TLv6 is coming: Upgrade now to avoid signature validation failures
Following the amendment of eIDAS Regulation (Regulation (EU) No 910/2014), by Regulation (EU) 2024/1183 (known as eIDAS 2.0), the Trusted List (TL) format will be updated from version 5 (TLv5) to version 6 (TLv6). This major update brings breaking changes to all tools processing the Trusted List.
What is TLv6?
TLv6 is the new official format for EU MS Trusted Lists, which are essential for validating electronic signatures and seals across borders. Trusted Lists enable both national and EU-level applications to identify and verify the status of qualified trust services and providers.
What changes with TLv6?
The most important technical updates include:
A transition from ETSI TS 119 612 v2.1.1 to v2.3.1, reflecting current EU trust standards.
Introduction of a new URI field (“SupplyPoint” attribute), improving how services are identified and retrieved.
- Electronic address can now optionally include a telephone number.
- Digital signature format changes from XAdES BES (TS 101 903) to XAdES-BASELINE-B (EN 319 132-1).
What should implementers do?
Organisations that process or rely on the EU MS Trusted List - such as Member States, QTSPs, and technical implementers - must upgrade their systems to support TLv6 before the Implementing Act enters into force.
To ensure a smooth transition:
Upgrade to the latest Digital Signature Service (DSS) versions 5.13.1, 6.0.1, 6.1.1, or 6.2 that support TLv6.
Apply necessary patches or hotfixes released by software providers.
Test their signature validation processes in advance to confirm full TLv6 compatibility.
Failing to update on time may result in:
Validation failures for digital signatures using the LT/LTA formats.
Inability to sign or extend signatures, if the new attribute is not recognised.
Service interruptions for any application using Trusted List data to verify qualified trust services.
What is the expected timeline?
The Implementing Act on the Trusted List introducing the update is expected to be published for public feedback by June 2025 here: https://ec.europa.eu/info/law/better-regulation/have-your-say_en.
After the feedback period of 4 weeks, the eIDAS Comitology Committee will be invited to issue an opinion on this Implementing Act. The publication of this Implementing Act in the Official Journal is not to be expected before September 2025. Technical implementers, public administrations, and QTSPs must act now to ensure their systems and validation tools are ready.
For questions or technical support on upgrading to TLv6, please contact the eSignature team via the helpdesk.