Method name: ListCerts2

Service description including WSDL schema, and an example request and response for SOAP 1.1 and SOAP 1.2 are located at https://localhost/secusign/default.asmx?op=ListCerts2.

Localhost is the name used for the local computer; write the SDK server name/IP address instead (according to the settings in IIS).

Request in SOAP 1.1 interface

POST /secusign/default.asmx HTTP/1.1
Host: localhost
Content-Type: text/xml; charset=utf-8
Content-Length: length
SOAPAction: "http://software602.com/secusign/ListCerts2"

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <ListCerts2 xmlns="http://software602.com/secusign/">
      <Params>string</Params>
      <IncludeNotEnabled>int</IncludeNotEnabled>
    </ListCerts2>
  </soap:Body>
</soap:Envelope>

Input parameters of the method

Same as in the ListCerts method.

Response structure

HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Content-Length: length

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <ListCerts2Response xmlns="http://software602.com/secusign/">
      <ListCerts2Result>int</ListCerts2Result>
      <CertList>
        <PKCS11CertInfo2>
          <Alias>string</Alias>
          <X509CertData>base64Binary</X509CertData>
          <Status>string</Status>
          <AuthMode>string</AuthMode>
        </PKCS11CertInfo2>
        <PKCS11CertInfo2>
          <Alias>string</Alias>
          <X509CertData>base64Binary</X509CertData>
          <Status>string</Status>
          <AuthMode>string</AuthMode>
        </PKCS11CertInfo2>
      </CertList>
      <StatusMessage>string</StatusMessage>
    </ListCerts2Response>
  </soap:Body>
</soap:Envelope>

Output parameters of the method

Same as in the ListCerts method, except that ListCerts2Result and PKCS11CertInfo2 are returned, and within PKCS11CertInfo2 there is an additional element:

<AuthMode>

Return value Description

String

Securing access to the user certificate. Values:

  • PIN - user password (selected when generating the request or last change).

  • 602KEY - the second factor via the 602®Key mobile application (selected when set up in the managing application - typically Sofa).

  • If 602KEY is set for the certificate, then when signing with a certificate with this security, it is necessary to display a dialog in the calling application (informing the user about the need for confirmation in the 602®Key mobile application) and wait to the services response with a suitable timeout (e.g. 1 minute).

  • To use and confirm with 602KEY, it is necessary to have a suitable HSM WS web service address set, see the Configuration Guide.