Step 1: license activation

1. ...

2.  <!--Step 1 License Activation -->

3.  <LicenseActivationuseActivationPassword="false" checksumOnActivationPassword="false"

4. <OnlineLicenseActivationinputType="manual"useRegistrationIdentifier="true"useAuthorizationCode="true"checksumOnAuthorizationCode="false">

5. <URLmethod="POST" value="http://MY_DOMAIN_NAME/.../mobileService">

6. <PayloadParameter key="action" value="licenseActivation" />

7. <PayloadParameter key="registrationIdentifier"

   value="%_RegistrationIdentifier_%" />

8. <PayloadParameter key="authorizationCode" value="%_AuthorizationCode_%" />

9. <PayloadParameter key="publicKey" value="%_PublicKey_%" />

10. <PayloadParameter key="initialVector" value="%_InitialVector_%" />

11. </URL

12. </OnlineLicenseActivation>

13. <Viewtitle="Activation (Online)">

14. <Fields>

15. <Field id="ActivationPassword"name="Activationpassword"comment="Enter your activation password."class="inputText" />

16. <Field id="AuthorizationCode"name="Authorizationcode"comment="Enter your authorization code."class="inputText"/>

17. <Field id="Identifier"name="Identifier"comment="Enter your identifier."class="inputText" />

18. </Fields>

19. <Labels>

20. <Label id="ReplaceInstanceConfirmationMessage" value="Do you want to overwrite your DIGIPASSinstance?" />

21. <Label id="GetLicenseActivationDataWaitMessage" value="Retrieving license activation data, pleasewait..." />

22. <Label id="BiometricFingerprintRecognitionDescriptionMessage"

    value="Please authenticate using fingerprint to protectyour DIGIPASS" />

23. <Label id="BiometricFaceRecognitionDescriptionMessage" value="Please authenticate using face recognition toprotect your DIGIPASS" />

24. </Labels>

25. <Buttons>

26. <Button id="Next" value="Get license activationmessage" />

27. <Button id="No" value="No" />

28. <Button id="Yes" value="Yes" />

29. </Buttons>

30. <Errors>

31. <Error id="ActivationPasswordEmpty" value="You must enter an activation password." />

32. <Error id="ActivationPasswordInvalid" value="The activation password is invalid." />

33. <Error id="AuthorizationCodeEmpty" value="You must enter an authorization code." />

34. <Error id="AuthorizationCodeInvalid" value="Theauthorization code is invalid." />

35. <Error id="BiometricFingerprintRecognitionAuthenticationFailed" value="Biometric authentication failed." />

36. <Error id="BiometricFaceRecognitionAuthenticationFailed" value="Biometric authentication failed." />

37. <Error id="CameraMandatory" value="A usable camerais mandatory to run this application." />

38. <Error id="CredentialMessageImageNotValid" value="This image does not contain validcredentials." />

39. <Error id="IdentifierEmpty" value="You must enter anidentifier." />

40. <Error id="IdentifierInvalid" value="The identifieris invalid." />

41. <Error id="MultiInstanceNotPermitted" value="Youcannot load another DIGIPASS instance" />

42. <Error id="ReplaceInstanceNotPermitted" value="Youcannot replace the DIGIPASS instance." />

43. </Errors>

44. </View>

45.  </LicenseActivation>

46. ...

Functional customization

• MultiDeviceActivation > LicenseActivation:

  • useActivationPassword: Include an activation password in the activation process. This attribute is optional. The default value is false.

  • checksumOnActivationPassword: Include a checksum in the activation password used during activation. This attribute is optional. The default value is false.

• MultiDeviceActivation > LicenseActivation > OnlineLicenseActivation:

  • inputType: The input data method. Input can be manual (manual) or through QR code/CrontoSign image input (image). This attribute is optional. The default value is manual.

  • imageFormat: Indicates which image format the application uses for scanning. Possible values are qrCode (only scan QR code format), crontoCode (only scan CrontoSign format), or all (scan both formats). This attribute is optional. The default value is all.

  • useRegistrationIdentifier: Include a registration identifier in the online activation process. This attribute is optional. The default value is false.

  • useAuthorizationCode: Include an authorization code in the online activation process. This attribute is optional. The default value is false.

  • checksumOnAuthorizationCode: Include a checksum in the authorization code used during online activation. This attribute is optional. The default value is false.

  For more information about the attributes of the LicenseActivation elements, refer to the Mobile Authenticator Studio Product Guide.

• MultiDeviceActivation > LicenseActivation > OnlineLicenseActivation > URL: If online license activation is enabled, this element must be used to define the URL from which to retrieve the activation data.

Masks for two-step online license activation lists the masks for two-step online activation with their values and if the advanced provisioning protocol is required.

The two-step activation mode must follow a specific configuration:

• The standard activation processes must be disabled.

• The Digipass Plus feature must be disabled.

• Post-activation must be enabled. The cryptoAppIndex attribute can be an RO, CR, or SG crypto-application. When using an SG application, the application must have a minimum of four data fields with a maximum length of 16 characters. The other data fields must be optional.

• From the Settings list, the Reactivation and the Regenerate Derivation Code features must be disabled.

Graphical customization

• MultiDeviceActivation > LicenseActivation > View: This element defines the appearance of the online license activation data screen. The background of the element is not customizable.

  • title: The default value is Activation.

• MultiDeviceActivation > LicenseActivation > View > Fields > Field:

  • id="ActivationPassword": This is the field for the activation password which will be used to decrypt the activation data.

  • id="AuthorizationCode": This is the field for the authorization code which will be sent to the server.

  • id="Identifier": This is the field for the identifier which will be sent to the server.

• MultiDeviceActivation > LicenseActivation > View > Labels > Label:

  • id="GetLicenseActivationDataWaitMessage": This message is displayed while the activation data is being retrieved.

  • id="ReplaceInstanceConfirmationMessage": This message is displayed to confirm replacing the instance.

  • id="BiometricFingerprintRecognitionDescriptionMessage": This is the label of the biometric protection message for fingerprint recognition.

  • id="BiometricFaceRecognitionDescriptionMessage": This is the label of the biometric protection message for face recognition.

    Biometric protection is only available for:

    • iPhone devices with an iOS version later than 12.0, and Touch ID, or Face ID.

    • Samsung devices with Android 5.0 Lollipop (API level 21) or above, all devices from Android 6.0 (API level 23) with fingerprint support.

• MultiDeviceActivation > LicenseActivation > View > Buttons > Button:

  • id="Next": Can be used to customize the label of the button used to start the instance activation. The default value is Scan online image.

  • id="No": Label of the button used to decline replacing the instance. The default value is No.

  • id="Yes": Label of the button used to accept replacing the instance. The default value is Yes.

• MultiDeviceActivation > LicenseActivation > View > Errors > Error:

  • id="BiometricFingerprintRecognitionAuthenticationFailed": The biometric authentication failed.

  • id="BiometricFaceRecognitionAuthenticationFailed": The biometric authentication failed.

  • id="ActivationPasswordEmpty": You must enter an activation password.

  • id="ActivationPasswordInvalid": The activation password is invalid.

  • id="AuthorizationCodeEmpty": You must enter an authorization code.

  • id="AuthorizationCodeInvalid": The authorization code is invalid.

  • id="CameraMandatory": A usable camera is mandatory to run this application.

  • id="CredentialMessageImageNotValid": This image does not contain valid credentials.

  • id="IdentifierEmpty": You must enter an identifier.

  • id="IdentifierInvalid": The identifier is invalid.

  • id="MultiInstanceNotPermitted": You cannot load another DIGIPASS instance.

  • id="ReplaceInstanceNotPermitted": You cannot replace the DIGIPASS instance.