Learn

Status list signers

Specifies paths and operations for managing status list signers.

Create a new status list signer

Uses an existing IACA to sign a status list signer (intermediate certificate) that can be used to sign status list tokens.

  • Only available in implementations using unmanaged (external) IACAs.
  • A maximum of three Status List Signers can be created per tenant.

Analytic events

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_START
  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_SUCCESS
  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_CREATE_FAIL
Roles: ["admin"]
SecuritybearerAuth
Request
Request Body schema: application/json
required
iacaId
required
string <uuid>

Internal identifier of the IACA used to sign this status list signer:

  • Must be the same IACA used to sign credentials that are included in a status list signed by this status list signer.
  • Must be an unmanaged (external) IACA.
Responses
200

Status list signer created

409

Maximum number of status list signer certificates reached. Please delete an existing certificate before creating a new one.

post/v2/credentials/mobile/status-list-signers
Request samples
application/json
{
  • "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6"
}
Response samples
application/json
{
  • "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
  • "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",
  • "active": true,
  • "certificatePem": "string",
  • "certificateFingerprint": "475DA948E4BA44D9B5BC31AB4B8006113FD5F538",
  • "certificateData": {
    }
}

Retrieve all status list signers

Retrieves all existing status list signers.

Analytic events

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_START
  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_SUCCESS
  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_LIST_FAIL
Roles: ["admin"]
SecuritybearerAuth
Responses
200

Status list signers retrieved

get/v2/credentials/mobile/status-list-signers
Request samples 
Response samples 
application/json
{
  • "data": [
    ]
}
Retrieve a status list signer
Retrieves an existing status list signer.




Status list signer operations are only available in implementations using unmanaged (external) IACAs.




Analytic events


    

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_START 
    • 

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_SUCCESS 
    • 

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_RETRIEVE_FAIL
    • 



Roles:  ["admin"]
SecuritybearerAuth 
Request 
path Parameters
statusListSignerId
required
string <uuid> 
Status list identifier


 
Responses 
200
Status list signer retrieved


get/v2/credentials/mobile/status-list-signers/{statusListSignerId}
Request samples 
Response samples 
application/json
{
  • "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
  • "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",
  • "active": true,
  • "certificatePem": "string",
  • "certificateFingerprint": "475DA948E4BA44D9B5BC31AB4B8006113FD5F538",
  • "certificateData": {
    }
}
Update a status list signer
Updates the status of an existing status list signer.




Only available in implementations using unmanaged (external) IACAs.




Analytic events


    

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_START 
    • 

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_SUCCESS 
    • 

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_UPDATE_FAIL
    • 



Roles:  ["admin"]
SecuritybearerAuth 
Request 
path Parameters
statusListSignerId
required
string <uuid> 
Status list identifier


 
Request Body schema: application/json
required
active
boolean
Status list signer status. Must be set to true for this status list signer to be available for signing status lists.


 
certificatePem
string
Status list signer certificate in PEM format. The certificate must be:


    

  • Valid
    • 

  • Not expired
    • 

  • Compliant with the details provided in the Certificate Signing Request returned when the status list signer was created
    • 



 
Responses 
200
Status list signer updated


put/v2/credentials/mobile/status-list-signers/{statusListSignerId}
Request samples 
application/json
{
  • "active": true,
  • "certificatePem": "string"
}
Response samples 
application/json
{
  • "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
  • "iacaId": "080c670a-2e90-4023-b79f-b706e55e9bc6",
  • "active": true,
  • "certificatePem": "string",
  • "certificateFingerprint": "475DA948E4BA44D9B5BC31AB4B8006113FD5F538",
  • "certificateData": {
    }
}
Delete a status list signer
Deletes an existing status list signer.




Only available in implementations using unmanaged (external) IACAs.




Analytic events


    

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_START 
    • 

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_SUCCESS 
    • 

  • MOBILE_CREDENTIAL_STATUS_LIST_SIGNER_DELETE_FAIL
    • 



Roles:  ["admin"]
SecuritybearerAuth 
Request 
path Parameters
statusListSignerId
required
string <uuid> 
Status list identifier


 
Responses 
204
No Content


delete/v2/credentials/mobile/status-list-signers/{statusListSignerId}
Request samples 
➔ Next to Status list configuration