Business certificates

Business certificates are stored on HSMA Hardware Security Module (HSM) is a tamper-resistant hardware device within which the user generates and stores Swift issued private keys. The HSM performs cryptographic operations such as signing the JSON Web Token that is sent via APIs. and accessed using an LAN through SAG/SNL interface.

Step 1: Create a Business certificate

Caution

The steps below should be completed by a security officerClick to learn more about SWIFTNet PKI Security Officer registration in the Knowledge Centre..

1Log in to the Online Operations Management (O2M) application accessible through MV-SIPN and click Certificate Management - User. 2Click User Certs tab and select the institution BIC - from the node tree.

3Click New in the bottom-right corner to create a node in the tree.

4Select Human or Application type and enter the common name (cn) of the Distinguished Name (DN) you are about to create. Click OK.

5Verify the Create Node Request information and click Sign to confirm.

6Select Business as the certificate class. For password policy, select Application Password and click OK.

Info

Application Password: Select policy if an application will store and retrieve the profile's password on the request of an application. This policy requires a longer password and enables less frequent password renewal.

7Verify the Certification Setup Request information and click Sign to confirm.

8Expand Activation Secrets to view the Reference Number and Authorisation Code.

Step 2: Certify certificate on Alliance Gateway

Caution

The steps below should be completed by an Alliance Gateway administrator.

1Log in to the Alliance Gateway Administration GUI.

2Click Configuration.

3Expand the SWIFTNet Interface and SWIFTNet Users menu and click SWIFTNet Certificates.

4On the SWIFTNet Certificates menu click Certify and the certification window will open.

5Submit the Reference Number and Authorisation Code provided by the security officer.

6For location select HSM and complete the remaining fields.

7Click Save and the certificate should appear in the list.

8Verify the DN of the certificate.