Validation Sources<\/h3>\r\n\r\n\r\n\r\n
Viafirma Platform supports validation services from different Certification Authorities set up in its administration interface, Viafirma Manager<\/strong>:<\/p>\r\n\r\n\r\n\r\n \u2022 It allows management of Certification Authorities and Validation Authorities<\/strong> that you wish to support, to a system level or a concrete implementation level.<\/p>\r\n\r\n\r\n\r\n \u2022 To make it easier for System Administrators, it is used the default validation mechanism<\/strong> which comes in X509.V3 structure <\/strong>of the digital certificate.<\/p>\r\n\r\n\r\n\r\n \u2022 You can specify for each Certification Authority a specific validation service<\/strong>, if you do not want to use the default reported on the digital certificate.<\/p>\r\n\r\n\r\n\r\n \u2022 You can specify more than one service and Validation Authority for Certification Authority<\/strong>, and a priority order to be followed in case one of them is down. For example, “first verify via OCSP if there is no response, via CRL’s.” Even being able to choose (in case all services are giving an response error) if it may or may not continue operation without having secured the revocation status of the certificate.<\/p>\r\n\r\n\r\n\r\n In addition, to manage certification authorities which are authorized for each specific application (eg, “X application supports only eID”) and even it is allowed to enlist unrecognized certification authorities (for example, one created with PKI software) and its corresponding validation authorities, following the same rules and options with recognized Certification Authorities.<\/p>\r\n\r\n\r\n\r\n Viafirma Platform supports interaction with any TSA<\/strong> (Timestamping Authority) that comply the RFC 3161<\/strong> standar, required in signature formats (either long-lived signatures) which take timestamps within the signing evidences. This timestamping support can be used with any type of format that admits the inclusion of timestamping, signing mode, operation in client, server, etc..<\/p>\r\n\r\n\r\n\r\n First, we proceed to configure on Viafirma Manager’s administration interface the TSA services we have available at the platform. This configuration is very simple, since essentially all we need is the URL of the TSA service.<\/p>\r\n\r\n\r\n\r\n Subsequently, the platform can associate an application to<\/strong>:<\/p>\r\n\r\n\r\n\r\n \u2022 The timestampings authority or authorities <\/strong>(TSA) to be used in each case.<\/p>\r\n\r\n\r\n\r\n \u2022 The order of invocation of the TSA<\/strong>. This allows, for example, that even a TSA service is not available, the settings and app associated are used.<\/p>\r\n\r\n\r\n\r\n Finally, the system stores data for each operation such as TSA<\/strong> finally used in a signing operation, the response time<\/strong>, etc..<\/p>\r\n\r\n\r\n\r\n On next posts, we will talk about Roles of Access and Auditing<\/strong>, but in the meanwhile, we would like to hear any comments, questions or doubts you may have.<\/p>\r\nTime Stamping Authorities (TSA) Settings<\/h3>\r\n\r\n\r\n\r\n
![\"Usage](\"https:\/\/www.viafirma.com\/wp-content\/uploads\/2012\/03\/datos-de-uso-TSA1.jpg\" "\\"Usage")
<\/figure>\r\n\r\n\r\n\r\n
![\"el-sellado-de-tiempo\"](\"https:\/\/www.viafirma.com\/wp-content\/uploads\/2021\/05\/El-sellado-de-tiempo-768x576.webp\")
<\/div><\/a>![\"momentum-transformacion-digital\"](\"https:\/\/www.viafirma.com\/wp-content\/uploads\/2024\/01\/Momentum-transformacion-digital-768x511.webp\")
<\/div><\/a>![\"Sello](\"https:\/\/www.viafirma.com\/wp-content\/uploads\/2019\/11\/Sello-electronico-en-la-Administracion-publica-1024x683-1-768x512.jpg\")
<\/div><\/a>