UAE PASS
  • UAE PASS
  • Overview
  • Getting Onboarded with UAE PASS
    • Onboarding Process for UAE PASS Service Providers
      • Initiation Phase
      • Development Phase
      • Assessment Phase
      • Go live Phase
  • Quick Start Guide - UAE PASS Staging Environment
    • User Account Types
    • Create Staging UAE PASS Account
    • Upgrade Staging UAE PASS Account
    • Testing Credentials for POC
    • Conduct a POC with UAE PASS Authentication
  • Feature Guides
    • Authentication
      • Web Integration
        • Introduction
        • Pre-Requisites
        • Endpoints
        • 1. Authorization Code
        • 2. Access Token
        • 3. User Information
        • 4. Logout
        • Login Button
        • Authentication Postman Walkthrough
      • Mobile Integration
        • Introduction
        • Pre-Requisites
        • Requirements
        • Guide
          • SDK
          • API
        • SDK Integration
      • Token Validation API
        • Introduction
        • Pre-Requistes
        • Endpoints
        • Integration Steps
          • 1. Verify access token API using Basic Authentication
          • 2. Obtaining Authenticated User Information from the Access Token
        • Validation Decisions
      • User Linking
        • Automatic Linking
        • Manual Linking
        • Corporate Account
    • Digital Signature
      • Digital Signature (Single Document)
        • Signing Guide
          • Endpoints
          • Document Signing Steps
            • 1. Token
            • 2. Create Signer Process
            • 3. Sign Document
            • 4. Obtaining Document
            • 5. LTV Configuration
              • Integration Web Services
              • Postman Collection for LTV
            • 6. Deleting Document
          • Document Signature verification Process
          • Postman Collection for Digital Signature
            • Digital Signature Postman Walkthrough
        • Verification API Integration
          • Web Service Details
          • Postman Collection for Signature Verification API
      • Digital Signature (Multiple Document)
        • Signing Guide
          • Endpoints
          • Document Signing Steps
            • 1. Token
            • 2.Create Documents
            • 3. Create Signer Process
            • 4. Sign Document
            • 5. Obtaining Document
            • 6. LTV Configuration
              • Integration Web Services
              • Postman Collection for LTV
            • 7. Deleting Document
          • Document Signature verification Process
          • Postman Collection for Multiple Document Signing.
    • e-Seal
      • Introduction
      • DESC Process for Dubai Entities
        • Process overview
        • Detailed DESC process description
      • ICA Process for Non-Dubai Entities
        • Onboarding Process
        • Obtaining Credentials and Certificates
      • Integration Web Service
        • PAdES eSeal Signing
        • CAdES eSeal Signing
        • eSeal verification
        • eSeal error codes
      • Postman Collection
    • Hash Signing
      • Introduction
      • Hash Signing (Single Document)
        • Hash Signing (Java SDK Set Up)
          • Quick Setup
          • Hash Signing Process
            • 1. Start the Process
            • 2. Initiate Signing Process
            • 3. Sign PDF Document
          • Endpoints
          • Postman Collection
          • Utility Files
      • Bulk Hash Signing (Multiple Documents)
        • Quick Setup
        • Hash Signing Process
          • 1. Start Signing Process
          • 2. Initiate Signing Process
          • 3. Sign PDF Document
        • Endpoints
        • Postman Collection
  • Web Registration
    • Introduction
    • Steps to create account
    • Endpoints
      • 1. Access Code
      • 2. Access Token
      • 3. User Information
  • Facial Biometric Transactions Confirmation
    • Web Integration
      • Endpoints
      • Integration Steps
        • Obtain Authorization Code
        • Obtain Access Token
        • Obtain User Info
        • Log out User
    • Mobile Integration
      • Mobile Integration Guidelines
  • Guidelines
    • Use-Case Guidelines
      • Standard Authentication Scenarios for Service Provider Use Cases
      • Standard Digital Signature Scenarios for Service Provider Use Cases
      • Standard Implementation Guidelines
    • Design Guidelines
      • UAEPASS Button Guideline
      • Text Message Guidelines
  • Resources
    • Attributes List
    • Sample Apps
    • Staging Apps
    • Assets
  • FAQ
    • Common Integration Issues
  • Versioning
Powered by GitBook
On this page

Was this helpful?

  1. Feature Guides
  2. e-Seal
  3. DESC Process for Dubai Entities

Detailed DESC process description

  1. Customer approaches DESC Team/UAE PASS Team for eSeal certificate.

    • The customer approaches the designated contacts from UAE PASS team/DESC team to initiate the eSeal issuance process.

    • The customer should elaborate at least at a high level on the business use case(s) where the eSeal signing is needed.

    • The customer should specify the number of eSeal certificates required. E.g., there could be multiple departments within the same entity where each department needs a dedicated eSeal that displays the Department name being the document issuer.

  2. Forward the request to UAE PASS team.

    • If the customer approached DESC team first, then the request is going to be forwarded to UAE PASS team for evaluation of the business case and applicability of eSeal use. The customer can skip this step by approaching UAE PASS team directly.

  3. Share the eSeal Questionnaire.

    • Once a request is received from the customer directly or through DESC team, UAE PASS team prepare a consolidated email covering the eSeal questionnaire, Seal implementation assessment and send it to the customer while keeping DESC team in the loop:

    • In that email to customer, UAE PASS team will ask the Customer to fill-in the questionnaire in order to evaluate the business case(s) and ensure that eSeal is applicable for such business case(s).

  4. Fill-in the eSeal Questionnaire form.

    • The customer studies the guiding information provided by UAE PASS team and go through the list of shared documents,

    • The customer fills the eSeal questionnaire and shares it back with UAE PASS team.

  5. Verify the eSeal Use case.

    • UAE PASS team analyze the questionnaire answers and conclude whether eSeal is applicable or not,

    • UAE PASS team share the analysis results with the customer and DESC team (if the request came through DESC).

  6. Conduct a kick-off and planning call.

    • Of the eSeal is applicable to the use case(s) demonstrated by the customer, UAE PASS team interacts with the customer to arrange a kickoff and planning call. During the call, the customer will be introduced to the overall process and high-level timeline will be agreed. UAE PASS team and the customer will also initiate discussion about a detailed implementation plan to be mutually agreed.

    • UAE PASS team instructs the customer to approach DESC RA team for initiating the eSeal certificate issuance process. This shall result in an email sent from UAE PASS team to DESC RA while keeping the Customer in the loop.

  7. Share requirements and relevant documentation.

    • Once the initiation email is received from UAE PASS team, DESC RA team prepare a consolidate email covering the following and send it to the customer while keeping UAE PASS team in the loop:

      1. Subscriber agreement 2. Certificate request form 3. List of required documents from the customer, which are: o Proof of Entity’s existence: ▪ Government entities: Establishment Degree/Resolution ▪ Non-Government entities: Trade license

      o Proof of association between the authorizer and the organization: ▪ A reference to a trusted public authoritative source ▪ Formal document o Proof of association between the certificate Common Name and the organization o ID copy of the authorizer o ID copy of the certificate requester

      In that email to customer, DESC team will ask the customer to study the provided information and go through the shared documents. DESC team will also suggest a time slot for a meeting to discuss eSeal certificate requirements and timeline.

  8. Review eSeal certificate requirements

    • The customer goes through the list of requirements and the guiding information shared by DESC team then prepare clarifications required from UAE PASS team/DESC team.

    • Customer responds to DESC team’s email with confirmation on their availability for the meeting to discuss eSeal certificate requirements and timeline.

  9. Conduct a call to discuss eSeal certificate requirements and timeline

    • Answer clarifications raised by the Customer

    • Agree on the overall timeline with key milestones for the certificate issuance process

    • UAE PASS team to update the overall eSeal implementation plan to accommodate the agreed certificate issuance timeline

  10. Decide on TEST certificate information

    • The customer decides on the name (Subject DN) to be reflected on the test certificate, that should exactly match the production certificate. However as mandated by DESC practices, the word “TEST” needs to be added as a prefix to the Common Name of TEST certificates.

    • The customer shares the decided Subject DN with DESC team through email with copying UAE PASS team.

  11. Issue auth code for TEST certificate.

    • Once the TEST certificate Subject DN is received, DESC team initiate the certificate initiation on staging which will result in generation of authorization code.

    • DESC team share the authorization code with UAE PASS team for them to generate the CSR accordingly, the code will be shared through an email with copying the customer.

  12. Generate certificate request (CSR) for TEST

    • Once the authorization codes is received, UAE PASS team generate the key and CSR.

    • UAE PASS team share the CSR with DESC team through an email with copying the customer.

  13. Issue TEST certificate

    • Once the CSR is received, DESC team complete the certificate generation on staging.

    • DESC team share the generated TEST certificate with UAE PASS team through an email with copying the customer.

  14. Configure TEST certificate on staging

    • Once the TEST certificate is received, UAE PASS team complete the eSeal service configuration on staging.

    • UAE PASS team establishes readiness of the service on the test environment and communicate as required with the customer to start testing.

  15. Test with TEST certificate

    • Once the eSeal service is ready on the test environment, UAE PASS team coordinate as required with the customer to conduct the test as agreed between both of them.

  16. Staging Assessment

    • UAE PASS team to evaluate the testing done on staging using their own checklist. If the assessment is passed, the assessment results is going to be signed off which will be considered as an authorization for executing the step 9.B.5 “Issue auth code for PROD certificate”.

    • If the assessment was not passed, UAE PASS team will coordinate the Customer to do required updates on configurations (if required) and repeat the test again.

  17. Prepare required documentation & submit it to DESC team

    • Following the clarification call, the customer should be able to prepare all required documentation and as instructed by DESC team.

    • The certificate form and subscriber agreement shall be signed by a legal representative of the organization.

    • The customer shares the prepared documentation with DESC team through email.

  18. Validate documentation

    • Once the documentation is received by DESC team, the RA team will conduct a detailed review and an initial identity verification of identities.

    • The RA team will communicate with Customer’s HR to verify the association between the certificate requester and the organization. The RA team may also raise any clarification related to the authorizer’s association if the provided references are not sufficient.

    • In case of missing information, DESC team will communicate with the customer to complete such gaps or clarify ambiguities.

  19. Complete identity vetting.

    • Once the information is initially reviewed and all gaps are covered by the customer, DESC RA team will conduct a detailed vetting of the organization’s identity, Authorizer identity and certificate requester identity.

    • The RA team will also verify the certificate information and the association with the organization.

    • DESC team may communicate with the customer to clarify last minute ambiguities.

    • Once the vetting is completed, DESC team will communicate the final results to the client via email with copying UAE PASS team.

  20. Reject Request & Revoke TEST certificate

    • In case if the vetting results was negative, the certificate request will be rejected by DESC team.

    • DESC team will revoke the TEST certificate issued.

    • DESC team will send an email to the Customer and UAE PASS team to notify them on certificate revocation.

  21. Issue auth code for PROD certificate

    • Once the certificate request is finally approved by DESC, DESC RA team initiate the certificate initiation on production which will result in generation of authorization code.

    • DESC team share the authorization code with UAE PASS team for them to generate the CSR accordingly, the code will be shared through an email with copying the customer.

  22. Generate certificate request (CSR) for PROD.

    • Once the authorization code is received, UAE PASS team generate the key and CSR.

    • UAE PASS team share the CSR with DESC RA team through an email with copying the customer

  23. Issue PROD certificate.

    • Once the CSR is received, DESC team complete the certificate generation on production.

    • DESC team RA team share the generated PROD certificate with UAE PASS team through an email with copying the customer.

  24. Configure PROD certificate

    • Once the PROD certificate is received, UAE PASS team complete the eSeal service configuration on production.

    • UAE PASS team establishe readiness of the service on the production environment and communicate as required with the customer for switching to production.

  25. Pilot test on PROD

    • Once the eSeal service is ready on the production environment, UAE PASS team coordinate as required with the customer to switch to production and conduct a limited pilot test.

  26. Post PROD assessment

    • UAE PASS team coordinate as required with the customer to evaluate the results of the pilot test and conclude the overall process.

PreviousProcess overviewNextICA Process for Non-Dubai Entities

Last updated 25 days ago

Was this helpful?