Digital ID

Siemens issues digital certificates ("Certificates", also known as "Digital IDs") to its employees and agents, to its known business partners and to Siemens web sites in accordance with its

"Public Key Infrastructure Disclosure Statement" >

The following Siemens Public Key Infrastructure ("PKI") basic documents are available upon request, as necessary and appropriate, from the contact office referred to in the "Public Key Infrastructure Disclosure Statement":

• Certification Practice Statement ("CPS") of:
  • Siemens Business Services Root CA ("SBS");
  • Siemens Issuing Certification Authority(ies) ("CA(s)")
• Certificate Policy ("CP") for
  • internal Siemens Community ("CP 1"); and
  • external Known Business Partner Community ("CP 2")
• Acronyms and Definitions for CPS and CP
• Sample Certificate Usage and Electronic Transaction Agreement with Known Business Partner for Siemens Issuing CA-Issued Certificates (with responsibilities of each Party's end-user(s), who both hold a Siemens Certificate ("Subscriber(s)") and rely on a Siemens Certificate ("Relying Party(ies)")
• Sample Relying Party Agreement (with responsibility of end-user(s) of Known Business Partner(s) who are Relying Party(ies) only - not Subscriber(s)).
• Other applicable policies, including the policies of the first generation of Siemens Issuing CA's "CA001" and "CA001 (2002)"

Limited warranty and disclaimer / Limitation of liability

Except as explicitly provided in an applicable agreement with an Authorized Relying Party or Subscriber, Siemens Issuing CA(s) expressly disclaims all representations, warranties (express or implied) and liability -- except for willful misconduct and gross negligence -- concerning the functionality, issuance, use, validity, or accuracy of Siemens Certificates, including the identity of any person named by a Siemens Certificate or their authority to act on behalf of Siemens.

Siemens Certification Authority Certificates

Siemens has made the Siemens Issuing CA(s) Certificates available for downloading:

• Siemens Business Services Trust Center Root-CA V1.1.1 >
  Valid from June 17th, 2003 until June 17th, 2015
  Fingerprint of the certificate:
  (SHA-1) 206F 31ED 2722 6154 4710 CD19 4B34 6A48 207B 53EB
• Siemens Issuing CA Class EE >
  Valid from July 10th, 2003 until July 10th, 2009
  Fingerprint of the certificate:
  (SHA-1) 093B DBDB 5E51 7C0F 76CF 6B30 E45D F104 998A D3C7
• Siemens Issuing CA Class EE (re-certified 2006) >
  Valid from May 24th, 2006 until May 24th 2012
  Fingerprint des Zertifikates:
  (SHA-1) 3298 536D 7B46 CCE4 F5FB 9E6D 8153 F773 0539 1005
• Siemens CA 001 (2002) (first generation of Siemens PKI), >
  Valid from July 24th, 2002 until July 24th, 2008
  Fingerprint of the certificate:
  (SHA-1) ACA1 0229 A584 CCAE 3776 C99B 4E8B BDB3 966F 477F
• Siemens CA 001 (first generation of Siemens PKI) >
  Valid from November 3rd, 1998 until November 2nd, 2004
  Fingerprint of the certificate:
  (SHA-1) 286E 72DF ABE0 0FF5 E52D 46D8 3D1C 863F 20CA FECD

Additional all necessary certificates are available:

• Hierachy of Siemens CA Certificates >
  contains:
  Siemens Business Services Trust Center Root-CA V1.1.1
  Siemens Issuing CA Class EE
  Siemens Issuing CA Class EE (re-certified 2006)
  Siemens CA 001 (2002)
  Siemens CA 001

The descriptions of the relevant applications (web browser, e-mail client, etc.) explain how to import the Siemens CA(s) Certificate into the applications' environment.

Certificate Revocation Lists

Siemens has made the Certificate Revocation Lists (CRL(s)) below for Certificates issued by the Siemens Issuing CA(s) available for downloading.

Downloading the CRL(s) (from any access point) is acceptance of
"Siemens Public Key Infrastructure Disclosure Statement". >

• Download Siemens Issuing CA CRL >
• Download SBS Root CA CRL >

Public Certificate Repository

Siemens operates a publicly accessible Certificate Repository. In the Certificate Repository the Certificates of the Siemens PKI are stored. The Certificate Repository is available on the Internet to enable the exchange of secure e-mails with Siemens.

Using Siemens certificates (including downloading from the Certificate Repository) is acceptance of
"Siemens Public Key Infrastructure Disclosure Statement". >

To retrieve Certificates from the Certificate Repository, it must be set up and configured as LDAP directory in the respective e-mail encryption program.

User Instruction for Siemens Business Partners > contains a detailed description how to do this in Outlook using the integrated encryption functions.

Access	Domain Name	IP-Address	Port	Query
Siemens	cl.siemens.com	194.138.20.61	389	O=Trustcenter

PGP certificates in the Certificate Repository:

The Certificate Repository also contains the Siemens PGP certificates. It can be used with all PGP clients supporting LDAP.

European Bridge CA

Siemens is a member of the
European Bridge CA >

The European Bridge CA operates a virtual Directory Service. Certificates of participants from different companies can be called up via this Directory Service. For this the LDAP-queries of the Bridge-CA are forwarded to the repositories of the connected organisations. Also the Siemens PKI Certificate Repository can be called up via this service.

The European Bridge CA offers an online search > for certificates. Here also all Siemens certificates can be found if the correct mail-address is provided.

To use the Bridge-CA Repository it must be set up and configured as an LDAP directory the respective e-mail encryption program:

Access	Domain Name	IP-Address	Port
Bridge-CA	directory.bridge-ca.org	213.61.227.207	389