How can a TPP create an App certificate?

Dec 22, 2024

Pre-requisites

• Ensure you have already created an Application, and that it is set up and active.

What are the types of certificates available?

There are three types of certificates:

1. Transport: Used for secure communication between endpoints.

2. Signature: Used to digitally sign documents or messages.

3. Encryption: Used to encrypt sensitive data.

For more details on the purpose of each certificate type, refer to the Trust Framework documentation on certificates.

Step-by-step:

1. Select an Application
   Go to the your organization, select the desired Application and click on Create Certificate. Choose the type of certificate you want to create (Transport, Signature, or Encryption).

2. Generate a CSR

   • A modal will appear with a reference command for OpenSSL. This command is used to generate a Certificate Signing Request (CSR) and must be run in your terminal.

   • As a TPP, we strongly recommend you generate the CSR in a secure environment such as an IAM cloud, a protected server, or a High Security Module (HSM) to ensure the private key cannot be extracted or misused for other ends beside the Trust Framework.

3. Run the Command

   • Execute the OpenSSL command provided in the modal on your computer’s terminal.

   • This will generate two files:

     • .csr file (Certificate Signing Request)

     • .key file (Private Key) – Keep this file secure.

4. Upload the CSR

   • Return to the directory and upload the .csr file to complete the certificate creation process.

   • If there are no issues, you will see a confirmation message in the UI indicating the successful creation of the certificate. If you find any problems, please refer to this entry on the Knowledge Base.

5. Download the Certificate

   • Navigate to the directory’s UI, click on the “…” menu next to the certificate, and select Download Certificate.

   • Save the .pem file containing the certificate to your machine.

Important Notes

• A certification (proof of compliance) is not required to create a certificate. Certificates and certifications are separate resources.

• Ensure the private key (.key file) is stored securely to prevent unauthorized use.

Need a Walkthrough?

Watch our official walkthrough video for a step-by-step guide.