Electronic Digital Signature in Kazakhstan: New Rules from September 2026 - FCHAIN

Electronic Digital Signature in Kazakhstan: New Rules from September 2026

New rules for the issuance, storage, and revocation of public key certificates for electronic digital signatures (EDS) have been in effect in Kazakhstan since September 11, 2026. They were approved by Order No. 522/NQ of the Acting Deputy Prime Minister — Minister of Artificial Intelligence and Digital Development of the Republic of Kazakhstan dated August 28, 2026. The new rules were adopted pursuant to paragraph 5 of Article 55 of the Digital Code and replaced nine orders that had been in effect since 2015. Separate rules apply to different certification authorities. For individuals and businesses, the requirements of the National Certification Authority of the Republic of Kazakhstan (NCA RK), which issues electronic digital signatures through the pki.gov.kz and egov.kz portals, are particularly relevant.

 

New Name for the EDS Certificate

Under the new rules, the document confirming that a public key belongs to its owner is referred to as a public key certificate for an electronic digital signature. Previously, the term “registration certificate” was used. The purpose of the document remains unchanged: it links the public and private keys to a specific individual or legal entity.

 

Timeframes for Issuing an EDS Certificate

The time required to obtain a certificate depends on the method of application. When applying through a personal account on the NCA RK portal, the certificate is issued within 20 minutes. In cases involving remote identification or an application submitted through a registration center, the timeframe is one business day. The government service for issuing and revoking EDS certificates is provided free of charge to both individuals and legal entities.

 

Certificate Validity Depends on Where the Key Is Stored

The new rules establish different validity periods for EDS public key certificates depending on how the key is stored. If the key is stored on a chip-enabled identity card, in cloud storage, or on a secure storage device, the certificate is valid for three years. If the key is stored on a standard electronic storage device or in the mobile application of the digital government, the validity period is one year. Certificates for digital systems of individuals and legal entities are valid for three years. EDS holders should therefore take the key storage method into account when determining the validity period of the relevant certificate.

 

Password Requirements for the EDS Private Key

When obtaining a certificate, the holder sets the password for the EDS private key independently. Under the new requirements, the password must contain at least eight characters, including Latin letters as well as numbers or special characters.

 

Procedure for Revoking an EDS Certificate

An EDS certificate is revoked within one business day after an application is submitted. The application can be filed through a personal account, the digital government portal, or a registration center. In certain cases, the NCA RK may revoke a certificate without an application from its holder. Such grounds include the death of the certificate holder, a change of surname, first name, or patronymic, the reorganization or liquidation of a legal entity, as well as a court decision that has entered into force.

 

Types of Certificates Available to Legal Entities

Several types of EDS certificates are available for legal entities and joint entrepreneurship. These include certificates for the chief executive, an employee authorized to sign documents, and an employee of the organization. Certificates are also available for secure website connections (SSL), the organization’s digital systems, and participants in the Treasury — Client system. For businesses, the new rules are particularly important for organizing the use of electronic digital signatures: companies need to take into account the type of certificate used, where the key is stored, its established validity period, and the applicable revocation procedure.

 

FChain Corporate Support

Electronic digital signatures are used by legal entities in various corporate and administrative processes. Changes to the rules governing the issuance, storage, and revocation of certificates require companies to take the current requirements into account when organizing their operations. FChain provides professional legal, corporate, accounting, and HR services to companies operating in Kazakhstan:

• Legal Services — professional legal support on matters arising in the course of a company’s operations.
• Legal Support for Business — comprehensive support for ongoing legal and corporate matters related to business operations.
• Registration of Companies — support throughout the process of establishing and registering a business in Kazakhstan.
• Legal Audit — a review of the legal aspects of a company’s operations and documentation to assess compliance with applicable requirements.
• Market Entry in Kazakhstan — Comprehensive Business Support — comprehensive support for companies establishing and developing their operations in the Kazakhstan market.
• Accounting and Tax Services — accounting and tax record-keeping and preparation of the required company reporting.
• HR Services — support with HR processes and maintenance of personnel documentation.

FChain’s professional services combine legal, corporate, accounting, and HR expertise, enabling companies to systematically organize their internal business processes and take into account changes in the requirements applicable in Kazakhstan.

 

PIT and Tax Deductions: Proposed Changes from 2027

Prepared by: Anel Kosmaganbetova

Assistant to the Director

FChain Kazakhstan

 📩almaty@f-chain.com
WhatsApp: +7 771 214 1820