Understand the PKI hierarchy: the vehicle's contract certificate is issued by a Mobility Operator CA which chains to a V2G Root CA; the EVSE must trust this root to validate the vehicle's identity during PnC
During the ISO 15118-2 TLS handshake, the EV presents its contract certificate and the EVSE validates the certificate chain up to a trusted V2G Root CA provisioned in the EVSE trust store
The EVSE extracts the eMAID (e-Mobility Account Identifier) from the validated contract certificate and forwards it to the CSMS (Charge Point Management System) via OCPP 2.0.1 for authorization lookup
Configure the CSMS to perform an authorization check on the eMAID against the eMSP (e-Mobility Service Provider) authorization list or a real-time authorization call, and return the authorization result to the EVSE
Handle certificate expiry and renewal: the EV can request an updated contract certificate from the EVSE using the CertificateInstallation service defined in ISO 15118-2, which the EVSE proxies to the PKI backend
Test the full flow end-to-end in a lab environment with a hardware-in-the-loop EV simulator before field deployment, as ISO 15118 timing constraints are strict and tolerance for communication delays is low
Known gotchas
As of January 2026, AFIR regulations require ISO 15118-2 compliance for newly installed public AC charging points in the EU — ensure your EVSE firmware and CSMS support the full PnC flow, not just the data link layer
AC Plug and Charge has hardware readiness in many chargers but software finalization was still in progress as of mid-2025 for some vendors; confirm software readiness with your EVSE supplier before committing to an AC PnC deployment timeline
The V2G Root CA trust store must be provisioned and kept current on each EVSE; a stale or missing root will cause all PnC authorizations to fail silently from the driver's perspective
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp