Global Platform certificate template examples

Use the following Global Platform certificate template examples as a starting point for common secure element, secure domain, and off-card entity deployments.

Each example demonstrates a recommended configuration for specific Global Platform usecases and can be customized to meet your organization's security and operational requirements.

Table 1. Global Platform certificate template examples

Template	Description
CASD.ECKA	Issues certificates for the Card Application Secure Domain (CASD) using Elliptic Curve Key Agreement (ECKA). Typically used to establish secure communication channels and support key agreement operations within GlobalPlatform-based ecosystems
CASD.CT/AUT	Issues certificates for CASD card authentication and authorization usecases. Commonly used to authenticate secure domains and establish trust relationships between cards, devices, and trusted management systems
OCE.ECKA	Issues certificates for off-card entities (OCE) using Elliptic Curve Key Agreement (ECKA) Typically used by backend systems, management platforms, or trusted services that participate in secure key establishment and communication with Global Platform-enabled devices

Template

Description

CASD.ECKA

Issues certificates for the Card Application Secure Domain (CASD) using Elliptic Curve Key Agreement (ECKA).

Typically used to establish secure communication channels and support key agreement operations within GlobalPlatform-based ecosystems

CASD.CT/AUT

Issues certificates for CASD card authentication and authorization usecases.

Commonly used to authenticate secure domains and establish trust relationships between cards, devices, and trusted management systems

OCE.ECKA

Issues certificates for off-card entities (OCE) using Elliptic Curve Key Agreement (ECKA)

Typically used by backend systems, management platforms, or trusted services that participate in secure key establishment and communication with Global Platform-enabled devices

In this section: