Page History

...

The merchant generates a secret key and a CSR (Certificate Signing Request). In a CSR, the Organizational Unit Name (OU) field of the Subject element must be entered with the value MerchantId (the number of the merchant registered in IPS Assist). The MerchantId value must consist of 15 characters M000...00<EXTMERCHANT_ID>, where EXTMERCHANT_ID is the unique identifier generated during registration. The keyUsage element must specify the purpose of the "digitalSignature" key.

When registering a new certificate, check At the initial registration of the certificate, the registration of the merchant in the NSPK is obligatory. Therefore, the box "Register a new merchant in the NSPK" and upload a new certificate request using the "Upload CSR" button. Next, a standard browser window will open for selecting a CSR fileis checked and inactive. There is also an information that no certificate has been generated yet.

After loading the request, a certificate line is created in the table with the status "Active" and its validity period. Above the table is a link to a pre-made JSON Web Key Set (JWKS) with this certificate. The certificate can also be downloaded separately,  using the context menu (Get certificate).

...