Luxembourg EUDI Wallet Status, May 2026: Active Rollout, No WRPAC Path Yet

Luxembourg is active at policy and pilot level — Data Strategy Action 32, the POTENTIAL pilot via the Ministry for Digitalisation and CTIE, a wallet due by end-2026 — but there is still no public WRPAC provider, registry, or relying-party registration portal. Here is the status for a Luxembourg-established relying party.

eIDAS Pro Team
May 28, 2026
7 min read
Luxembourg EUDI Wallet Status, May 2026: Active Rollout, No WRPAC Path Yet

Luxembourg EUDI Wallet Status, May 2026: Active Rollout, No WRPAC Path Yet

Luxembourg is one of the more prepared Member States on the EUDI Wallet infrastructure track. The grand duchy participated actively in the POTENTIAL Large-Scale Pilot, hosts mature qualified trust-service infrastructure through LuxTrust and ILNAS supervision, and has committed — at both the national strategy and legislation level — to having a wallet available before the end of 2026.

None of that translates yet into a live WRPAC path. There is no publicly findable Luxembourg WRPAC provider, no national relying-party registration portal, and no mandate naming a specific institution as the national WRPAC issuer. This post documents where Luxembourg actually stands in May 2026, what the policy stack says, where the WRPAC gap sits, and what a Luxembourg-established relying party should do in the meantime.

Where Luxembourg Actually Is

The clearest framing is: active at policy and pilot level, not yet at production registration level. The two are not the same thing, and conflating them is a common mistake when reading market readiness assessments.

Luxembourg has:

  • A national digital strategy that explicitly lists a digital identity wallet as an action under its data-policy agenda (Data Strategy Action 32)
  • Direct participation in the POTENTIAL Large-Scale Pilot, through the Ministry for Digitalisation and the Government IT Centre (CTIE), which ran from April 2023 through September 2025 — thirty months of live cross-border and multi-use-case testing
  • A national wallet commitment to deploy an implementation based on the European Commission reference codebase, configured for Luxembourg national needs, targeted for availability by end of 2026
  • Legislative grounding through a May 2025 law giving the qualified electronic signature a formal role in public administration, with the wallet listed as one signing method alongside existing LuxTrust products
  • Ongoing pilot activity beyond POTENTIAL, with participation extending into follow-on large-scale pilots

What Luxembourg does not yet have is the production-facing relying-party infrastructure that a business actually needs before it can operate as a registered RP under the eIDAS 2 framework.

The Policy Stack

Data Strategy Action 32 is the national digital strategy item that anchors the wallet in Luxembourg's broader digitalisation programme. It positions the EUDI Wallet not as a standalone tool but as a component of a national data ecosystem — interoperable with existing e-government services and digital trust infrastructure.

The wallet itself is planned as a national implementation of the European Commission reference architecture. This means the technical base is the open-source codebase developed under Commission coordination, adapted for Luxembourg-specific identity schemes and legal frameworks. The target is availability by the end of 2026, consistent with the EU-wide obligation under Reg (EU) 2024/1183 (the amended eIDAS Regulation), which sets the wallet-availability deadline for Member States at around 24 December 2026.

The POTENTIAL Large-Scale Pilot was where Luxembourg's implementation groundwork was actually done. Luxembourg participated via two beneficiaries — the Ministry for Digitalisation and CTIE — across four use cases: government digital services, opening a bank account, digital driving licence, and qualified electronic signatures. These four are among the highest-priority commercial and regulatory scenarios for the first wave of EUDI Wallet adoption. The pilot ran the full thirty-month arc from April 2023 to September 2025 and tested working credential issuance and verification flows with test data, not just architectural diagrams.

The national digital inclusion plan for 2026–2030 lists EUDI Wallet deployment as a concrete action item. This matters because it signals budgetary and administrative commitment — the wallet is not treated as a side project but as a deliverable within the official planning cycle.

The May 2025 law on qualified electronic signatures in public administration is notable because it integrates the wallet into Luxembourg's existing trust-service architecture rather than treating it as a replacement. LuxTrust products — which currently handle qualified signatures for Luxembourg businesses and citizens — are listed alongside the wallet as valid signing mechanisms for public-administration interactions. This avoids the disruptive transition problem some Member States face, where a new wallet implementation could destabilise existing qualified trust-service usage.

Taken together, the policy stack shows a Member State that has treated EUDI Wallet readiness as a serious national programme rather than a compliance box to tick. The infrastructure decisions are aligned, the legal basis is in place, and the deployment target is set.

The WRPAC Gap

Here is where the picture changes for a relying party trying to register now.

WRPAC — the Wallet Relying Party Access Certificate — is defined in Article 2(12) of Reg (EU) 2025/848 as the certificate that authenticates a relying party to a wallet unit during a transaction. Under Article 2(11) of the same regulation, the entity that issues WRPACs is a provider "mandated by a Member State." The obligation on Member States to designate such a provider and ensure WRPACs are available sits in Article 7(1) of Reg (EU) 2025/848 — not Article 6, which covers registration processes separately.

Reg (EU) 2025/848 entered into force in May 2025 but applies from 24 December 2026. The practical implication is that Member States have until that date to have their WRPAC infrastructure operational. Luxembourg has not yet made the pre-production steps publicly visible.

Specifically:

  • No Luxembourg WRPAC provider can be publicly verified as mandated under Article 2(11)
  • No national relying-party registration portal is publicly findable for Luxembourg
  • No WRPAC registry listing Luxembourg-issued certificates is publicly served
  • LuxTrust is a Luxembourg qualified trust-service actor with long-standing eIDAS 1.0 supervision under ILNAS, but LuxTrust has not been publicly mandated as the national WRPAC provider — its role in the WRPAC chain cannot be publicly verified as of this writing

This is not unique to Luxembourg. The official WRPAC provider list across the EU is not yet publicly published by any Member State in a verifiable, production form. The eIDAS Dashboard is the authoritative source for Member State compliance flags, and the WRPAC designation status is not publicly confirmed there for Luxembourg or for the EU at large. The situation reflects the regulatory calendar: the applying date is December 2026, and Member States are still building toward it.

The correct framing is not that Luxembourg is behind schedule. The December 2026 application date means no Member State is late if they have not yet published a WRPAC registrar — the obligation simply has not yet come due. Luxembourg's active preparation work is consistent with meeting that deadline. What is accurate is that there is no public/verifiable production WRPAC path available today for a Luxembourg-established relying party.

The distinction matters for planning. A business reading bullish market assessments of Luxembourg's EUDI readiness may incorrectly conclude that registration is available now. It is not — and neither is it available in any other Member State in production form.

What a Luxembourg-Established Relying Party Should Do Now

Given the gap between Luxembourg's policy readiness and the absence of live registration infrastructure, the practical playbook for a Luxembourg-based relying party is straightforward.

Target sandbox and open-wallet flows immediately. The POTENTIAL pilot produced real technical artefacts — tested credential formats, verified OpenID4VP flows, validated cross-border interoperability. A relying party can build and test against open reference wallet implementations and sandbox environments today without any WRPAC in place. This is not a workaround; it is the correct pre-production path.

Build toward national registration when Luxembourg opens its registrar process. The Ministry for Digitalisation and CTIE are the natural first points of reference for announcements on when the national RP registration portal will open. ILNAS, as Luxembourg's supervisory authority for trust services, is the likely regulatory home for any supervision framework around WRPAC issuance. Neither has published a timeline for the registration portal as of this writing.

Plan around establishment-based registration, then verify cross-border details. Regulation (EU) 2025/848 is built around national registers of wallet-relying parties established in a Member State. A Luxembourg-established relying party should therefore expect Luxembourg to be its home registration path once that path opens. Cross-border reliance is the purpose of the EUDI Wallet trust framework, but the operational treatment of multi-country establishments, intermediaries, and certificate coverage should be checked against Commission and Luxembourg guidance once it is published.

For context on the EU-wide WRPAC situation, the companion post No Published WRPAC Provider List Yet documents why the list is not yet publicly served across the bloc — and why that is a function of the regulatory calendar, not a gap in preparation. The eIDAS 2 Relying Party Registration Complete Guide covers the full registration process and how to prepare your technical stack before the portal opens.

What to Watch

The following events are the meaningful signals for a Luxembourg-established relying party:

  • Ministry for Digitalisation / CTIE announcements on the national wallet release timeline and the opening of a national relying-party registration process — these are the primary official channels
  • ILNAS communications on whether a WRPAC provider designation is being formalised under its supervisory remit, and what the registration framework will look like operationally
  • LuxTrust statements on any formal mandate to issue WRPACs — if LuxTrust is designated as Luxembourg's WRPAC provider, that will likely appear first in a government or LuxTrust announcement before it reaches third-party coverage
  • The eIDAS Dashboard WRPAC flag for Luxembourg changing status — the dashboard is the authoritative aggregator of Member State compliance indicators, and a status change there is the most reliable confirmation that the WRPAC infrastructure is live
  • A national relying-party registration portal becoming accessible — this is the operational gate that turns policy readiness into actual RP registration, and it has not opened as of this writing

The December 2026 wallet-availability deadline is the hard anchor. Between now and then, Luxembourg's preparation work — including the POTENTIAL pilot results, the legislative grounding, and the national strategy commitments — positions the country to meet that deadline. The WRPAC path will open; it is a question of when the administrative and designation steps are completed and made publicly visible.

Until then, the appropriate stance for a Luxembourg-established relying party is: build in sandbox, monitor official channels, and structure your technical stack so that production registration can be completed quickly once the portal opens.


For the EU-wide WRPAC status picture, see No Published WRPAC Provider List Yet. For full technical registration guidance, see the eIDAS 2 Relying Party Registration Complete Guide.

Related Articles

Share this article

Help others learn about eIDAS verification