Admin sign-in required
The credential issuer console is admin-only.
Credential issuer
Issue a new credential
Latest offer
Scan with any OpenID4VCI wallet.
Wallet compatibility
Issuer settings for this site, stored in App_Data/<site>/appsettings.json. Saving keeps every other entry in that file, checks that it is valid JSON before and after, and keeps a backup of the previous version. Changes apply to the next wallet request; wallets re-read the issuer metadata when they are restarted.
| Setting | Value | Now in effect |
|---|---|---|
| Loading… | ||
Trust material
| Loading… |
Only certificates issued to a wallet provider are accepted under that CA (it also issues relying-party certificates). Leaf certificates placed in the trust folders are trusted as they are.
| Offer ID | vct | Subject | Status | Created | Expires | Actions |
|---|---|---|---|---|---|---|
| Loading… | ||||||
| vct | Subject | Issued (UTC) | Offer | Credential head |
|---|---|---|---|---|
| Loading… | ||||
Revocation note. Once a wallet has received a credential we cannot force it to drop it. Standards-compliant revocation flows through the OAuth 2.0 Status List (draft-ietf-oauth-status-list) which requires a public status endpoint that wallets and verifiers poll. To stop a credential that has not been collected yet, revoke the underlying offer from the Active-offers tab to invalidate the pre-authorized code — a wallet that has not yet exchanged the code will be denied.
Issuer metadata: /vci.ashx?metadata · Issuer JWKS: /vci.ashx?jwks · HAIP notes