Step 3 - Configure Foreign SPOC

In order to communicate with foreign SPOCs to send or receive certification requests, a list of foreign SPOCs can be configured in ADSS Server and added in Registered SPOC sub-module inside SPOC Service.

To view the list of Registered SPOC's in SPOC Service, navigate to the following location in ADSS Server Console:

An existing foreign SPOC can be edited by clicking the Edit button. CA certificate from the selected foreign SPOC can be retrieved by clicking on the Get CA Certificate button.

A new foreign SPOC can be registered by clicking on the New button. Click on the button will show you the following screen:

A TLS client certificate configured in Service manager will be used to communicate with foreign SPOCs. This certificate must have the spocClient in Extended Key Usages (EKU).

The configuration items are as follows:

Items	Description
Status	Select the status of SPOC to be registered from the drop-down as Active or Inactive.
CVCA Certificate	This field allows you to select the foreign CVCA certificate from the drop-down. The drop-down lists all the foreign CVCAs registered in Trust Manager.
SPOC Country	This field allows you to select the country of the foreign SPOC.
SPOC URL	This is the foreign SPOC's URL that will be used for communication.
Save	Ensure all the configurations are saved by clicking on the Save button.

CA certificate from the selected Foreign SPOC can be retrieved by clicking on the Get CA Certificate button. Clicking on the 'Search' button on the Registered SPOCs main page will display the following screen:

A particular Registered SPOC can be searched based on Status and SPOC Country. ADSS Server supports a defined number of countries for SPOC Service, the list of all these countries will appear in SPOC Country drop-down.

If "_" character is used in the search then it will act as wildcard.