BaswareONE OFTP2 certificates renewal


Summary:

In order to maintain our security standard, Basware has to renew the OFTP2 certificates associated with the BaswareONE service. The certificates for the test and production environment will need to be replaced.
Basware is using a Globalsign root certificate which is by default trusted by most software providers.

Actions are required if your applications are connecting via OFTP2 to oftp2.baswareone.com:6619.

It's crucial that the certificate renewal is executed by you at the same time as mentioned in the instructions below. Failing to replace the certificate at these intervals will prevent you from sending or receiving Business Documents via the Basware Network.

Instructions:

Production environment:

How: You can download the public key (and the complete certificate chain, including CA and intermediate certificates) here.
When: The renewal of the certificates on the production environment will be performed on Monday 8th of August 2022 between 07:00 UTC and 08:00 UTC.
URL: oftp2.baswareone.com
SSID: O094500000005413512 or O093410000000069426

 

Details of the certificate that requires replacement:

Serial Number: 43D95A5E63BA70A28D986846
Issuer: GlobalSign GCC R3 DV TLS CA 2020
Subject: CN = oftp2.baswareone.com
Validity Date: from Sat 17 Jul 2021 8:17:09 GMT to Sat 13 Aug 2022 8:17:09 GMT

 

Frequently asked questions:

Q: How do I know which certificate to download and use with the production connection?
A: You can download the certificate and the complete certificate chain here.

Q: How do we know if we receive files from the Basware Network through this OFTP2 production channel?
A: Check if you have an OFTP2 connection setup with a SSID = O094500000005413512 or O093410000000069426 and IP address = 63.34.85.186

Q: How do we know if we send files to the Basware Network through this OFTP2 production channel?
A: Check if you have an OFTP2 connection setup with a SSID = O094500000005413512 or O093410000000069426 and URL = oftp2.baswareone.com

Q: What happens if we cannot replace the certificate at that time?
A: You will no longer be able to send files to Basware or you will no longer be able to receive files from Basware. 

Q: What should we do if we replaced the production certificate on the 8th of August at the communicated time frame but observe errors when trying to send or receive Business Documents?
A: Please try to send or receive documents again after 08:00 UTC for production. If you encounter issues afterwards, please contact our Customer Support.

Q: Can we perform the certificate replacement before or after the announced time frame?
A: No. The certificate has to be replaced at that announced date & time to avoid that you can no longer send or receive Business Documents.

Q: When will we be able to download the new certificates (and the certificate chain)?
A: The new certificates including the complete certificate chain can be found on this page or directly downloaded via this link.

Q: Where do I download the new certificates from?
A: The new certificates including the complete certificate chain can be found on this page or directly downloaded via this link.