Chương IV Thông tư 41/2017/TT-BTTTT: Tổ chức thực hiện

Chapter IV

IMPLEMENTATION

Article 13. Responsibilities of the CA

1. Store, update and publish all of sufficient and accurate information on the website of the CA and the website must be available 24 hours a day and 7 days a week (to assist in determining the validity of digital signatures on e-documents)

a) Information related to the suspension and revocation of digital certificates and revoked digital certificates of the subscribers;

b) Information related to the subscriber's digital certificate, the list of digital certificates that are valid or have expired;

c) Certificate practices statement of the CA.

2. Disclose technical specifications (both documentation and toolkit) related to the CA and digital signature standards; provide the root digital certificate of the CA to software developers to integrate into the digital signature validation software.

3. Encourage the CA to provide OCSP.

4. Provide Time Stamping services.

Article 14. Responsibilities of corporate using digital signatures for e-documents.

1. Apply digital signature software and digital signature validation software specified in Articles 11 and 12 of this Circular.

2. Initiate the network connection according to the provisions of Clause 3, Article 8 of the Government's Decree No. 64/2007/ND-CP of April 10, 2007 with safety, security and high availability.

3. Manage software products (according to their versions) that have functions of digital signing, verification of digital signatures, storing information attached to digitally-signed documents corresponding to technical regulations and standards to ensure the availability, compatibility and security in the process of using stored digitally-signed document.

Article 15. Responsibilities of the head of corporate using digital signature

1. Perform the responsibilities of the head specified in Clause 1, Article 8 of the Government's Decree No. 64/2007/ND-CP of April 10, 2007.

2. Regularly check to ensure that the management and use of digital signatures and digital certificates at the corporate comply with this Circular and other relevant regulations.

3. Based on practice requirements and requirements for information security in electronic transactions, make requests for issue, revocation and suspension of personal and corporate digital certificates within scope of management.

4. Upon request to convert stored digitally-signed documents into new file format (for reasons of information security or obsolete hardware or software), the head shall plan and seek approval from the information technology authority, to ensure compatibility and validity of digital signatures.

Article 16. Transitional provision

Within 12 months from the effective date of this Circular, agencies and organizations using software with digital signing and digital signature validation functions that have not met technical requirements and functions as prescribed in this Circular shall upgrade and supplement digital signature software and digital signature validation software to meet regulations.

Article 17. Implementation

1. The National Electronic Authentication Center (NEAC) shall assume take charge and cooperate with the Legal Department and concerned units in, guiding and providing technical assistance for the implementation of this Circular.

2. The Departments of Information and Communications of the provinces and centrally-affiliated cities, the information technology authorities of the ministries, the ministerial-level agencies, the Governmental agencies shall have the following responsibilities:

a) Disseminate the implementation of the provisions of this Circular;

b) Annually report to the Ministry of Information and Communications (via National Electronic Authentication Center) on the use of digital signatures for e-documents at agencies or organizations.

Article 18. Entry in force

1. This Circular comes into force as of February 5, 2018.

2. Chief of Office, Director of National Electronic Authentication Center, relevant agencies, organizations and individuals shall implement this Circular.

4. Difficulties that arise during the implementation of this Circular should be reported to National Electronic Authentication Center (affiliated to the Ministry of Information and Communication) for consideration./.