Organisation wallet units

Update organisation wallet unit keystore type revocation status

PUT/v4/config/ows/wallet-provider/organisation-wallet-unit-keystore-types/revocation-status

Changes the status of one keystore type of the organisation wallet units (TS3 section 2.5.2). Every key attestation of the type, of every organisation wallet unit, gets the status on its status list entry, and the wallet provider records the status of the type. While the type is Revoked or Suspended, the wallet provider issues no new key attestation of it. Operational makes the key attestations of the type valid again and the type usable.

A type without key attestations is recorded too, so the status applies to its first key attestation. A key attestation of an organisation wallet unit has no device platform, so the body has none. The key attestations of the individual wallet units and every Wallet Unit Attestation stay as they are.

Language of the request sample

curl -X PUT 'https://demo-api.igrant.io/v4/config/ows/wallet-provider/organisation-wallet-unit-keystore-types/revocation-status' \
  -H 'Authorization: ApiKey <your-api-key>' \
  -H 'Content-Type: application/json' \
  -d '{
  "attestationType": "software",
  "securityLevel": "software",
  "revocationStatus": "Revoked"
}'

{
  "revocationStatus": "Operational",
  "keystoreType": {
    "attestationType": "string",
    "securityLevel": "string"
  },
  "revokedEntries": 1,
  "markedKeyAttestations": 12,
  "typeRegistered": true
}

Authorizations

Authorizationstringheaderrequired
Your API key with the prefix ApiKey: ApiKey <your-api-key>. Get an API key.
Scope:organisation-wallet-units:revoke

Body

application/json

The keystore type and its new status.

attestationTypeenum<string>required
The kind of evidence of the key attestations of the type. The key attestations of the holder keys of an organisation wallet are software.
Available options:software,android_keystore,ios_app_attest
Example:"software"
securityLevelstringrequired
The keystore of the type: strongbox, tee, secure_enclave or software, optionally followed by : and the id of its certificate (a certified keystore).
Example:"software"
revocationStatusenum<string>required
Revoked or Suspended makes the key attestations of the type invalid, and the wallet provider issues no new key attestation of the type. Operational makes them valid again and the type usable.
Available options:Operational,Revoked,Suspended
Example:"Revoked"

Response

application/json

The status that the wallet provider set, and what it changed.

revocationStatusenum<string>
The status that the wallet provider set.
Available options:Operational,Revoked,Suspended
keystoreTypeobject
The keystore type of the request.
revokedEntriesinteger
The distinct status list entries of the key attestations of the type that the wallet provider set: one shared entry with type_shared, one for each key attestation with per_ka.
Example:1
markedKeyAttestationsinteger
The key attestations whose revocationStatus changed.
Example:12
typeRegisteredboolean
Always true: the wallet provider recorded the status of the type, so it also applies to the key attestations that it issues later.