Christiane writes "The SSL Root CA responsible for issuing the German digital health insurance card lost its secret private key during a test enrollment. After their Hardware Security Module (HSM) dutyfully deleted its crypto keys during a power outage, it was all "Oops, why is there no backup?" All issued cards must be replaced:
"Gematik spokesman Daniel Poeschkens poured scorn on the statement that Gematik had insisted on the service provider carrying out a test without backing up the root CA private keys. 'We did not decide against a back-up service. The fact of the matter is that the service provider took over the running of the test system, so it also has to warrant its continuous operation. How it fulfils this obligation is its own responsibility.'"" Link to Original Source
This discussion was created for logged-in users only, but now has been archived.
No new comments can be posted.
German health insurance card CA loses secret key 0 Comments More Login /
Get More Comments