Page Comparison

Decide the following:

• How to deal with the OTP tokens
• End user impact
• Information to end users
• How to deal with logs and how/who to archive (admin logs for certificates)

Note that the TSP/Bank is responsible for handling the end user certificates through the whole process, including revoke of old certificates.

Bank ønsker:
Orientering om hvilke tekniske løsninger bank skal basere seg på/benytte.

TSP or Bank

• The TSP/Bank describes the change
• Send email to Andreas.Havsberg@bits.no and Torgeir.Sorvik@bits.no for approval

3) Formal order to Vipps

The respective TSP or Bank have to create and send a formal order to Vipps as an electronically signed document, signed by TSP or Bank.

This order should contain:

New RA:

• Detailed information about the CA
• Approval from BITS (from step 2)

Move or merger of RA:

• The purpose of the move or merger of the mentioned RA
• Detailed move or merger from and to what CA
• Approval from BITS (from step 2)

Sign it electronically and send it by email to marita.gustavsen@vipps.no with cc lise.aas@vipps.no and lam.van.ngo@vipps.no

Trenger vi noe mer ved opprettelse av ny RA?

Bank ønsker detaljer om tekniske løsninger.

The respective TSP or Bank have to fill out required order forms and send it to Vipps signed before or during the RA ceremony.

A copy must be sent before the RA ceremony.

• TSP/Bank fills out the required order form.
• Send a copy before the RA ceremony by email to marita.gustavsen@vipps.no with cc lise.aas@vipps.no and lam.van.ngo@vipps.no

Order form templates can be found here: Order forms and information

Skjema for RA Naming legges her

Primary CAO token "Dongle" is normally stored in a safe at the respective TSP (CA responsible).

The respective Key Custodian for the TSP is responsible to carry and bring the RA XML request and the Primary CAO token "dongle" to the RA ceremony.

• Create an RA XML request on the TSP system, for example through HAT tool.
• Make sure that the USB stick is new and unused
• Make sure that the Key Custodian have approved identification such as a passport or driver license (if the Key Custodian is a non-Norwegian citizen, they must bring their passport)

Vipps will ensure that everything is in place and coordinate the ceremony and switchover with all stakeholders.

Check that the following is in place:

•  BITS approval - If not provided by the TSP or Bank, contact BITS and verify
•  Formal order received
•  Signed order forms
  •  Signed - Naming of RA (Required)
  •  Signed - Revoke RA XML Request (Optional)
•  TSPs Primary CAO token
•  TSPs/Bank RA XML Request

If all is in place, all stakeholders align and agree on date and time for the following:

•  1. RA ceremony
•  2. Activation of New RA XML Sign Certificate
•  3. Switchover 
•  4. Revoke RA XML (Optional)

Normally step 2, 3 and 4 happens within the same 24h.

Vipps will send out a meeting invite for the ceremony and the switchover.

Create and send out the invitation to all stakeholders.

The invitation should contain, but not limited to:

• Purpose and description
• Date
• Time
• Duration
• Virtual Meeting Link or Address
• Attendees and contact points
• Information on what to bring