公钥基础设施及数字证书签发软件
作为 PKI 组成部分，管理数字证书与关联密钥全生命周期的产品。
类别解释
Public key infrastructure and digital certificate issuance software
此类产品作为公钥基础设施（PKI）的一部分使用，用于管理数字证书的验证、创建、签发、分发、状态公布、续期或撤销，或管理与此类数字证书关联的加密密钥的生成、存储、托管、交换、销毁或轮换。本类别包括但不限于密钥管理系统、数字证书管理系统、在线证书状态协议响应器以及一体化 PKI 解决方案。
English
Used as part of a public key infrastructure (PKI), these products manage the validation, creation, issuance, distribution, status publication, renewal or revocation of digital certificates, or the generation, storage, escrow, exchange, destruction or rotation of cryptographic keys associated with them. The category includes key management systems, certificate management systems, OCSP responders and turnkey PKI solutions.
CRA 附件三 I 类，技术描述见实施条例 (EU) 2025/2392 附件一第 1–19 项
Class I of Annex III to the CRA, with technical descriptions in Annex I, points 1–19, of Implementing Regulation (EU) 2025/2392
制造商可采用协调标准（或技术规范）证明符合性，据此完成内部合格评定；未适用协调标准时，须按模块 B+C 或模块 H 由公告机构参与评定。
Manufacturers may demonstrate conformity through harmonised standards or technical specifications and self-assess; where no harmonised standard is applied, Module B+C or Module H with a notified body applies.
重要产品 · I 类的主要义务
在默认类别要求基础上，针对该类别核心功能落实更严格的安全设计与默认安全配置。
按所选路径完成合格评定，保留技术文档、风险评估与测试证据以备市场监管核查。
建立结构化的漏洞处理流程，并在支持周期内持续发布安全更新。
English
- On top of the baseline obligations, apply stricter secure-by-design and secure-by-default measures for the core functionality.
- Complete the conformity assessment on the chosen route and keep technical documentation, risk assessments and test evidence for market surveillance.
- Operate a structured vulnerability handling process and release security updates throughout the support period.