Invent the Future

Digital Certificate Issuance Service

Security Document Library

Home to all your cable certificate needs

CableLabs manages specifications that require embedding digital certificates into devices at the time of manufacture. The certificates provide the basis for data confidentiality, content integrity, and hardware authentication. The Digital Certificate Issuance Service provides easy to use, web-based accounts to help vendors obtain bulk certificate orders for their cable devices.

Security Documents

Agreement

Digital Certificate Authorization Agreement (DCAA)

Test Certificates

TEST DOCSIS 3.0 or Earlier Certificate Steps (Legacy PKI)
TEST DOCSIS 3.1 Certificate Steps (New PKI)
TEST Remote PHY Certificate Steps (New PKI)

Production CA Certificates

DOCSIS 3.0 or Earlier CA Certificates (Legacy PKI)
DOCSIS 3.1 & Remote PHY CA Certificates (New PKI)

Legacy CA Certificates with Extended Validity

Issued off the Sectigo IoT Portal

CableLabs Certificate Policies

CableLabs New PKI Certificate Policy 2020 V4.0
CableLabs New PKI Certificate Policy 2019 V3.0
CableLabs New PKI Certificate Policy 2019 V2.1
CableLabs New PKI Certificate Policy 2018 V2.0
CableLabs New PKI Certificate Policy 2018 V1.5
CableLabs New PKI Certificate Policy 2017 V1.4
CableLabs New PKI Certificate Policy 2017 V1.3
CableLabs New PKI Certificate Policy 2017 V1.2
CableLabs New PKI Certificate Policy 2017 V1.1
CableLabs New PKI Certificate Policy 2017 V1.0

Production CRLs

CableLabs CVC CA01 CRL
CableLabs Device CA03 CRL
CableLabs Service Provider CA01 CRL

Agreement

Digital Certificate Authorization Agreement (DCAA)

Test Certificates

Test PacketCable CableLabs Service Provider PKI CA Certs

Production Certificates

CableLabs Service Provider Root CA
Shared-01 CableLabs Service Provider CA
PacketCable™ MTA Root CA
PacketCable™ Centralized MTA CA (only used by vendors receiving certificates from the centralized CA on the DCS Portal)
PacketCable™ Centralized MTA CA – G2 (only used by vendors receiving certificates from the centralized CA on the Magnum Portal)
Legacy CA Certificates with Extended Validity
Issued off the Sectigo IoT Portal

Certificate Management Practices for DFAST Devices

Agreement

Get information on licensing by filling out the Video Licensing Questionnaire.

Test Certificates

Test Video Certificate Steps.

Production Certificates

CableLabs Manufacturer Root CA

CableLabs CVC Root CA

CableLabs CVC CA (issues OCAP CVC Certificates)

CableLabs Application CVC CA (issues OCAP Application CVC Certificates)

CableLabs OCUR CVC CA (Issues OCUR CVC Certificates)

OpenCable™ CA00001 (issues CableCARD™ Device Certificates on the DCS Portal)

OpenCable™ CA00001 – G2 (issues CableCARD™ Device Certificates on the DCS Portal)

OpenCable™ CA00001 – G3 (issues CableCARD™ Device Certificates on the Magnum Portal)

OpenCable™ CA00002 (issues OpenCable Host Device Certificates)

OpenCable™ CA00004 (issues UDCP Host Device Certificates on the DCS Portal)

OpenCable™ CA00004 – G2 (issues UDCP Host Device Certificates on the Magnum Portal)

OpenCable™ CA00006 (issues OpenCable Host Device Certificates on the DCS Portal)

OpenCable™ CA00006 – G2 (issues OpenCable Host Device Certificates on the DCS Portal)

OpenCable™ CA00006 – G3 (issues OpenCable Host Device Certificates on the Magnum Portal)

OpenCable™ CA00007  (DCS Portal)

OpenCable™ CA00007 – G2 (Magnum Portal)

Legacy CA Certificates with Extended Validity

Issued off the Sectigo IoT Portal

DFAST Evaluation Code

DFAST2 eval gfe_ext v3.2

DFAST2 eval header v3.2

DFAST2 eval source v3.3

For the Kyrio Certificate Issuance Service, go to kyrio.com.