The existing X.509 Public Key Certificates (Staging and Production) utilized by Myinfo v3, Myinfo business and Verify API is expiring on 07 Nov 2024.
Digital services integrated with Myinfo v3, Myinfo business or Verify API must switch to use new cert before 07 Nov 2024 to avoid service disruption.
The following table indicates the key dates and activities:
Stage | Date | Environment | Activities | Action | Status |
S1 |
25 Apr 2024 2359hrs |
Staging | We will publish the new cert in our STG environment | Partners to implement the new cert and switch the toggle to "New Certificate" in our portal. | Completed |
S2 |
15 Aug 2024 1200hrs |
Staging |
We will remove the old cert in our STG environment.
|
Partners to ensure that your digital service is successfully using new cert to validate payload signature. |
Completed |
P1 |
25 Apr 2024 2359hrs |
Production | We will publish the new cert in our PROD environment. | Partners to implement the new cert and switch the toggle to "New Certificate" in our portal. | Completed |
P2 |
07 Nov 2024 2359hrs |
Production |
We will remove the old cert in our PROD environment. We will remove the option to switch to old cert in our PROD environment. |
Partners to ensure that your digital service is successfully using new cert to validate payload signature. | Pending |
New Certificates are available at:
STG: https://go.gov.sg/stgnewcert
PROD: https://go.gov.sg/prodnewcert
User Guide to switch the toggle to "New Certificate"
- Log in to Singpass Developer and Partner Portal. Please ensure that your Singpass account is granted access to "Singpass API Developer and Partner Portal" by your Corppass Admin.
- On the left menu, select APIs, followed by My Apps.
- Find your App and click View.
- Select the App Configuration tab, download the new X.509 Public Key Certificate and implement the new cert on your digital service. Alternatively, you can download them at
STG: https://go.gov.sg/stgnewcert
PROD: https://go.gov.sg/prodnewcert
- After implementing the new cert on your digital service, return to App Configuration tab and click the Configure link. Switch the toggle to "New Certificate."
Take note that Step 5 is to be performed immediately after completion of Step 4.
- Repeat for the Production environment.
Frequently Asked Questions
-
What is an X.509 Public Key Certificate?
Integration to Myinfo v3, Myinfo business, or Verify API requires X.509 certificate that can produce RS256 digital signature for the purpose of server-to-server communication.
-
Why does the cert need to be renewed?
The current X.509 Public Key Certificates (Staging and Production) is expiring on 07 Nov 2024, digital services integrated with Myinfo v3, Myinfo business, or Verify API Digital services must switch to the new cert before 07 Nov 2024 to avoid service disruption.
-
Can I choose not to do the cert change?
If you are integrated with Myinfo v3, Myinfo business, or Verify API, failure to switch to the new cert before 07 Nov 2024 will result in disruption for your service.
-
When can my digital service start using the new certificate?
Please refer to the table of activities above. Both in STG and PROD, you can start using the new certificate from 26 Apr 2024 onwards. Your digital service must complete the switch to the new cert before 07 Nov 2024.
-
What is the toggle between “Old Certificate” and “New Certificate” in my app configuration for?
The toggle is provided to give flexibility to partners in integrating the new cert. When the toggle is set to "Old certificate”, our system will use the old cert to generate our payload signature. When the toggle is set to “New certificate”, our system will use the new cert to generate our payload signature. From 08 Nov 2024, the toggle will no longer be available. All digital service must use the new cert to validate our payload signature.
-
My digital service is using the new cert and encounters an error while validating the payload signature. What should I do?
Please ensure that you have toggled the switch in your app configuration to “New Certificates”. Refer to the user guide above.
-
Can I switch back the toggle to “Old Certificate” if I encounter issue while integrating the new cert?
Yes, you can toggle to “Old Certificate” before 07 Nov 2024. From 08 Nov 2024, the toggle option will no longer be available, and all digital service must use the new cert to validate our payload signature.
-
My commercial (non-government) digital service is integrated with Myinfo v4. Do I still need to switch to the new cert?
If your digital service had migrated to Myinfo v4, you are not required to switch to the new cert.
Comments
0 comments
Please sign in to leave a comment.