Certificate Management for callback service to API endpoints - Arcot
search cancel

Certificate Management for callback service to API endpoints - Arcot

book

Article ID: 260608

calendar_today

Updated On:

Products

CA Payment Security

Issue/Introduction

This article looks to outline and track the certificates used in the interaction(s) listed below so they can be trusted by entities allowing Arcot to connect using mutual TLS. 
Arcot utilizes certificates that are valid for one year to ensure the highest level of security for transaction and other flow interactions. The most current certificates used by the Arcot service will be available and update as required.

The interactions will include the following:

  • Callback service of Arcot to entity using the certificate https://<silo>api.arcot.com/callback/apiv1/update-txn (trusted for outbound API call) 

Resolution

Arcot’s recommendation is to trust the Root and Intermediate certificates only. If you are required to also trust the Leaf certificate, please ensure that all three certificates are loaded into your Trust Store. To avoid impact to service, the existing certificates must not be removed until they have expired.

Attachments

mycardsecureapi_arcot_com_1178186483.zip get_app
secure2api_arcot_com_901925167.zip get_app
secure4api_arcot_com_901922358.zip get_app
secure5api_arcot_com_901924144.zip get_app
secure7api_arcot_com_901923430.zip get_app
tsysapi_arcot_com_903036317.zip get_app