Postgraduate Diploma in PKI for ISO 15118 and Secure OCPP
Online 800-hour Postgraduate Diploma in PKI for ISO 15118 and Secure OCPP. 8 modules covering ISO 15118-2, ISO 15118-20 and OpenSSL. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Apply cryptographic fundamentals to communication between vehicle, charger and backend.
Explain how Plug & Charge works under ISO 15118.
Design PKI hierarchies for the charging ecosystem.
Configure OCPP security profiles with mutual TLS.
Plan the secure operation of a certification authority.
Carry out threat and risk analysis in accordance with ISO/SAE 21434.
Verify compliance with NIS2, CRA and IEC 62443 in charging solutions.
Who it's for
- Cybersecurity engineer in electromobility looking to specialise in PKI for ISO 15118 and Secure OCPP.
- PKI infrastructure architect looking to specialise in PKI for ISO 15118 and Secure OCPP.
- Specialist in ISO 15118 and OCPP protocols looking to specialise in PKI for ISO 15118 and Secure OCPP.
- Security auditor for charging systems looking to specialise in PKI for ISO 15118 and Secure OCPP.
- Product security manager looking to specialise in PKI for ISO 15118 and Secure OCPP.
- Cybersecurity compliance consultant looking to specialise in PKI for ISO 15118 and Secure OCPP.
- Engineering or science graduates seeking to enter charging operators.
What you'll work with
- ISO 15118-2
- ISO 15118-20
- OCPP 2.0.1
- IEC 62443-4-2
- ISO/SAE 21434
- Directiva (UE) 2022/2555
- Reglamento (UE) 2024/2847
- ETSI EN 319 411-1
8 modules · 800 h
1.1Symmetric and asymmetric cryptography1.2Elliptic curves and ECDSA signatures1.3Hash functions and digital signatures1.4X.509 certificates and their extensions1.5TLS 1.2 and TLS 1.3 protocols1.6Mutual authentication between endpoints1.7Protection of private keys1.8HSM modules and secure elements1.9Cryptographic recommendations from BSI and ENISA1.10Laboratory: generating certificates with OpenSSL
2.1Communication architecture of ISO 15118-22.2New features introduced by ISO 15118-202.3HomePlug Green PHY PLC communication2.4Contract certificate in the vehicle2.5Authorisation and signing messages2.6Signed metering and verifiable billing2.7Provisioning of contract certificates2.8Roaming scenarios with Plug & Charge2.9Interoperability testing between manufacturers2.10Practical: analysis of a Plug & Charge session
3.1V2G Root CA and subCA3.2PKI of OEM, CPO, MO and CPS3.3Certificate provisioning service3.4Management of trust roots3.5Certificate revocation lists and the OCSP protocol3.6Certificate validity and renewal3.7Commercial PKI ecosystems in Europe3.8Cross-certification and multi-root environments3.9Certificate policies and certification practice statements3.10Workshop: designing a PKI hierarchy
4.1Security profiles of OCPP 1.6 and 2.0.14.2Basic authentication over TLS4.3TLS with client certificates4.4Certificate management on the charger4.5Signed firmware updates4.6Security event logging4.7Integration of ISO 15118 in OCPP 2.0.14.8New security features in OCPP 2.14.9OCA conformance testing4.10Laboratory: OCPP connection with mutual TLS
5.1Key generation ceremonies5.2HSM module infrastructure5.3Certificate issuance procedures5.4Full lifecycle management5.5CA auditing and logs5.6Business continuity and disaster recovery5.7Scalability for millions of certificates5.8Automation with the EST and SCEP protocols5.9Operational indicators for the PKI5.10Case study: operation plan for a CA
6.1Threat modelling with STRIDE6.2Man-in-the-middle attacks on communication6.3Identity cloning and key theft6.4Attacks on charger firmware6.5Denial-of-service attacks6.6Supply chain attacks6.7Risk analysis in line with ISO/SAE 214346.8TARA threat and risk assessment6.9Countermeasures and prioritisation of treatment6.10Workshop: TARA of a Plug & Charge charger
7.1UNECE R155 cybersecurity regulation7.2Requirements of the Cyber Resilience Act7.3Obligations arising from the NIS2 Directive7.4Component certification under IEC 624437.5WebTrust and ETSI criteria for authorities7.6eIDAS regulation and trust services7.7Security interoperability testing7.8PKI conformity audits7.9Technical security documentation7.10Case study: security audit of a backend
8.1Security requirements analysis8.2PKI architecture design8.3Integration with OCPP and ISO 151188.4Threat and risk analysis8.5CA operation plan8.6Interoperability testing and validation8.7Revocation and renewal procedures8.8Regulatory compliance plan8.9Report and presentation8.10Final review with the tutor
How you'll learn
100% online training on the SEIUM Institute campus, with downloadable material, recorded classes and assigned technical tutor. No fixed timetables: students progress at their own pace within the intake, which makes it possible to combine the programme with work.
Each module combines theory, guided reading of the original standard and applied exercises. The working software is OpenSSL, EJBCA, Wireshark, Burp Suite, in free, academic or evaluation versions. Case studies are based on real procedures for designing PKI hierarchies for Plug & Charge, security auditing of OCPP backends and threat analysis of charging infrastructures. Assessment is continuous by module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Apply cryptographic fundamentals to communication between vehicle, charger and backend.
Explain how Plug & Charge works under ISO 15118.
Design PKI hierarchies for the charging ecosystem.
Configure OCPP security profiles with mutual TLS.
Plan the secure operation of a certification authority.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient command of Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours spread over 6 to 8 months. That is between 10 and 15 hours a week on average, compatible with a full-time job.
You will work with OpenSSL, EJBCA, Wireshark, Burp Suite. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM Institute diploma upon passing the continuous assessment and the integrating project. It is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the higher programme. Check the credit transfer policy when you enrol.
Related programmes
Postgraduate Diploma in Mechatronic Integration of E-Axles and Reduction Gears
Online 800-hour Postgraduate Diploma in Mechatronic Integration of E-Axles and Reduction Gears. 8 modules with ISO 6336-1:2019, ISO 26262-4:2018 and KISSsoft. Assigned tutor and open enrolment.
Postgraduate Diploma in EV Demand Modelling and Grid Expansion
Online 800-hour Postgraduate Diploma in EV Demand Modelling and Grid Expansion. 8 modules covering Directive (EU) 2019/944, Regulation (EU) 2023/1804 and Python. Dedicated tutor and open…
Postgraduate Diploma in Data Pipelines for EV Fleets and Predictive Maintenance
Online 800-hour Postgraduate Diploma in Data Pipelines for EV Fleets and Predictive Maintenance. 8 modules covering Regulation (EU) 2016/679 (GDPR), Regulation (EU) 2023/2854 (Data Act) and…
More in Electromobility, Batteries & Hydrogen
All Electromobility, Batteries & Hydrogen programmes → · How to apply · Fees & financing · Scholarships