Automotive Cybersecurity
The era of the paper "Certificate of Conformity" (CoC) is coming to an end. By July 5, 2026, the European Union is mandating a shift to a purely digital exchange of vehicle data, known as Initial Vehicle Information (IVI). This isn't just an "automotive" update — it is a transformation of the entire transport sector.
Automotive Cybersecurity
6 min read
15 May 2026
The paper Certificate of Conformity has been the cornerstone of European vehicle registration for decades. But as of July 5, 2026, Regulation (EU) 2018/858 mandates that all new vehicle registrations across the European Union must rely on Initial Vehicle Information (IVI) Version 2.0 — a fully digital, XML-based exchange of vehicle data secured by Qualified Electronic Seals (QSealC).
For automotive manufacturers, PKI architects, and national registration authorities, this shift demands more than a software upgrade. It requires a complete rethinking of how vehicle identity is created, signed, transmitted, and verified across borders. This guide breaks down who is affected, what QSealC means in practice, and how to prepare your infrastructure for the 2026 deadline.
Who Is Impacted?
The scope of Regulation (EU) 2018/858 and IVI Version 2.0 covers almost all EU vehicle registrations.
Passenger Vehicles
Cars, buses, and coaches — the largest category of impacted vehicles under the new IVI mandate.
Goods Vehicles
Vans, light trucks, and heavy goods vehicles used in commercial freight and logistics.
Trailers
Trailers and semi-trailers that must now carry digitally signed conformity data.
Two & Three-Wheelers
Motorcycles, mopeds, and quadricycles entering the digital registration framework.
Agricultural & Forestry Tractors
Agricultural and forestry tractors and trailers. Currently transitioning from voluntary to mandatory digital registration under the phased IVI rollout.
Why QSealC Is the New Standard
To replace a physical "wet ink" signature, eIDAS 2.0 requires manufacturers to secure IVI XML files with a Qualified Electronic Seal (QSealC). This is not a simple PDF signature — it is a cryptographically bound assertion of origin and integrity that carries the full legal weight of the issuing manufacturer across all EU member states.
Integrity
Proves technical specifications haven't been altered since leaving the factory. Any tampering invalidates the seal and blocks registration.
Non-Repudiation
Carries the same legal weight as a physical stamp from the manufacturer. Courts and regulators treat a QSealC as irrefutable proof of origin.
Cross-Border
A truck made in Poland can be registered in Spain instantly because the seal is EU-recognized under eIDAS 2.0. No manual verification needed.
The 2026 Countdown
Member States Must Be Ready
National vehicle registration authorities across all EU member states must be technically capable of receiving, parsing, and validating IVI 2.0 XML files secured with QSealC.
No Digital IVI, No Registration
The mandatory deadline. From this date, paper CoC documents will no longer be accepted for new vehicle registrations. No digital eCoC/IVI XML with a valid QSealC means the vehicle cannot be legally registered in the EU.
The Implementation Challenge
For PKI architects, signing thousands of XML files per day requires massive automation. The scale of this mandate goes far beyond traditional document signing.
Qualified Seal Creation Devices
Using Cloud HSMs to manage QSealC keys securely without slowing down the production line. Each IVI file must be signed at the point of manufacture with keys protected under eIDAS 2.0 qualified trust service requirements.
EReg Interoperability
Ensuring the XML structure strictly matches the EReg (Association of European Vehicle and Driver Registration Authorities) standards. Any schema deviation will cause automatic rejection by national registration systems.
Is Your PKI Infrastructure Ready for IVI 2.0?
The July 2026 deadline is non-negotiable. Manufacturers who delay their QSealC and IVI automation strategy risk production stoppages and market lockout across the entire European Union.