[Home] [Databases] [WorldLII] [Search] [Feedback] Malaysia Legislation

In every licence granted under the Act, there shall be implied on the part of the licensed certification authority that -

(a) the licensed certification authority shall keep and maintain working capital reasonably sufficient to carry on or operate as a certification authority;

(b) the licensed certification authority shall keep its operating procedures under review and shall not make any substantial changes to its operating procedures without the Controller's prior written approval;

(c) the licensed certification authority shall only use an approved digital signature scheme;

(d) the licensed certification authority shall make, keep and maintain the necessary arrangements with a recognised repository and a recognised date/time stamp service for its own use and for the use of its subscribers if it does not also provide those services;

(e) the licensed certification authority shall establish and maintain a secure system and infrastructure to safeguard its private key and for key distribution, key management, key storage and key disposal;

(f) the licensed certification authority shall establish and maintain a secure system and data base for the storage of information and documents obtained from a subscriber under the Act and these Regulations;

(g) the licensed certification authority shall at all times maintain the confidentiality of information and documents obtained from a subscriber under the Act and these Regulations and be subject to the directions of the subscriber in relation to the release or disclosure of such information and documents;

(h) the licensed certification authority shall keep and maintain the suitable guarantee as required under these Regulations;

(i) if the licensed certification authority intends to discontinue its operations, the licensed certification authority shall give to the subscriber of each unrevoked or unexpired certificate issued by the licensed certification authority at least ninety days written notice of such intention;

(j) the licensed certification authority shall keep and maintain detailed written records of its transactions as required under these Regulations;

(k) the licensed certification authority shall keep and maintain books of account as required under these Regulations; and

(l) the licensed certification authority shall comply with any directions of the Controller issued under the Act and these Regulations.