopHCHMMMa oOjanyjy ce Ha eO cajry ceprudpuxaunowor tea MYTI-a, http://ca.mup.gov.rs . Tlnraisa y mean npyskaise yenyre Woqanaisa CepTacbHKara KOpHCHMUM MOry MOcTaBHTH Ha ca(@mup.gov.rs . 9.11.1 Texamuka noapmika kopHcHmunMa Kopwtcumuku cepanc 2a TexHH¥Ky noxpuiKy AocTynaH je patHHM naHHMa on 08 10 20 HacoBa H 38cyGotom 071 08 20 14 vacona Ha Tene(pou: 01 1/3620-850 9.12 Awypupame axara 9.12.1 Tpoueaypa axkypupara axara Y caysajy norpeGe 2a waMevawa Hm aonyHama opor axra, Kao H akTa TloamTHKa npyxkara Yoryre HSAaBatba KBANMDUKOBAHHX CepTHdUKATA Ha JHNHO} KAPTH, HAKOH HOBPUEHHX HaMeHa nan gonyna, y TaGeny Hemopuja axma ynucyje ce HoBa Bepanija akTa, JaTYM HaupuleHe HaMeHe WIM OMyHe, HMe ayTopa, KOjH je H3BPUINO W3MeHY WIM sonyHy M KoMeHTap. KoMentap kpatko onueyje HappuieHy HoMeHY HAH AONYHY H pazior HApUIeHE HoMeHE HAH AONyHe. 9.12.2 Tpoueaypa oxo6panama axara m oGjan-onBare Hosa sepsija akra, npe oOjansuuBatsa mopa npohi npouesypy oxo6panaisa onuicasty y oxpen6H 1.5.4 opor akta, 9.12.3 OxoaHocrH non Kojua ce Mopa npomenntn OID Bepanja axra je cacrasnn eo OID-a, rako sla ce ca cBaKOM HaMeHOM Bepsije Meta H OID. 9.13 Pemanae cropona Choposn Hactant iaMeby xopuctuka nm MYTl-a y seat mehyco6unx npana u o6agera, ‘TyMavelba yroBopa H OBOT akTa pewlasahe ce crlopasyMHO, a YKONHKO crlopasyM Huje Moryh, chop he peuanatn HasutexHH cyst y Beorpaay. 9.14 Mepoaasno npaso 3a TYMaHeISe H NpHMeHY OBHX NpAKTHYHHX NpaBHsia MepogaBHo je mpazo PenyGauKe CpOxije. 9.15 Yexaahenocr ca pakehHM 3akoHcKHM Mponncuma Osaj axr goneT je y ckslaay ca BaKOHOM © eN1eKTPOHCKOM AOKYMEHTY, exeKTpOHCKO} AOKYMCHTALMjH M yemyrama on MoBepersa y enekTpoHcKOM rocnoBany (CayxGeHH riacHHK PC*, 6poj 94/17) # Baxkehum nponvicuMa KojH npowsHiase M3 HaBeseHOr 3aKOHA. 9.16 Octane onpease 9.16.1 Yronop MehycoGua npasa, oGasese 1 ogrosopHocTH KopHiCHHKa H MYTI-a y BesH ca npyxaibem yoayre wanaparba cepriibukara peryaucana cy Yrosopom © mnpyxkaiey yeulyre waaanatba keaandukosaHor enekrpouckor ceprubukara, KojH ce saksuyyyje H3Meby yroBopHiNx ctpaxa. 39e ‘Cormtensauiono tes 9.16.2 Tpenomerse mpana Kopwcink tema npaso a npasa 43 yroBopa Y UenHHH HIM AeENHMHHO MpeHece Ha Tpehe aMWe, MYTI uma npaso na carnacHo oapes6 5.8 opor aka npasa M oGaBexe 3 yronopa, y NOTHYHOCTH HaM jenKMHHHO, Ges CarnacHOCTH KOpHCHUKa, NpeHece Ha Apyror peritcTpoBaxor npyxkaoua KBanhdHkoBane yeayre on noBepersa y PenyGanun CpOuju wa HasLiexkHM oprad. 9.16.3 Hamene u paxkere oxpen6u VisMene nan aonyne nojeaMHux onpes6H He YTHUY Ha BaKeIbe OcTasX OnpENGH OBOT AKTA. 9.16.4 Hsepmrerse (anpoxarexe HakHage H OApHUare 0 npaBa) Ova ompenGa unje npumenansa. 9.16.5 Buua cuta MYTI je ocaoGohex onrosoproctH 3a 6x70 Kojy uTeTy MpHUMIBeHY KOpHCHHUMMA NpHAHKOM npyxkatba yeayre HanaBaiba ceprubukara, yKOmHKO je 0 luTeTe OULTO yene paznora, KOjM cy ait koHTposie MYTI-2, ostHocHo yeueA Buule cHae. 9.17 TIpeaasne u 3appuine oapease 9.17.1 Tpectanak paxkerba nperxoqHmx aKata Tonowersen onor axta npecraje a naxkn ,IpaKrHia npaBita pana cepradbKauMoHOr tesa MYT PC 02/2010, 08/2014 u 06/2016". y Beorpany, 0 8 JUN 2029 ou bess AFFd0~Z Munuerap, 40