BaswareONE OFTP2 certificates renewal 2021


Summary:

In order to maintain our security standard, Basware has to renew the OFTP2 certificates associated with the BaswareONE service. The certificates for the test and production environment will need to be replaced.
Basware is using a Globalsign root certificate which is by default trusted by most software providers.

Actions are required if your applications are connecting via OFTP2 to oftp2.baswareone.com:6619.

It's crucial that the certificate renewal is executed by you at the same time as mentioned in the instructions below. Failing to replace the certificate at these intervals will prevent you from sending or receiving Business Documents via the Basware Network.

Instructions:

Production environment:

How: You can download the public key (and the complete certificate chain, including CA and intermediate certificates) here.
When: The renewal of the certificates on the production environment will be performed on Monday 9th of August between 07:00 UTC and 08:00 UTC.
URL: oftp2.baswareone.com
SSID: O094500000005413512 or O093410000000069426


Details of the certificate that requires replacement:

Serial Number: 3e868b3d8e6a8900081392da
Issuer: GlobalSign GCC R3 DV TLS CA 2020
Subject: CN = oftp2.baswareone.com
Validity Date: from Wed 06 Jan 2021 14:32:27 GMT to Tue 10 Aug 2021 13:45:19 GMT


Frequently asked questions:

Q: How do I know which certificate to download and use with the production connection?
A: You can download the certificate and the complete certificate chain here.

Q: How do we know if we receive files from the Basware Network through this OFTP2 production channel?
A: Check if you have an OFTP2 connection setup with a SSID = O094500000005413512 or O093410000000069426 and IP address = 63.34.85.186

Q: How do we know if we send files to the Basware Network through this OFTP2 production channel?
A: Check if you have an OFTP2 connection setup with a SSID = O094500000005413512 or O093410000000069426 and URL = oftp2.baswareone.com

Q: What happens if we cannot replace the certificate at that time?
A: You will no longer be able to send files to Basware or you will no longer be able to receive files from Basware. 

Q: What should we do if we replaced the production certificate on the 9th of August at the communicated time-frame but observe errors when trying to send or receive Business Documents?
A: Please try to send or receive documents again after 08:00 UTC for production. If you encounter issues afterwards, please contact our Customer Support.

Q: Can we perform the certificate replacement before or after the announced time-frame?
A: No. The certificate has to be replaced at that announced date & time to avoid that you can no longer send or receive Business Documents.

Q: When will we be able to download the new certificates (and the certificate chain)?
A: The new certificates including the complete certificate chain can be found on this page or directly downloaded via this link.

Q: Where do I download the new certificates from?
A: The new certificates including the complete certificate chain can be found on this page or directly downloaded via this link.