Kenya Mandates Licensed Digital Certificates for Telecoms to Enhance Cybersecurity
Kenya’s Communications Authority (CA) has issued a directive requiring all telecom operators to adopt licensed digital certification services for their critical information infrastructure (CII) by January 2026. This move aims to significantly strengthen cybersecurity within the ICT sector and safeguard sensitive digital systems from potential threats. The CA emphasizes that compliance is mandatory.
Licensed PKI Implementation for Critical Infrastructure
The directive stipulates that any system classified as Critical Information Infrastructure (CII) according to Gazette Notice No. 1043 must exclusively utilize digital certificates, certification services, and Public Key Infrastructure (PKI) provided by Electronic Certification Service Providers (E-CSPs) licensed and accredited by the CA. This means telcos cannot use any unapproved digital certification for systems deemed vital to national infrastructure and data security. The CA is taking a firm stance against non-compliance.
This regulatory measure underscores Kenya’s commitment to creating a more secure digital environment. By enforcing the use of licensed and accredited digital certification services, the CA aims to minimize vulnerabilities within the telecom sector and protect against cyberattacks targeting critical infrastructure. The January 2026 deadline provides telecom operators with a clear timeline to implement the necessary changes and ensure they meet the new regulatory requirements.
Keywords
Related Keywords: Kenya digital certificates, Kenya telecom crackdown, Unlicensed digital certificates Kenya, Kenya telecom regulation, Digital certificate fraud Kenya, Telecom security Kenya, Kenya communication authority, CA Kenya, Digital certificate compliance Kenya, Kenya SIM registration
