Page Comparison

The respective TSP or Bank have to fill out required order forms and send it to BankID signed before or during the RA ceremony.

A copy must be sent before the RA ceremony.

• TSP/Bank fills out the required order form.
• Send a copy before the RA ceremony by email to marita.gustavsen@bidbax.no with cc lise.aas@bidbax.no and lam.van.ngo@bidbax.nocreating a ticket here.
  

Order form templates can be found here: Misc forms for BankID Support

Primary CAO token "Dongle" is normally stored in a safe at the respective TSP (CA responsible).

The respective Key Custodian for the TSP is responsible to carry and bring the RA XML request and the Primary CAO token "dongle" to the RA ceremony.

• Create an RA XML request on the TSP system, for example through HAT tool.
• Make sure that the USB stick is new and unused
• Make sure that the Key Custodian have approved identification such as a passport or driver license (if the Key Custodian is a non-Norwegian citizen, they must bring their passport)

BankID will ensure that everything is in place and coordinate the ceremony and switchover with all stakeholders.

Check that the following is in place:

•  Formal order received
•  Signed order forms
  •  Signed - Naming of RA (Required)
  •  Signed - Revoke RA XML Request (Optional)
•  TSPs Primary CAO token
•  TSPs/Bank RA XML Request

If all is in place, all stakeholders align and agree on date and time for the following:

•  1. RA ceremony
•  2. Activation of New RA XML Sign Certificate
•  3. Revoke RA XML (Optional)

Normally step 2 and 3 happens within the same 24h.

BankID will send out a meeting invite for the ceremony

Create and send out the invitation to all stakeholders.

The invitation should contain, but not limited to:

• Purpose and description
• Date
• Time
• Duration
• Address
• Attendees and contact points
• Information on what to bring

BankID is to activate the new certificates.

Activate the new RA XML Sign certificate(s) in BankID COI.
Optional: Revoke the old certificate. Normally done within 24 hours after the ceremony.

Performed by AO with PKI involved.

BankID will inform the TSP/Bank when this has been done.

TSP/Bank needs to check that the new activated certificate is working towards ODS.

Optional: Check that the revoked certificate is no longer working towards ODS.