Transforming the National Root CA Infrastructure: Standardizing and Elevating Vietnam's Trust Services

This is a key step in transforming technical infrastructure to synchronize with the new name of the governing body, the Ministry of Science and Technology, after the merger.

On November 25, 2025, in Hanoi, the National Electronic Authentication Center (NEAC) - Ministry of Science and Technology (MOST) held a ceremony to create a key to issue a root digital signature certificate for the National Electronic Authentication Service Provider (Root CA) named after the Ministry of Science and Technology .

The event marks the completion and update of the national trust infrastructure for digital signatures, ensuring consistency with the current name of the Ministry of Science and Technology and the new legal framework for electronic transactions, electronic signatures and trust services.

Overview of the Ceremony

Transforming infrastructure to suit the new context

The creation of keys and issuance of digital signature certificates (CKS) for Root CA under the name of the Ministry of Science and Technology is carried out to standardize identification information after the Ministry of Information and Communications and the Ministry of Science and Technology merged and took the common name of the Ministry of Science and Technology, ensuring the legitimacy and legality of the organization providing national electronic certification services, as well as maintaining a high level of trust for systems using CKS in the operations of state agencies, businesses and people.

At the same time, in response to the new legal framework on trusted services, the national Root CA has self-issued 4 CKS certificates for 4 services including:

First, CKS certificate for CKS authentication service according to USB TOKEN model;

Second, CKS certificate for CKS authentication service according to remote digital signature model;

Third, CKS certificate for CKS authentication service according to digital signature model on mobile devices;

Fourth, CKS certificate for timestamp service.

CKS certificates are published on https://rootca.gov.vn.

The key generation ceremony took place at NEAC's main data center (Telecommunications Department Building, 68 Duong Dinh Nghe, Hanoi ). The entire process was strictly carried out according to the approved script with independent roles: Administration, Operation and Witness. All operations were checked, confirmed, recorded and fully recorded, meeting the requirements of transparency, auditing and technical supervision.

International standard technology solutions, absolutely safe

The Root CA system uses an advanced technology platform that meets international and domestic standards on public key infrastructure:

International standard solution: Using copyrighted CKS certificate lifecycle management solution, complying with international standards; Support advanced encryption algorithms such as RSA and ECDSA and ready for future expansion.

Maximum security: Using advanced encryption algorithm with key length of 4096 bits. The system and technical solutions are also ready to upgrade to support higher key lengths or new encryption algorithms while still ensuring data integrity and security according to international standards;

Ensuring service continuity

With the role of "national root of trust", NEAC Director To Thi Thu Huong emphasized: NEAC determines that the creation of a new root CKS certificate for the Root CA system is not simply a technical update under the new name of the Ministry, but also a mission to strengthen the foundation of trust for Vietnam's digital infrastructure. This is a key step to perfect the trust infrastructure and ensure legal compliance in the new context. NEAC is committed to operating the system safely, stably, continuously and absolutely transparently to accompany ministries, branches, localities, businesses and people in implementing electronic transactions and national digital transformation.

According to NEAC, the use of the new root CKS certificate does not disrupt current services. The old root CKS certificate remains valid and the CKS certificates of the Public CKS Service Providers issued by the old root CKS certificate will continue to be used and maintained until their expiration, ensuring that the CKS certificate chains issued to state agencies, organizations, businesses and people operate normally.

Based on the new root CKS certificate, NEAC will gradually issue CKS certificates to trusted service providers to provide services.

In the coming time, NEAC will continue to coordinate with organizations providing trusted services, ministries, branches and localities to standardize the use of new original CKS certificates in application systems; continue to perfect certification regulations, technical processes, and safety standards; at the same time, strengthen propaganda, guidance, and support for organizations and individuals to effectively exploit CKS and trusted services in all areas of economic and social life./.

According to Vietnam Science and Technology Journal

Source: https://mst.gov.vn/chuyen-doi-ha-tang-root-ca-quoc-gia-chuan-hoa-va-nang-tam-dich-vu-tin-cay-viet-nam-197251201222910827.htm