Accredited Trust Community

This DirectTrust Accredited Trust Anchor Bundle has as participants Health Information Service Providers (HISPs), Certificate Authorities (CAs), and Registration Authorities (RAs) that have achieved accreditation through either the DirectTrust HISP Accreditation Program for HISPs or the DirectTrust-EHNAC Trusted Agent Accreditation Program (DTAAP-CA/RA) for CA/RAs.

All participants in this bundle have not only successfully achieved accreditation status, but have also met the set of profiled requirements described by this document. This bundle assures that all anchors and associated end-entity certificates represented are in use by a DirectTrust accredited HISP.

The key value proposition of the DirectTrust Accredited Trust Anchor Bundle is to facilitate interoperable Direct exchange between HISPs in a uniform and scalable manner that is consistent with industry best practices for security and trust, thereby avoiding the need for further one-off negotiations between relying parties who are participants in the bundle.

.

HISP-Anchor Inclusion Requirements

Trust anchors are submitted to the DirectTrust Trust Network Services web site at this website with materials:

• Executed copy of the DirectTrust Federated Services Agreement from both the submitting HISP and the relied upon certificate and registration authority. If the HISP and certificate authority represent the same entity, then only the single executed agreement is necessary
• All trust anchor file(s)
• Sample end entity certificate(s) chaining to each trust anchor
  • An example of each certificate type that will be issued by the trust anchor should be submitted. Certificates types include Direct organizational level certs and Direct address level certs.
• Completed profile spreadsheet
• All of these documents and more can be found on the Application Page.

Requirements

Bundle inclusion requirements are explicitly outlined in the DirectTrust Accredited Trust Anchor Bundle SOP. At a high level, it consists of two parts

• Baseline trust anchor approval consisting of a review of artifacts and inspection of submitted anchors and end entity certificates
• Validation Interoperability Testing