Push Notification Signature Authentication using MAS and OAS SDK

In an earlier posts we covered secure channel ransaction signing and push notification authentication with MAS. In this post we will combine these two to achieve secure channel transaction signing via push notifications. Pre-requisites Prior to starting, it is assumed you have successful gone through both of the previous posts…

Push Notification Authentication using Firebase and MAS

In this tutorial we will configure DIGIPASS Gateway and Mobile Authenticator Studio to be able to perform push notification authentications. Here we assume you have configured MAS, USW, DP Gateway and OAS. We will extend the MAS configuration to include the end points for updating the push notification registration identifier…

Secure Offline Transaction Signing using MAS

You have activated an MDL MAS token and now wish to generate OTPs based on some transaction data and defeat man-in-the-middle attacks. This can be done by creating a secure channel message, encode it into a Cronto image (color QR Code) and use the out of the box Secure Transaction…

Creating a client component

In order for an application to communicate with OAS, we need to create a client component. We can do this by logging into the Web Administration Service (WAS), clicking on the Clients tab and selecting the Register list item: Here we need to define the following: Client Type: this is…

MAS MDL Online Activation with USW and DP Gateway

You have OAS, USW and DP Gateway installed and configured. Now you want to have a mobile application to generate OTPs and downloaded Mobile Authenticator Studio (MAS) but would like to have a fully online activation method. Getting Started First we'll extract the file MAS_X.XX.X_TwoStep.zip,…

OVA - no suitable destination disk(s) found

You've downloaded the OneSpan Virtual Appliance installation package, setup the machine according to the required specifications and boot it. Upon booting it you expect for it to install itself but after a few minutes notice the following error on the screen: OVA requires you to specify IDE hard drives. Once…

cert_trust_revocation_status_unknown

So you've configured your SMS gateway in MDC and are receiving an error when testing it. When you dig deeper into the logs you notice it is actually a curl error: certgetcertificatechain trust error cert_trust_revocation_status_unknownThis error indicates that the certificate revocation list (CRL) is not up…

Generating and validating a VOTP using the OAS SDK

OAS supports sending OTPs via SMS, email and voice; these are called virtual one-time-passwords (VOTP). Before we get started, we have to make sure that we have configured MDC for SMS delivery and have set up our development environment for the SOAP wrappers. We will require a Virtual DIGIPASS in…