Authentication
The Digital Gift Services APIs use mutual authentication by means of a signed certificate provided by Blackhawk Network. The certificate contains embedded values that support authentication, authorization, and billing. Your applications are authenticated through the use of embedded values in the client certificate.
Blackhawk Network requires client certificates to provide data security and privacy for client application data and services shared between Blackhawk Network and its partners.
Our digital services deal with sensitive information associated with people and financial institutions. We limit access to these services to trusted client applications managed by companies that have signed an agreement with us regarding use of the services.
What is a Client Certificate?
Security certificates are exchanged between clients and servers that need to be sure that their communications are private and when the client and/or server need to verify each other's identity. They are a standard part of HTTPS-based communication. When a browser accesses a secure web site, the web server provides a server certificate signed by a trusted public certificate authority (CA). The browser can verify the certificate and then be certain that the server is what it claims to be.
In a similar fashion, a client certificate enables a client application to prove its identity to a server. In this case, the client certificate is signed by a private certificate authority managed by the server that is asking for it. Since the certificate is signed by the server, the server can verify that it is valid and learn from its contents the identity of the client making the request. When a client and server both exchange certificates it is called mutual authentication
.
TLS Support
Blackhawk Network supports TLSv1.2. Calls made using older versions of TLS are not supported and will fail.
Obtaining Your Certification & Production Environment Certificates
During the integration process your implementation manager will request and obtain a client certificate you can use for testing. Production certificates are generated and sent after successful testing in our non-production environment. Production access will not be granted without completion of our integration certification process.
You must treat the client certificate as highly confidential. You must not share the certificate with any other entities and must notify Blackhawk Network immediately if you suspect the certificate was compromised.
Updated 4 months ago