Key generation for abis partner

1

Hello,

I noticed that mpartner-default-abis was not present in the key_alias table. I therefore tried to upload the certificate provided in the documentation, but it was already expired

After uploading a new certificate that I generated, I started encountering an issue during the decryption step in mock-abis. This suggests that there is a key generation process that should have been performed beforehand, which I might have missed.

Could you please guide me on the correct procedure to generate the required keys? I also attempted to use the Key Manager UI in admin portal, but I could not proceed because the PARTNER application ID was not available as an input option.

I attempted to generate a CSR in KeyManager using the following parameters:

applicationId: PARTNER

referenceId: mpartner-default-abis

However, the API returned the following error:

KER-KMS-002 - ApplicationId not found in Key Policy. Key/CSR generation not allowed.

At the same time, the KeyManager logs indicate that during the ABIS flow the certificate lookup is performed with the same values:

applicationId: PARTNER

referenceId: mpartner-default-abis

Could you please provide guidance on how we should proceed so that we can successfully validate ABIS as a partner and complete the UIN generation process?

2

Hi aouahli99

Thank you for reaching out to us. Let us check on the issue and revert back to you as soon as possible
Regards,
Mrudula
on behalf of Team MOSIP

3

ok thanks a lot ,i will be waiting for your response

4

Hello @mrudula_ch ,

Any update please

Thanks

5

HI @aouahli99
hope u are well, This document that you mentioned had expired certificates, can u share the link to same ?
also this abis partner is a static one s, so you are right to expect failure, when u try to use self generated certificates.

You can follow mosip-infra/deployment/sandbox-v2/docs/abiscert.md at 05e4d91f9c7bccf60774017f37836a1ed15d2a5c · mosip/mosip-infra
this doc for uploading the correct certificates.

Thanks
Mahesh

6

Hello @Mahesh-Binayak ,

Here is the link : mosip-infra/deployment/v3/mosip/mock-abis/certs_upload/postman/collection.json at v1.2.0.2 · mosip/mosip-infra

im installing V3, the link you shared will work?

Thanks in advance

7

hi @aouahli99
Yes this link will work for any versions deployed after 1.1. 5
thanks and regards
Mahesh Binayak

8

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.