Eudi wallet certificates: what do IAM teams need to know?

TL;DR: EUDI wallet registration alone cannot authenticate a relying party, according to Procivis, so cryptographic certificates are needed to prove that the requester is really the registered organisation. That separation between registration and operational authentication turns wallet trust into a PKI and lifecycle problem, not just a governance registry.

Editorial analysis by NHI Mgmt Group, based on content published by Procivis: “EUDI Wallet relying party certificates: a technical guide for eIDAS 2.0”.

Key questions

Q: How should organisations separate registration from runtime authentication in wallet ecosystems?

A: Use registration to confirm that an organisation is allowed to participate, then use certificates to prove that a live request really comes from that organisation.

Q: Why do wallet relying party certificates matter when a national register already exists?

A: Because a register can prove eligibility, but it cannot authenticate the party sending a request.

Q: What breaks if certificate issuance is treated as a one-time onboarding task?

A: The trust chain becomes stale as soon as organisations change status, keys rotate, or revocation is needed.

Practitioner guidance

• Define separate lifecycle owners for registration and access certificates Assign one governance path for declared identity and entitlements, and a different one for the certificate used to authenticate live wallet requests.
• Tie issuance to CSR proof of key possession Require a signed certificate signing request before issuance so the requester proves control of the private key that will anchor trust.
• Operationalise revocation and trust list monitoring Monitor certificate revocation lists, OCSP responses, and trust framework updates so removed parties stop being trusted when status changes.

Bottom line: EUDI wallet trust depends on more than registration because a register cannot prove the caller behind a live request.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →