TRUST

You can view and edit your TRUST configuration under the 'TRUST' tab.

TRUST VASP configuration

Configure your VASP

VASP Configuration Settings

The VASP Legal Name field is used to identify the VASP. For example, 'Tangany'.

VASP LEI

The LEI (Legal Entity Identifier) field is a unique identifier for your VASP, you can register for this on the Global Legal Entity Identifier Foundation (GLEIF) website or, for testing purposes, use our LEI Generator. The owner of the VASP or a representative should present you with their LEI; however, the LEI registry is also public.

Note that this needs to match the value that you provided to TRUST during your onboarding.

TLS Server Identity (optional)

The TLS Server Identity is the PEM-encoded identity used by your TRUST PII server for incoming mTLS connections. It must include a certificate chain and exactly one private key, and the certificate must be valid for server authentication. During initial setup you must provide it; on later updates you can leave it empty to keep the existing server identity. See Obtaining Certificates for a basic certificate ordering guide.

mTLS Client Identity (optional)

The mTLS Client Identity is the PEM-encoded identity used for outgoing TRUST connections (for example to the TRUST bulletin board). It must include a certificate chain and exactly one private key, and the certificate must be valid for client authentication. During initial setup you must provide it; on later updates you can leave it empty to keep the existing client identity. If the certificate signals suitable combined client and server authentication, this may be identical to the Server Identity above. See Obtaining Certificates for a basic certificate ordering guide.