Public Key Infrastructure (KPI)
Namibia’s National Public Key Infrastructure (NPKI) provides a trusted foundation for secure digital communication and electronic transactions. It combines technologies, policies and procedures for managing digital certificates and encryption keys, enabling individuals, businesses and public institutions to verify identities and conduct trusted transactions in the digital environment.
The NPKI supports the development of secure e-Government, e-Commerce and other digital services by strengthening identity verification, authentication and the protection of electronic transactions. As Namibia’s national trust anchor, CRAN operates the Root Certification Authority and oversees the national digital trust framework.
Electronic Signatures
Electronic signatures enable individuals and organisations to sign electronic documents and transactions securely. A recognised electronic signature can verify the identity of the person who signed a document, help establish whether information has been altered after signing, and provide greater accountability in digital transactions.
Namibia’s electronic signature framework is established under the Electronic Transactions Act, (No. 4 of 2019) and supporting regulations. The framework sets requirements for recognised electronic signatures, including how signatures are applied to data messages, how the identity of a signatory is verified and how alterations to electronically signed information can be detected
Certification Authority
A Certification Authority (CA) is a trusted entity within the Public Key Infrastructure ecosystem responsible for issuing and managing digital certificates that enable secure electronic identification, authentication and transactions.
CRAN serves as Namibia’s *Root Certification Authority (Root CA)* and the anchor of the national digital trust framework. In this role, CRAN operates the Root CA, maintains the national trust chain, accredits Certification Service Providers and oversees compliance with applicable legal, technical and security requirements.
Sector Certification Authorities and accredited Certification Service Providers operate within this trust hierarchy to provide digital certificates and related services to public and private sector organisations and end users.
Certification Service Providers
Certification Service Providers (CSPs) are trusted service providers that issue and manage digital certificates and subscriber credentials within Namibia’s PKI ecosystem. These certificates can be used to authenticate identities, apply electronic signatures, encrypt information and support secure digital transactions.
CSPs operating within Namibia’s national trust framework are subject to accreditation and regulatory oversight by CRAN. They are required to meet applicable legal, technical, security and operational standards and are subject to ongoing compliance monitoring to safeguard the integrity and reliability of the national digital trust ecosystem.
Accreditation and Licensing Procedures
CRAN is responsible for administering the accreditation framework for Certification Service Providers in Namibia. The accreditation process is designed to ensure that providers meet prescribed legal, technical, security, personnel and financial requirements before being authorised to operate within the national PKI ecosystem.
Applicants are required to submit relevant supporting documentation, which may include a Certificate Policy, Certification Practice Statement, technical and security specifications, incident management arrangements and business continuity plans.
The regulatory framework also provides for the accreditation of public and private CSPs and the recognition of qualifying foreign Certification Service Providers. Accredited providers are subject to ongoing compliance monitoring, periodic reviews and applicable renewal requirements.
Consumer Information and FAQ
Public Key Infrastructure helps create a safer and more trusted environment for accessing and using digital services. Through digital certificates and electronic signatures, users can have greater confidence in the identity of the parties they interact with online and the authenticity and integrity of electronically signed information.
- What is PKI?PKI stands for Public Key Infrastructure, and is a system of technologies, policies and procedures used to manage digital certificates and encryption keys, helping to secure digital communications and electronic transactions.
- What is an electronic signature?An electronic signature provides a way to sign information or documents electronically. Recognised electronic signatures can help verify who signed a document and determine whether the information was changed after it was signed.
- What is a digital certificate?A digital certificate is an electronic credential used within the PKI ecosystem to help verify the identity of a person, organisation, system or digital service.
- What is CRAN’s role?CRAN serves as Namibia’s Root Certification Authority and oversees the national PKI trust framework. CRAN is also responsible for accrediting Certification Service Providers and monitoring their compliance with applicable requirements.
- Why is PKI important?
PKI provides the trust infrastructure needed to support secure digital identity, electronic signatures, e-Government, e-Commerce and other digital services. It contributes to cybersecurity and helps build confidence in Namibia’s growing digital economy.
