Vídeo Tutorial Mock Bank #2 - Create Transport Cert (EN-GB)

today i'm going to show you how to
create a transport certificate
on the directory for a software
statement
the software statement that i'll be
using was created in the previous video
for those that aren't aware a transport
certificate is used to establish a
neutral tls connection between the
client
which is you and the resource
server that you're trying to access the
server that is being accessed will have
the
chain of trust from the directory in
order to validate that the client
is using the certificate signed by the
directory in order to validate
it is an authorized request in order to
do this you need to navigate to
your organization and then to your
software statement
when you scroll down on the software
statement you will have a certificate
press new certificate and for this
example
because this software statement has
roles we'll be using
a vr cac when you press continue
it will send you to documentation
in order for you to help create a br cac
once you've downloaded this file we can
then have a look
and see what's inside the file
you'll notice in here that you have a
few files
for a brcl and a brcap
for this particular demonstration we'll
be using
a bicap now you can see a lot of
different items in here which you will
need to fill in
and our organization and software
statement
specific firstly the business category
this can either be a government entity
a business entity a non-commercial
entity
or a private organization for
my software statement we are pack we are
a private organization
the geostation country name is of course
brazil
the serial number which is the cmpg
can be found on your organization under
registration
number
the country name is of course brazil the
organization name
can be found inside of your organization
in
the organization details uh organization
name
and you have the state or
province name which
can be found again in the organization
details
you have the locality name which can be
found in your organization
and then you have the organizational
unit name
this is the organization id
from the directory you can find this
in the url of your browser or
alternatively you can do an api call
to get the same information
and the next step is the uid and as
described here this is the software
statement id
issued by the directory this can be
found again
in the url of your browser or via the
api
call
the final part we need to fill in is the
common name
as described it could be a fully
qualified domain name
or a wildcard for this example i'm going
to be using
medium
if you are using a fully qualified
domain name this of course needs to be
added
to the old name once all of these steps
are done
we can then use the brcl.sh
script which as you can see creates a
new
csr and private key pair
with the out
the out files of vrcac.csr and vr
pack.key
it takes the file of brcac.cnf
which you just edited and adds all the
necessary values
what you'll see once it's done is you'll
get a
output of the csr that's been created
you'll get a
csr file and you'll get a br pack
private key the private key is something
that you want to protect and do not pass
around once you've done that you can go
back to the directory
and upload your csr you navigate to
where you created the certificate
and click on the vrcac.csr
press continue
and you have now created a vr pack
transport certificate on the open
banking directory
once this is done you can then download
the pen file
which will be then used for the dcr
request later on