📄️ Configure secure vault
Configures the secure vaults that hold the cryptographic keys for OID4VCI and OpenID4VP operations. The iGrant.io vault must stay enabled. If you enable the Hashicorp vault, you must give the username, the password, the address and the namespace. If you enable the QTSP vault, you must give the CSC URL, the client ID, the client secret and the user ID.
📄️ Read secure vault
Reads the current secure vault configuration of the organisation. The response shows each vault and tells you if it is enabled. The service does not send a field that has no value.
📄️ Update secure vault
Updates the secure vaults that hold the cryptographic keys for OID4VCI and OpenID4VP operations. Send the full configuration. The iGrant.io vault must stay enabled. If you enable the Hashicorp vault, you must give the username, the password, the address and the namespace. If you enable the QTSP vault, you must give the CSC URL, the client ID, the client secret and the user ID.
📄️ Configure Qualified Trust Service Provider (QTSP) credential
Selects the Qualified Trust Service Provider (QTSP) signing credential that the wallet uses for remote qualified electronic signatures. Configure and enable the QTSP vault before you call this operation. The service returns an empty body.
📄️ Read Qualified Trust Service Provider (QTSP) credential
Reads the details of 1 Qualified Trust Service Provider (QTSP) signing credential. The wallet reads the details from the QTSP through the Cloud Signature Consortium (CSC) API. Configure and enable the QTSP vault before you call this operation.
📄️ List Qualified Trust Service Provider (QTSP) Credentials
Lists the Qualified Trust Service Provider (QTSP) signing credentials that the organisation can use. The wallet reads the list from the QTSP through the Cloud Signature Consortium (CSC) API. Configure and enable the QTSP vault before you call this operation.
📄️ List keys
Lists the signing keys of the organisation, grouped by secure vault. The wallet uses these keys to sign OID4VCI credentials and OpenID4VP responses.
📄️ Create key
Creates a new ECDSA P-256 key in a secure vault. The wallet uses the key to sign OID4VCI credentials and OpenID4VP responses. The vault sets the key type, the curve and the algorithm, so there is no parameter for them.
📄️ Delete key
Deletes a key from the secure vault. This operation needs a request body: send `{'confirm': 'DELETE'}`. The service refuses the request when the body is missing.
📄️ Generate CSR
Generates a Certificate Signing Request (CSR) for a key in the secure vault. Send the CSR to a Certificate Authority, then upload the signed certificate chain with the upload certificate chain operation.
📄️ Upload certificate chain
Uploads a certificate chain and links it to a key in the secure vault. The wallet then adds the chain as the `x5c` value of the key.
📄️ List secure vaults
Lists the secure vaults that you can configure for OID4VCI and OpenID4VP key storage. The organisation must have a deployed OpenID digital wallet.