Certificate Management

Obtain the TID certificate chain To obtain the TID certificate chain (root, intermediate, and leaf certificates), the ASP needs to do one of the following: The ASP can contact OneSpan by email, and OneSpan will provide public certificates in the...

Every ASP needs to have an ASP public/private key pair with an associated certificate or certificate chain. The ASP can generate the key pair and the certificates, or purchase them from a verified third-party certification authority (CA), such as Ve...

The instructions in these topics use OpenSSL to demonstrate how you can generate key pairs and certificates. You can, however, use another tool of your choice. OpenSSL is an open-source toolkit that implements the Secure Sockets Layer (SSL v2 and v...

The following options are available for generating a self-signed ASP certificate: Automatic generation of the ASP certificate via the OneSpan Community Portal Manual generation of the key pair and the certificate (using a certificate mana...

This procedure describes the steps that you need to complete to generate a certificate chain that consists of two levels: a root certificate and a leaf certificate. Before you begin This procedure assumes that you are using OpenSSL. Generate a tw...

This procedure describes the steps that you need to complete to generate a certificate chain that consists of three levels: a root certificate, an intermediate certificate, and a leaf certificate. Before you begin This procedure assumes that you a...

The ASP needs to install the ASP leaf private key and certificate(s) into the software application that is used to access the TID platform. This installation process is specific to the software application used by the ASP. Several applications requ...

Send the ASP certificate or the certificate chain to OneSpan, depending on the ASP certificate option you have chosen: Option 1: Self-signed certificate : One file that contains the self-signed certificate. Option 2: Two-level certificate ch...

The lifetime of the ASP certificates is limited and depends on the certificate type: The lifetime of the ASP leaf certificate should not be longer than 5 years. The lifetime of the ASP root certificate and of the intermediate certificate shoul...