NITDA PUBLIC KEY INFRASTRUCTURE (PKI) REGULATIONS

Regulations establish the framework for Public Key Infrastructure in Nigeria, governing digital certificates and signatures for transactions. They target certification authorities, government agencies, businesses, and citizens using e-signatures. This enables secure digital transactions and supports e-government and e-commerce.

What Is This Policy?

NITDA regulations establishing the framework for Public Key Infrastructure (PKI) in Nigeria, governing digital certificates, certification authorities, and digital signature authentication for government and commercial transactions.

Who Does It Target?

Certification Authorities (CAs) issuing digital certificates Government agencies using digital signatures Businesses and citizens using e-signatures for transactions NITDA as the Root Certificate Authority overseer

What Does It Aim to Achieve?

Enable secure, legally recognised digital transactions and communications in Nigeria through a trusted PKI ecosystem, supporting e-government, e-commerce, and digital identity.

Key Features

CA Licensing: Only NITDA-licensed Certification Authorities may issue valid digital certificates in Nigeria. Root CA: NITDA operates the Nigerian Root Certification Authority anchoring the PKI trust chain. Digital Signature: Provides the legal and technical framework for legally recognised digital signatures. Certificate Standards: Prescribes technical standards for certificate types, validity periods, and revocation.

Current Status

Rollout Stage: Active Coverage: Nigerian PKI ecosystem — government and commercial Beneficiaries: Digital economy; secure digital transactions; e-government Funding: NITDA; CA licensing fees

How to Access

Organisations wanting to issue certificates: apply for CA licence from NITDA Businesses requiring digital signatures: obtain certificates from NITDA-licensed CAs Government agencies: use the government PKI for official digital signatures Application method: Engage NITDA at https://www.nitda.gov.ng

Important Terms

Digital signatures issued under Nigeria's PKI framework have legal validity equal to handwritten signatures Certificate revocation must be prompt — using a revoked certificate is a security offence PKI is foundational infrastructure for the digital economy

Official Resources

Website: https://www.nitda.gov.ng Contact: National Information Technology Development Agency (NITDA)

Legal Framework

Issued under the National Information Technology Development Agency Act 2007, which empowers NITDA to issue guidelines, frameworks, and standards for ICT development in Nigeria. Operates alongside the Nigerian Communications Act 2003, the Cybercrimes (Prohibition, Prevention, Etc.) Act 2015, the Nigeria Data Protection Act 2023, and the National Digital Economy Policy and Strategy 2020-2030. Draws on the ITU-T X.509 standard on PKI, the IETF RFC 5280 on Internet X.509 PKI, international PKI governance frameworks, and the Nigeria Data Protection Act 2023 on data integrity.