BaswareONE SSL certificate renewal


Summary:

In order to maintain our security standard, Basware has to renew the https certificates associated with the BaswareONE domain and sub domains. The certificates for the the production environment will need to be replaced. These certificates are used to secure the connection and transactions exchanged via our services.
Basware is using a GlobalSign root certificate which is by default trusted by most software providers.

Actions are only required when you make a connection through SSL and are having a point-to-point connection with Basware. This means when your system makes a connection to our webserver and perform a verification (validity check) on the used certificate of our webserver. You can download the certificates here for Production and here for Test environment.

If you are using our web based solutions or portal (browsing to https://www.baswareone.com) to exchange business documents with your trading partners, no actions are required.

Please forward this message to your IT-department or hosting provider for their review and actions.

It's crucial that the certificate renewal is executed by you at the same time as mentioned in the instructions below. Failing to replace the certificate at these intervals will prevent you from sending or receiving Business Documents via the Basware Network.

Instructions:

Production environment:

How: You can download the public key (and the complete certificate chain including CA and intermediate certificates) for production here.
When: The renewal of the certificate on the production environment will be performed on Saturday the 7th of August between 06:00 UTC and 09:00 UTC.
URL: *.baswareone.com and *.basware.be


Details of the certificates that require replacement:

*.basware.be
Serial Number: 62cd57714fa2bb0c9bbe3408
Issuer: GlobalSign GCC R3 DV TLS CA 2020
Subject: CN = *.basware.be
Validity Date: from Wed 06 Jan 2021 12:07:18 UTC to Tue 10 Aug 2021 09:06:38 UTC

*.baswareone.com
Serial Number: 7f5aae79dda9e20055cc4498
Issuer: GlobalSign GCC R3 DV TLS CA 2020
Subject: CN = *.baswareone.com
Validity Date: from Wed 06 Jan 2021 13:37:02 UTC to Tue 10 Aug 2021 09:04:11 UTC


Frequently asked questions:

Q: How do I know which certificate to download and use with the test or production connection?
A: The test and production connections use different certificates. Both certificates including the complete certificate chain can be found on this page.

Q: How do we know if we receive files from the Basware Network through this SSL production channel?
A: Check if you have an connection setup from the IP address = 63.34.67.92 and if your system performs a verification (validity check) on the used certificate of our webserver.

Q: How do we know if we send files to the Basware Network through this SSL production channel?
A: Check if you have an connection setup either with *.baswareone.com and *.basware.be or from the IP address = 52.17.163.51 and if your system performs a verification (validity check) on the used certificate of our webserver.

Q: How do we know if we receive files from the Basware Network through this SSL test channel?
A: Check if you have an connection setup from the IP address = 18.202.151.254 and if your system performs a verification (validity check) on the used certificate of our webserver.

Q: We are sending and/or receiving files via an AS2 connection, do we need to install this new certificate also?
A: No. When you are using AS2, there is no action required.

Q: What happens if we cannot replace the certificate at that time?
A: You may no longer be able to send files to Basware or you may no longer be able to receive files from Basware. There is a chance that you will only see warning messaging in you system.

Q: What should we do if we replaced the production certificate on the 7th of August at the communicated time-frame but observe errors when trying to send or receive Business Documents?
A: Please try to send or receive documents again after 08:00 UTC for production. If you encounter issues afterwards, please contact our Customer Support.

Q: Can we perform the certificate replacement before or after the announced time-frame?
A: No. The certificate has to be replaced at that announced date & time to avoid that you can no longer send or receive Business Documents.

Q: When will we be able to download the new certificates (and the certificate chain)?
A: The new certificates including the complete certificate chain can be found on this page.

Q: Where do I download the new certificates from?
A: The new certificates including the complete certificate chain can be found on this page.