Electronic Signatures and Trust Infrastructures (ESI); Profiles for Electronic Attestation of Attributes; Part 3: Profiles for issuance of EAA or PID

Note

ETSI technical specification, part 3, specifying a protocol by which an EUDI wallet requests the issuance of a PID or an EAA, based on OpenID4VC-HAIP (version 1.1.1).

Summary

Purpose

Technical specification ETSI TS 119 472-3 (version 1.1.1, March 2026) defines the protocol for issuing person identification data (PID) and electronic attestations of attributes (EAA) to the European Digital Identity Wallet ETSI TS 119 472-3 V1.1.1, § 1 Scope ETSI TS 119 472-3 V1.1.1, History. Its scope states:

OpenID4VCI (OpenID for Verifiable Credential Issuance) is the OpenID Foundation’s credential issuance protocol; HAIP is a high assurance profile of it. The specification extends this profile for the needs of the European wallet and for the formats of TS 119 472-1 ETSI TS 119 472-3 V1.1.1, § 1 Scope.

Who it applies to

• Wallet providers, who ensure that their solutions support the protocols and interfaces of Annex I to Implementing Regulation 2024/2982 for issuance Art. 4(1), an annex that refers to this specification Annex I.
• The requirements of the specification also concern PID providers and attestation providers, in particular their metadata ETSI TS 119 472-3 V1.1.1, § 4.2 Requirements for Issuer Metadata (PID/EAA Provider Metadata); the article cited, for its part, places the obligation on wallet providers.

Key points

• Provider metadata: they carry its access and registration certificates, its reuse policy and its embedded disclosure policies ETSI TS 119 472-3 V1.1.1, § 1 Scope ETSI TS 119 472-3 V1.1.1, § 4.2 Requirements for Issuer Metadata (PID/EAA Provider Metadata).
• Reuse policy: the provider may indicate how to limit the number of presentations of the same attestation; without such an indication, it imposes no limit ETSI TS 119 472-3 V1.1.1, § 4.2.4.1 General requirements.
• Embedded disclosure policy: a set of rules, embedded in the attestation by its provider, that sets the conditions of access for a relying party; it is identified by a unique URI ETSI TS 119 472-3 V1.1.1, § 4.2.5.1 Introduction (informative) ETSI TS 119 472-3 V1.1.1, § 4.2.5.2 Requirements for the data model of Embedded Disclosure Policy.
• Wallet attestations: the wallet sends the wallet instance attestation (WIA) during authorisation and the wallet unit attestation (WUA) during the credential request, with the proofs of possession of the keys ETSI TS 119 472-3 V1.1.1, § 1 Scope.
• Other formats: Annexes A and B deal with the issuance of X.509 attribute certificates and of JSON-LD W3C VC ETSI TS 119 472-3 V1.1.1, Annex A (normative): Requirements for issuance of X509-AC EAAs ETSI TS 119 472-3 V1.1.1, Annex B (normative): Requirements for issuance of JSON-LD W3C-VC EAAs secured with enveloping proofs.

What the acts apply, and how

• Implementing Regulation 2024/2982, Annex I: the specification version 1.1.1 applies subject to adaptations Annex I. A general requirement is emptied; one of the elements of the issuer_info parameter must contain the provider’s registration certificate, and seven other requirements on this certificate are emptied; a requirement on the reuse policy predefined by the ARF is rewritten; Annex A (X.509 attribute certificates) does not apply Annex I. The adaptation does not touch Annex B (JSON-LD W3C VC), which therefore remains in the specification made applicable. This Annex I was added by Implementing Regulation 2026/1731 Art. 4.
• Implementing Regulation 2024/2979, Annex III: for embedded disclosure, it targets only paragraph 4.2.5 of the specification Annex III. Wallet providers ensure that their wallet units can process the attestations issued according to these specifications Art. 10.
• Implementing Regulation 2024/2979, Annex Ib: in the specifications of wallet unit attestations, requirement TR_KA-2.2 recommends (should) that the number of keys in a key attestation not exceed the maximum batch size set by the issuer, and refers, by a simple see, to the corresponding parameter of TS 119 472-3 Annex Ib.
• Regime: these are obligations to support, which target wallet providers Art. 4(1) Art. 10.

Important clauses

• ETSI TS 119 472-3 V1.1.1, § 1 Scope: scope.
• ETSI TS 119 472-3 V1.1.1, § 4.2 Requirements for Issuer Metadata (PID/EAA Provider Metadata): provider metadata.
• ETSI TS 119 472-3 V1.1.1, § 4.2.5 Provision of Embedded Disclosure Policy: embedded disclosure policy, targeted by Annex III to Implementing Regulation 2024/2979.
• ETSI TS 119 472-3 V1.1.1, § 4.6 Requirements for the Credential Request: credential request and proofs of possession.

Links

• Formats of attestations: ETSI TS 119 472-1 ETSI TS 119 472-1 V1.2.1; presentation: ETSI TS 119 472-2, version 1.2.1 in the corpus ETSI TS 119 472-2 V1.2.1 (the index of ETSI standards in the corpus, consulted on 31 October 2026, mentions a more recent published version, V1.3.1).
• Reference profile: OpenID4VC-HAIP OpenID4VC HAIP 1.0.
• Learning path: step 3, the European wallet.

ETSI standard: the site reproduces only short extracts; the full text is available from ETSI ETSI TS 119 472-3 V1.1.1. Written by Asphalia.