Table of Content

Introduction

RA Light is a self service for creating test users for the BankID Pre production (PreProd) environment.

It supports End user certificates for BankID and BankID for Mobile (special SIM cards required) and merchant certificates and activation (SKYMAT).

It implements a proper RA (Registration Authority) interface, but is "Light" in terms of features and perhaps quality.It uses the utility CA (also used by Nets), but the certificates are separate (prepended by 9578). Its intended use is for single and bulk creation of test users, not maintaining a user base.

It implements two roles - user and administrator. Users can create certificates and administrators can also revoke. Users can also unblock HA elements.

It is supported through the BankID PreProd support portal (https://servicedesk.bankidnorge.no/jira/servicedesk/customer/portal/1)

User Interface

The top menu has four sections as shown below

End User: Create end user Certificates for BankID and BankID for Mobile

Netcentric Bulk Order: Bulk Order from file of BankID

Merchant: Create and activate merchant certificates

Test Number Generator: Generate end user and merchant ID numbers (handy for creating a random test user)

Creating Users

1. Start by selecting the Test Number Generator (if you have your favorite ID number you can skip this part and proceed directly to the End User section)
   
   
   
   
   
2. End user is already pre selected, choose Male/Female or D-number.
3. Press Generate Number
4. This will take you to the End User section with the generated ID number filled in
   
   
   
   
   
   
5. You are now in search mode and if any existing certificates are found on this number they are listed (remember - the service is open with a common user - other may have the same favorite as you).
6. You are now ready to order

Netcentric

1. Fill in First name, Last name and BankID Friendly Name
2. Select the HA elements you want. The BankID testbank is the one with a predefined OTP and password (otp and qwer1234)
3. Press Order
4. The page will give a confirmation in green in the header and change to show information for the chosen ID number (the same as a search would show)
5. The top section shows the recorded contact info for the ID - this is just for your own use and not used by anyone. Perhaps use your own name and number for others to see. If a search returns contact info belonging to someone else, please consider to use a different ID number.
6. You need to scroll down past the HA elements to see the certificate you just ordered. Initially it will have an Orange icon indicating that the order is still in progress
   
7. When the backend confirms the order it will change to a green icon indicating that the certificate is ready for use
   
8. You can now test the user in PreProd (https://tools-preprod.bankid.no/bankid-test/auth) 

Mobile

1. Generated an ID or enter your favorite in the End User section - press search and check for existing contact info or certificates. Adjust accordingly.
2. Click the Mobile checkbox in "Order New BankID"
3. Fill in First name, Last name and phone number (the phone should already have the sim card inserted)
4. Take note of the activation code displayed bottom right
5. Press Order - this will initiate the activation process
6. Follow the steps on the mobile phone and use the activation code provided
7. Your new SIM card is ready for use

Merchant

1. Start by selecting the Test Number Generator (if you have your favorite ID number you can skip this part and proceed directly to the Merchant section)
   
2. Select Merchant
3. Press Generate Number
4. This will take you to the Merchant section with the generated ID number filled in
5. Press search to check if others have created a certificate
6. Fill in the name of the organization and the common name you want.
7. Press order
8. The page will give a confirmation in green in the header and change to show information for the chosen ID number (the same as a search would show)
9. The top section shows the recorded contact info for the ID - this is just for your own use and not used by anyone. Perhaps use your own name and number for others to see. If a search returns contact info belonging to someone else, please consider to use a different ID number.
10. You need to scroll down past the (now empty) order form to see the certificate you just ordered. Initially it will have an Orange icon indicating that the certificate is not yet activated (note - this is different from end user, no need to sit around and wait for a green thumbs-up)
11. Press the activate button, you will see a waiting message
12. When the backend confirms the order it will change to a green icon indicating that the certificate is ready for use
13. The .bid file is available on the right side

Bulk Order

The Preprod  RA supports bulk creation of BankID test certificates.

The current input field format of the file is (4 columns):

[Personal ID Number] [BankID Friendly Name] [Last Name] [First Name and possibly Middle Name]

The delimiter can be comma "," or semicolon ";" and the file format must be UTF-8 to support æ,ø,å. It is now possible to use Excel and export to CVS UTF-8 with Norwegian locale (uses semicolon as delimeter). Please note that four columns must be used as opposed to three before.

When the input file is selected it is automatically loaded and verified. Status is given in the status area. The verify option is therefore removed. The number of recorded BankIDs is listed per Personal ID Number.

Pressing "Order" works as before, but the output is given immediately and can be copied into your own records.

Current limitations

1. Space is not permitted in Last name (use underscore)
2. Not all characters are supported äöÄÖ is known to cause errors - your milage may vary

Helpful suggestions

1. Use Excel and save as CSV UTF-8
2. Make sure the cell format is Text, not number or automatic. This will strip the leading 0 from F.nr.
3. Add a check column for length of F.nr (=LEN(cell ref)) or an automatic check that will add the leading 0 (=IF(LEN(A1);A1;CONCATENATE("0";A1))
4. Make a template with this and copy your list into it - have the checks in column >5
5. Have a separate tab where the first four columns are copied from the original tab - this is your export tab