Certificate Management for callback service to API endpoints - Arcot
search cancel

Certificate Management for callback service to API endpoints - Arcot


Article ID: 260608


Updated On:


CA Payment Security


This article looks to outline and track the certificates used in the interaction(s) listed below so they can be trusted by entities allowing Arcot to connect using mutual TLS. 
Arcot utilizes certificates that are valid for one year to ensure the highest level of security for transaction and other flow interactions. The most current certificates used by the Arcot service will be available and update as required.

The interactions will include the following:

  • Callback service of Arcot to entity using the certificate https://<silo>api.arcot.com/callback/apiv1/update-txn (trusted for outbound API call) 


Arcot’s recommendation is to trust the Root and Intermediate certificates only. If you are required to also trust the Leaf certificate, please ensure that all three certificates are loaded into your Trust Store. To avoid impact to service, the existing certificates must not be removed until they have expired.


mycardsecureapi_arcot_com_683667537.zip get_app
secure2api_arcot_com_583178714_1703163976667.zip get_app
tsysapi_arcot_com_583183043_1703163915163.zip get_app
secure7api_arcot_com_583181778_1703163915522.zip get_app
secure5api_arcot_com_583180702_1703163915811.zip get_app
secure4api_arcot_com_583179742_1703163916177.zip get_app