Provide the ASP Certificates to OneSpan

Send the ASP certificate or the certificate chain to OneSpan, depending on the ASP certificate option you have chosen:

• Option 1: Self-signed certificate: One file that contains the self-signed certificate.

• Option 2: Two-level certificate chain: One file that contains the root certificate and the leaf certificate.

• Option 3: Three-level certificate chain: One file that contains the root certificate, the intermediate certificate, and the leaf certificate.

You must not send the ASP private key, which is stored inside the PKCS #12 file, to OneSpan!

OneSpan requests you to send the certificate files via email. This email should at least include the following information:

• Recipients. security@onespan.com and pmo.emea@onespan.com

• Subject. TID platform – SSL/TLS certificates from asp-name

  where asp-name indicates your name.

• Attachment. The ASP certificate in a PEM file.

Provide test ASP certificates to OneSpan

OneSpan will request you to provide a test leaf key pair and test certificates. The certificates should have exactly the same format as the production certificates, but they should have different values for the keys.

You need to provide the following files, depending on the ASP certificate option you have chosen:

• Option 1: Self-signed certificate:

  • One file that contains the leaf private key.

  • One file that contains the self-signed certificate.

• Option 2: Two-level certificate chain:

  • One file that contains the leaf private key.

  • One file that contains the root certificate and the leaf certificate.

• Option 3: Three-level certificate chain:

  • One file that contains the leaf private key.

  • One file that contains the root certificate, the intermediate certificate, and the leaf certificate.

OneSpan requests you to send the certificate files via email. This email should at least include the following information:

• Recipients. security@onespan.com and pmo.emea@onespan.com

• Subject. TID platform – Test SSL/TLS certificates from asp-name

  where asp-name indicates your name.

• Attachment. The ASP private key and the certificate or the certificate chain in a PEM file.