Video Screencast Help
Protect Your POS Environment Against Retail Data Breaches. Learn More.

How is the product certificate returned by RegisterSpcServer WS API used?

Created: 07 Oct 2010 • Updated: 08 Nov 2010 | 1 comment
Shitalkumar's picture
This issue has been solved. See solution.

RegisterSpcServer WS API returns a product certificate.  Is it used by SPC server in the context of the register call only or it is stored for usage lateron?

Thanks,

-Shital

Discussion Filed Under:

Comments 1 CommentJump to latest comment

Riaz Ahmad's picture

Protection Center stores the certificate returned from this method and uses it for all future communication. 

Product registration certificates are used for all “application” web service calls as they use mutual (or client) SSL authentication.  The certificates are exchanged during RegisterSPCServer(). SPC stores the product certificate during registration in order to validate that the data feed server it calls is actually the same server that registered.  This is the only use for product certificates.

The product certificate is not used for SSO.  Only the SPC certificate is used to sign the SSO ticket data.

You can also look at integration guide here, https://www-secure.symantec.com/connect/downloads/spc-integration-guide, where this is explained in more detail.

SOLUTION