{"resourceType"=>"Basic", "id"=>"DistributePKIMaterial", "text"=>{"status"=>"generated", "div"=>"<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: Requirements DistributePKIMaterial</b></p><a name=\"DistributePKIMaterial\"> </a><a name=\"hcDistributePKIMaterial\"> </a><a name=\"DistributePKIMaterial-en-US\"> </a><p>These requirements apply to the actor <a href=\"ActorDefinition-TrustAnchor.html\">Trust Anchor</a></p><p>These requirements derive from <a href=\"Requirements-EstablishTrust.html\">Establish Trust</a></p><table class=\"grid\"><tr><td><b><a name=\"receive-pki-distribution-request\"> </a></b>Receive PKI distribution request</td><td/><td><div><p>Receive a PKI distribution request from a trust network participant.</p>\n</div></td></tr><tr><td><b><a name=\"validate-pki-material\"> </a></b>Validate PKI material</td><td/><td><div><p>Validate submitted PKI material based on the certificate governance policies of the Trust Anchor.  Validation may include enforcing, for example the governance of cryptographic algorithms used material, expiry times, or the presence of certificate chains back to certificate authorities.</p>\n</div></td></tr><tr><td><b><a name=\"assemble-trust-list\"> </a></b>Assemble Trust List</td><td/><td><div><p>Assemble, if not previously done so, the necessary PKI material for distribution as part of a trust list. Distribution of PKI material should allow for the categorization of PKI material such as by participant, by key usage type, and usage/business context.</p>\n</div></td></tr><tr><td><b><a name=\"sign-trust-list\"> </a></b>Sign trust list</td><td/><td><div><p>Sign the trust list of PKI material using the private key of the Trust Anchor.</p>\n</div></td></tr><tr><td><b><a name=\"make-keys-available-at-distribution-endpoint\"> </a></b>Make trustlist distribution endpoint available</td><td/><td><div><p>Make appropriate endpoints available for distribution of the signed key material in response to the request from a trust network participant.</p>\n</div></td></tr></table></div>"}, "extension"=>[{"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.url", "valueUri"=>"https://profiles.ihe.net/ITI/VHL/Requirements/DistributePKIMaterial"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.version", "valueString"=>"0.0.2-current"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.name", "valueString"=>"DistributePKIMaterial"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.title", "valueString"=>"Distribute PKI material"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.status", "valueCode"=>"active"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.date", "valueDateTime"=>"2025-04-15T11:34:20+00:00"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.publisher", "valueString"=>"IHE IT Infrastructure Technical Committee"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.contact", "valueContactDetail"=>{"telecom"=>[{"system"=>"url", "value"=>"https://www.ihe.net/ihe_domains/it_infrastructure/"}]}}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.contact", "valueContactDetail"=>{"telecom"=>[{"system"=>"email", "value"=>"iti@ihe.net"}]}}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.contact", "valueContactDetail"=>{"name"=>"IHE IT Infrastructure Technical Committee", "telecom"=>[{"system"=>"email", "value"=>"iti@ihe.net"}]}}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.description", "valueMarkdown"=>"Upon receipt of a set of public key material from a VHL Sharer or VHL Receiver, as trust network participants, the [Trust Anchor](ActorDefinition-TrustAnchor.html) validates and makes available a digitally signed version of the trust list."}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.jurisdiction", "valueCodeableConcept"=>{"coding"=>[{"system"=>"http://unstats.un.org/unsd/methods/m49/m49.htm", "code"=>"001"}]}}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.derivedFrom", "valueCanonical"=>"https://profiles.ihe.net/ITI/VHL/Requirements/EstablishTrust"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.actor", "valueCanonical"=>"https://profiles.ihe.net/ITI/VHL/ActorDefinition/TrustAnchor"}, {"extension"=>[{"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key", "valueId"=>"receive-pki-distribution-request"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label", "valueString"=>"Receive PKI distribution request"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement", "valueMarkdown"=>"Receive a PKI distribution request from a trust network participant."}], "url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"}, {"extension"=>[{"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key", "valueId"=>"validate-pki-material"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label", "valueString"=>"Validate PKI material"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement", "valueMarkdown"=>"Validate submitted PKI material based on the certificate governance policies of the Trust Anchor.  Validation may include enforcing, for example the governance of cryptographic algorithms used material, expiry times, or the presence of certificate chains back to certificate authorities."}], "url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"}, {"extension"=>[{"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key", "valueId"=>"assemble-trust-list"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label", "valueString"=>"Assemble Trust List"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement", "valueMarkdown"=>"Assemble, if not previously done so, the necessary PKI material for distribution as part of a trust list. Distribution of PKI material should allow for the categorization of PKI material such as by participant, by key usage type, and usage/business context."}], "url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"}, {"extension"=>[{"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key", "valueId"=>"sign-trust-list"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label", "valueString"=>"Sign trust list"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement", "valueMarkdown"=>"Sign the trust list of PKI material using the private key of the Trust Anchor."}], "url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"}, {"extension"=>[{"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.key", "valueId"=>"make-keys-available-at-distribution-endpoint"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.label", "valueString"=>"Make trustlist distribution endpoint available"}, {"url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement.requirement", "valueMarkdown"=>"Make appropriate endpoints available for distribution of the signed key material in response to the request from a trust network participant."}], "url"=>"http://hl7.org/fhir/5.0/StructureDefinition/extension-Requirements.statement"}], "code"=>{"coding"=>[{"system"=>"http://hl7.org/fhir/fhir-types", "code"=>"Requirements"}]}}

1. Receive PKI distribution request :

   Receive a PKI distribution request from a trust network participant.

2. Validate PKI material :

   Validate submitted PKI material based on the certificate governance policies of the Trust Anchor. Validation may include enforcing, for example the governance of cryptographic algorithms used material, expiry times, or the presence of certificate chains back to certificate authorities.

3. Assemble Trust List :

   Assemble, if not previously done so, the necessary PKI material for distribution as part of a trust list. Distribution of PKI material should allow for the categorization of PKI material such as by participant, by key usage type, and usage/business context.

4. Sign trust list :

   Sign the trust list of PKI material using the private key of the Trust Anchor.

5. Make trustlist distribution endpoint available :

   Make appropriate endpoints available for distribution of the signed key material in response to the request from a trust network participant.

• Establish Trust

• Trust Anchor