Page Comparison

10) Activation

BankID is to activate the new certificates.

Activate the new RA certificate(s) in BankID. Normally done within 24 hours after the ceremony.

Performed by AO with PKI involved.

11) Certificate check

Check that the certificate is working

TSP and Bank

TSP/Bank needs to check that the new activated certificate is working towards ODS. 

When moving from one CA to another:
Check that the new certificate have access to display the existing certificates on the old CA.

12) Switchover

Plan and implement the switchover.

TSP, Bank and

1. BankID:

   1. Do the switchover

   2. Those who perform the switchover will inform the TSP/Bank by phone or email when it has been done

2. TSP/Bank: Run test case sets to verify

   1. TSP/Bank: If successful, move to the next step

   2. BankID: If unsuccessful, investigate and resolve then move to next step

   3. BankID: if unsuccessful, not possible to fix, do a rollback

      • Bank/TSP: When rollback is done, run test case sets to verify

Order form templates can be found here: Misc forms for BankID Support

13) Revoke (optional)

Revoke the old certificate

BankID

BankID: Revoke the old certificate as decided in step 6.

14) Renewals 

Renewals of end users, merchants etc.

As decided in step 1.

TSP and Bank

When moving from one CA to another:

1. Bank renew end user BankID certificates

2. Bank asks merchants to renew merchant BankID's using HAT

3. Possible change of OTP Service by adding a new and then removing the old

This is best done outside of peak hours to reduce the risk of latencies.

15) Other changes

Name changes etc.

TSP, Bank and

BankID will follow up on activites internally:

•  BankID App
•  Biometri
•  BASS
•  ID check
•  Passord Reset
•  Splunk Partnerinnsikt
•  Antisvindel
•  Database
•  Tilgangspakker