[Home] [Databases] [WorldLII] [Search] [Feedback] Malaysia Legislation

A person intending to carry on or operate as a certification authority shall satisfy the following requirements:

(a) it is a body corporate incorporated in Malaysia or a partnership within the meaning of the Partnership Act 1961 [Act 135];

(b) it maintains a registered office in Malaysia;

(c) it has working capital reasonably sufficient, according to the requirements of the Controller, to enable it to carry on or operate as a certification authority;

(d) it files with the Controller a suitable guarantee;

(e) it uses a trustworthy system for the generation and management of key pairs and certificates;

(f) it uses an approved digital signature scheme for the generation of key pairs and for the creation and verification of digital signatures;

(g) it has an operating procedure that includes a certification practice statement, the measures to be taken to check the identity of subscribers to be listed in certificates, and the repositories and date/time stamp services to be used;

(h) it employs as operative personnel only persons who -

(i) have not been convicted within the past fifteen years of an offence involving fraud, false statement or deception; and

(ii) have demonstrated knowledge and proficiency in following the requirements of the Act and these Regulations;

(i) it complies with the licensing, standards and technical requirements under the Act and these Regulations; and

(j) it complies with such other requirements as the Controller thinks fit.