View Categories

PKI Credential User

3 min read

Prerequisites

PKI User is a user created in the system with authentication based on the Public Key Infrastructure (PKI), ensuring a high level of security for transactions and operations. PKI Users cannot log in directly to the system through the standard user interface.

Each PKI User’s permission can be managed like a normal Business Signatory in “Manage” > “Permissions” screen.

Creating a PKI User

To create a PKI User for a business, you must have Sole or Dual Business Signatory privileges.

Step 1: Hover on the “Manage” dropdown to reveal additional options.

  • The dropdown should be expanded smoothly, displaying PKI Users options.

Step 2: Click on PKI User

  • Then, the browser should navigate to a “PKI User Management” page.

Step 3: Click Source Business to select business.

  • “Create PKI User” section is displayed.

Step 4: Enter Display Name and click Create User.

  • Display popup to confirm create PKI User.

Step 5: Click OK.

Note: If you have Dual Business Authorities, your request requires approval to finalize the creation of a PKI User as follows:

  • Log in as other Dual Business Authorities User → Hover on “Manage” → Select “Authorise Requests” to approve pending requests.

Generate Certificates

The Generate Certificate function allows Business Admin Signatory to create digital certificates for PKI Users, enabling secure authentication when performing money transfer transactions within the system. The certificate ensures that each PKI User has a unique and verified identity before executing any money transfer operations.

Step 1: Hover on “Manage” → Click “PKI User” → Select Business →Click Manage Certificate.

  • Navigate to Certificate Management screen

Step 2: Click Generate Certificates

Step 3: Paste your Certificate Signing Request in Certificate Signing Request (CSR) and click Generate

Certificate is generated successfully.

For further detailed guide on how to use Certificate in API Transactions, refer to:

Regenerate API Key for PKI User

An API Key is a unique identifier issued to a PKI User, required for authentication each time the user interacts with the system via API. When an API Key is regenerated, the current API Key will be immediately invalidated, and a new API Key will be issued to the PKI User.

Step 1: Click Generate API Key

  • Display popup warming: The current API key will be immediately invalidated and a new key will be generated.

Step 2: Click OK

  • Generate API Key success

Toggle status PKI User Disable/ Enable

The Disable PKI User function allows a Business Admin Signatory to lock / unlock a PKI User account. Once disabled, the PKI User cannot perform any actions.

Step 1: Hover on “Manage” → Click “PKI User” → Select Business → Click Disable

  • Display popup to confirm Disable PKI User

Step 2: Click OK

  • PKI User is disabled

Note: Repeat above steps to enable PKI User.

Delete PKI User

The Delete PKI User feature allows Business Admins to delete a PKI user. Once deleted, the PKI user will no longer appear in the system.

Step 1: In Online Account → Hover on “Manage” → Click “PKI User” → Select Business → Display all PKI User in Business

Step 2: Click on Delete → Click on OK to confirm Delete PKI User → The PKI user will be removed from the list.

What are your Feelings