Verifiable Health Links
1.0.0-comment - ballot International flag

This page is part of the Verifiable Health Links (v1.0.0-comment: Publication Ballot 1) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version. For a full list of available versions, see the Directory of published versions

Requirements: Receive Trust List

Official URL: https://profiles.ihe.net/ITI/VHL/Requirements/ReceiveTrustList Version: 1.0.0-comment
Active as of 2026-06-14 Computable Name: ReceiveTrustList

A VHL Sharer or VHL Receiver, after receiving PKI material from a Trust Anchor, SHALL validate and process the trust information for subsequent cryptographic operations.

Participants SHOULD:

  • Cache the received trust list or certificate material to reduce network and server load
  • Validate digital signatures or trust paths before use in VHL validation or secure channel sessions
  • Monitor certificate expiration or revocation status where applicable

These requirements apply to the following actors:

These requirements derive from Establish Trust

Cache received Trust listSHALL

Cache the received trust list or certificate material to reduce network and server load

Validate digital signaturesSHALL

Validate digital signatures or trust paths

Monitor certificate expirationSHALL

Monitor certificate expiration or revocation status where applicable