Public Consultation on the draft candidate EUDIW Certification scheme

Following the adoption of a regulation to establish the European Digital Identity Framework, the European Commission has requested ENISA to provide support for the certification of European Digital Identity (EUDI) Wallets, including the development of a candidate European cybersecurity certification scheme in accordance with the Cybersecurity Act.

In close collaboration with an Ad Hoc Working Group including representatives of the industry and of Member States, ENISA has developed in the past year a draft candidate cybersecurity certification scheme for European Digital Identity (EUDI) wallets and the electronic Identity (eID) schemes under which they are provided (EUDIW).

Certification of EUDI wallets is mandatory under Regulation (EU) No 910/2014 (eIDAS), so the provisions of the draft EUDIW candidate scheme is also the result of a fruitful collaboration about cybersecurity aspects with the Member States as they define their national certification schemes.  

Following the good progress of the development, ENISA is launching today a public review of the draft EUDIW candidate scheme, to gather feedback from the wider community, and is at the same time seeking an opinion from the European Cybersecurity Certification Group (ECCG), the group of national cybersecurity certification authorities.

The public review includes a draft candidate scheme and annexes, as well as an early draft of a document defining security requirements to be used as certification criteria for the scheme.

The public review will remain open until Thursday 30 April.

A webinar is also scheduled on Wednesday 8 April at 15:00 CEST to provide a high-level guidance about the scheme.

All details, as well as links to the documents and to the survey, are available on Draft candidate EUDIW Scheme v0.4.614 for Public Review.