eIDAS 2.0 attestations: what issuer choice changes for trust

TL;DR: eIDAS 2.0 electronic attestations of attributes split into EAA, PuB-EAA and QEAA, and the issuer type determines who may issue them and what legal effect they carry, according to Procivis, while the operational burden rises sharply for qualified issuance. Choosing the wrong type is a governance and risk decision, not just a format choice.

Editorial analysis by NHI Mgmt Group, based on content published by Procivis: “Electronic attestations of attributes in eIDAS 2.0”.

Key questions

Q: How should organisations decide between EAA, PuB-EAA and QEAA?

A: Choose based on who is allowed to issue the attribute, where the source of truth sits and what legal effect the relying party needs.

Q: Why does qualified attestation require a different governance model?

A: Qualified attestation depends on external supervision, audited key handling and trusted-list validation, so assurance is not contained inside the issuer's application alone.

Q: What breaks when attestation types are treated as interchangeable?

A: You lose the link between issuer authority and legal effect, which can cause a verifier to accept a claim that does not meet the required assurance level.

Practitioner guidance

• Define issuer classes by legal effect Map every attestation use case to EAA, PuB-EAA or QEAA before implementation so the issuer authority and acceptance conditions are explicit.
• Separate qualified signing from ordinary issuance Keep QEAA key storage and signature generation inside the audited qualified trust service provider path rather than on the issuing application server.
• Operationalise trusted list consumption Build verification processes that continuously consume Article 22 trusted lists and invalidate acceptance when qualified status changes.

Bottom line: eIDAS 2.0 electronic attestations are governed by issuer type as much as by content, so trust architecture must distinguish private, public and qualified claims.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →