BaswareONE SSL certificate renewal


Summary:

In order to maintain our security standard, Basware has to renew the HTTPS certificates associated with the BaswareONE domain and sub-domains. These certificates will need to be replaced, as they are used to secure the connection and transactions exchanged via our services.
Basware is using a GlobalSign root certificate which is by default trusted by most software providers.

Actions are only required when you make a connection through SSL and have a point-to-point connection with Basware. This means when your system makes a connection to our web server and performs a verification (validity check) on the used certificate of our webserver. You can download the certificates here for Production and here for the Test environment.  .

If you are using our web-based solutions or portal (browsing to https://www.baswareone.com) to exchange business documents with your trading partners, no actions are required.

Please forward this message to your IT department or hosting provider for their review and actions.

It's crucial that you execute the certificate renewal at the same time as mentioned in the instructions below. Failing to replace the certificate at these intervals will prevent you from sending or receiving Business Documents via the Basware Network.

Instructions:

How:  You can download the public key (and the complete certificate chain including CA and intermediate certificates) for production here.
When: The renewal of the certificate on the production environment will be performed on Saturday the 20th of April 2024 between 09:00 UTC and 11:00 UTC.
URL: *.baswareone.com and *.basware.be


Details of the certificates that require replacement:

*.basware.be
Serial Number: 10ebb84621332f858a573377
Issuer: GlobalSign GCC R3 DV TLS CA 2020
Subject: CN = *.basware.be
Validity Date: ‎From Wednesday, ‎March ‎22, ‎2023 1:58:19 PM UTC to ‎‎Monday, ‎April ‎22, ‎2024 1:58:18 PM UTC

*.baswareone.com
Serial Number: 165d03a3abce2678febbe12d
Issuer: GlobalSign GCC R3 DV TLS CA 2020
Subject: CN = *.baswareone.com
Validity Date: ‎From Wednesday, ‎March ‎22, ‎2023 1:46:17 PM UTC  to ‎Monday, ‎April ‎22, ‎2024 1:46:16 PM UTC

 

Frequently asked questions:

Q: How do I know which certificate to download and use?
A: The connections use different certificates. Both certificates including the complete certificate chain can be found on this page.

Q: How do we know if we receive files from the Basware Network through this SSL production channel?
A: Check if you have a connection setup from the IP address = 63.34.67.92 and if your system performs a verification (validity check) on the used certificate of our webserver.

Q: How do we know if we send files to the Basware Network through this SSL production channel?
A: Check if you have a connection setup either with *.baswareone.com and *.basware.be or from the IP address = 52.17.163.51 and if your system performs a verification (validity check) on the used certificate of our webserver.

Q: How do we know if we receive files from the Basware Network through this SSL test channel?
A: Check if you have a connection setup from the IP address = 18.202.151.254 and if your system performs a verification (validity check) on the used certificate of our webserver.

Q: We are sending and/or receiving files via an AS2 connection, do we need to install this new certificate also?
A: No. When you are using AS2, there is no action required.

Q: What happens if we cannot replace the certificate at that time?
A: You may no longer be able to send files to Basware or you may no longer be able to receive files from Basware. There is a chance that you will only see warning messaging in you system.

Q: What should we do if we replaced the certificate on the 20th of April at the communicated time frame but observe errors when trying to send or receive Business Documents?
A: Please try to send or receive documents again after 11:00 UTC. If you encounter issues afterward, please contact our Customer Support.

Q: Can we perform the certificate replacement before or after the announced time frame?
A: No. The certificate has to be replaced at that announced date & time to avoid that you can no longer send or receive Business Documents.

Q: Where do I download the new certificates from?
A: The new certificates including the complete certificate chain can downloaded here for Production and here for the Test environment.