Thus, the receiver of a digitally signed electronic message can authenticate the sender and verify the integrity of data. This is especially important when dealing with legally binding transactions. Overall, digital signatures are difficult to counterfeit yet easy to verify. Transactions involving confidential or sensitive information could warrant the use of digital certificates for reasons of legal signatures, non-repudiation, mutual authentication, and integrity. A PKI is a globally recognized combination of technologies, processes, and policies that use an automated key management system to securely generate, maintain, and deliver encryption and digital signature keys.
Some software comes imbedded in Internet browsers, while other solutions require separate software.
This is the most difficult and time-consuming portion of PKI, and it must be constantly maintained to reflect the intended use of the resources. These certificates indicate who authenticated the user and provided the certificate. The GoC PKI will provide a uniform key management authentication process for digital certificates across government. The GoC PMA is an interdepartmental committee chaired by the Treasury Board Secretariat. It will approve the policies and practices that certificate authorities use in issuing GoC certificates.