BS PD CEN/TS 419221-2:2016 specifies a protection profile for cryptographic modules used bycertification service providers (as specified in Directive 1999/93) for signing operations, with keybackup. Target applications include root certification authorities (certification authorities who issuecertificates to other CAs and who are at the top of a CA hierarchy) and other certification serviceproviders where there is a high risk of direct physical attacks against the module.