Client Overview
- The Government of Uganda launched a national digital identity initiative
- This is based on the MOSIP platform to issue secure, verifiable identity cards to all residents
- With a renewed push to support SDG Target 16.9 “legal identity for all by 2030” the program began a mass enrolment and renewal campaign on May 27, 2025
- The objective: register millions of citizens and replace expired ID cards with new-generation digital identities
Challenge
With a tight deadline and national significance, the Uganda ID program, led by the National Identification and Registration Authority (NIRA), required a secure, scalable, and standards-compliant PKI environment to issue and manage digital certificates for identity issuance partners. The challenge was twofold:
-
Set up a standalone PKI infrastructure that operated independently from the main MOSIP platform
-
Ensure high-assurance issuance of Partner Certificates using best practices in HSM integration, NTP time synchronization, and PKI trust modeling
There was zero room for error identity issuance had to be secure, reliable, and audit-ready from Day 1 to support the national enrolment and renewal campaign.
Solution
Codegic worked closely with system integrators and local technical teams to:
- Deploy a fully operational, standards-based, two tier CA hierarchy using Khatim PKI Server
- Configure Partner Certificate issuance workflows for MOSIP-compliant digital identity cards
- Implement strict cryptographic policies using Hardware Security Modules (HSMs)
- Set up secure NTP synchronization, ensuring time-sensitive operations such as certificate issuance and revocation were compliant and tamper-resistant
Results
With Codegic’s Khatim PKI Server and expert guidance, Uganda’s National ID program was able to:
- Launch the National ID enrollment and renewal program on May 27, 2025, with the issuance and renewal of National ID cards proceeding smoothly and securely, thanks to Codegic’s significant contributions
- Successfully deploy a standalone, standards-compliant PKI infrastructure integrated with HSMs & synchronized via NTP
-
Enable high-assurance issuance of digital certificates for identity issuance partners, ensuring secure & audit-ready operations
-
Establish a trusted certificate hierarchy aligned with international PKI and MOSIP requirements
The project now supports Uganda’s commitment to SDG Target 16.9 providing legal identity for all by 2030 with a robust and future-proof trust infrastructure in place.
