Logius

The Dutch government organisation behind DigiD, eHerkenning and PKIoverheid: it manages the schemes while others issue the means and the RDI supervises.

The service organisation of the Ministry of the Interior and Kingdom Relations that operates a large part of the Dutch digital government. For this glossary the relevant domain is access: DigiD, eHerkenning and PKIoverheid are all managed there, alongside services such as MijnOverheid, Digipoort and Standard Business Reporting.

The distinction to hold on to is between managing a scheme and issuing a means. Logius manages the arrangements, the requirements and the central infrastructure; the actual login means and certificates come from elsewhere. Under PKIoverheid, certificates are issued by the trust service providers admitted to the scheme, so a customer buys a certificate from a provider and not from Logius. With eHerkenning, recognised suppliers issue the means to organisations, within one shared set of rules. DigiD is the case where the government itself is closest to the user.

That is also why Logius is not a supervisor and not a QTSP. Supervision of trust services in the Netherlands sits with the RDI, and qualified status comes from that side. Logius sets and runs the rules of a government scheme; whether a provider inside it meets eIDAS is a different question with a different authority behind it. Knowing which of the two you are dealing with saves a lot of time in a compliance conversation.