Digital ID
Siemens issues digital certificates ("Certificates", also known as "Digital IDs") to its employees and agents, to its known business partners and to Siemens web sites in accordance with its "Siemens Issuing CA“.
Certification Authority ("CA") contact information
Siemens AG
CT CYS, Attn. Siemens Issuing CA(s)
81739 Munich
Federal Republic of Germany
E-mail: contact.pki[AT]siemens[DOT]com;
Certificate Problem Reports to be reached out to: certificate-problem-report[AT]siemens[DOT]com
(For external use only – Siemens Employees can get support at https://intranet.siemens.com/pkihelpdesk)
Website: https://www.siemens.com/pki/
Certificate Policy / Certification Practice Statement (“CP/CPS”)
- Siemens CP (PDF) – V.1.10
- Siemens CPS Root CA (PDF) – V.1.7
- Siemens CPS Issuing CA (PDF) – V.1.10
- Siemens EE Policy 2016 (PDF)
- Siemens EE Policy 2017 (PDF)
- Siemens CA Hierachy Policy 2016 (PDF)
- Siemens CA Hierarchy Policy 2017 (PDF)
CA and repository, licenses, confidentiality and audit
The Siemens PKI is classified as critical IT infrastructure of the company and was audited and certified in accordance with ETSI EN 319 411-1 v1.2.0
Limited warranty and disclaimer / Limitation of liability
Included in Siemens Certificate Policy ("CP").
CA Certificates
Siemens has made the Siemens CA(s) Certificates available for downloading. Please find an overview of the structure and different CA Certificates in Siemens PKI CA Hierarchy (PDF).
Public Certificate Repository
Siemens operates a publicly accessible Certificate Repository. In the Certificate Repository the Certificates of the Siemens PKI are stored. The Certificate Repository is available on the Internet to enable the exchange of secure e-mails with Siemens.
The Certificate Repository offers an Online Search for Siemens certificates. To retrieve Certificates directly from the Certificate Repository, it must be set up and configured as LDAP directory in the respective e-mail encryption program.
- E-Mail-Encryption requirements (PDF)
- E-Mail-encryption with business partners (Guideline for Siemens Employees) (PDF)
- E-Mail-encryption with business partners (Guideline for business partners) (PDF)
Access Domain Name IP-Address Port Search Base
Siemens cl.siemens.com 194.138.21.32 389 o=trustcenter
Authentication with Siemens PKI
- PKI Smart Card Usage for Business-Partners Features and Requirements (PDF)
- Multipurpose Business Partner Certificates Guideline for the Business Partner (PDF)
PGP certificates in the Certificate Repository
The Certificate Repository also contains the Siemens PGP certificates. It can be used with all PGP clients supporting LDAP.
European Bridge CA
Siemens is a member of the European Bridge CA.
The European Bridge CA operates a virtual Directory Service. Certificates of participants from different companies can be called up via this Directory Service.
To use the Bridge-CA Repository it must be set up and configured as an LDAP directory the respective e-mail encryption program:
Access Domain Name IP-Address Port Search Base
EBCA dir.ebca.de 81.16.50.37 389 o=ebca
Related Links