In an earlier posts we covered secure channel ransaction signing [https://vie-labs.com/secure-offline-transaction-signing-using-mas/] and push notification authentication with MAS [https://vie-labs.com/push-notification-authentication-using-firebase-and-mas/]. In this post we will combine these two to achieve secure channel transaction signing via push notifications. Pre-requisites Prior to starting, it is assumed you have…
In this tutorial we will configure DIGIPASS Gateway and Mobile Authenticator Studio to be able to perform push notification authentications. Here we assume you have configured MAS [https://vie-labs.com/mas-online-activation-with-dp-gateway/], USW, DP Gateway and OAS. We will extend the MAS configuration to include the end points for updating the…
You have activated an MDL MAS token and now wish to generate OTPs based on some transaction data and defeat man-in-the-middle attacks. This can be done by creating a secure channel message, encode it into a Cronto image (color QR Code) and use the out of the box Secure Transaction…
In order for an application to communicate with OAS, we need to create a client component. We can do this by logging into the Web Administration Service (WAS), clicking on the Clients tab and selecting the Register list item: Here we need to define the following: 1. Client Type: this…
You have OAS, USW and DP Gateway installed and configured. Now you want to have a mobile application to generate OTPs and downloaded Mobile Authenticator Studio (MAS) but would like to have a fully online activation method. Getting Started First we'll extract the file MAS_X.XX.X_TwoStep.zip,…
You've downloaded the OneSpan Virtual Appliance installation package, setup the machine according to the required specifications and boot it. Upon booting it you expect for it to install itself but after a few minutes notice the following error on the screen: OVA requires you to specify IDE hard drives. Once…
So you've configured your SMS gateway in MDC and are receiving an error when testing it. When you dig deeper into the logs you notice it is actually a curl error: certgetcertificatechain trust error cert_trust_revocation_status_unknown This error indicates that the certificate revocation list (CRL) is not…
OAS supports sending OTPs via SMS, email and voice; these are called virtual one-time-passwords (VOTP). Before we get started, we have to make sure that we have configured MDC for SMS delivery [https://vie-labs.com/configuring-mdc-for-sms-delivery/] and have set up our development environment for the SOAP wrappers [https://vie-labs.com/…