- Identity and digital signature
Migration of PSIS to the Amazon Web Services cloud
In recent months, the PSIS service has been migrated to a new version of the Amazon Web Services (AWS) cloud, so that the service is currently being offered from current environment hosted in the AOC Consortium's own infrastructure (on-premise), and also, since last February, from the new environment in AWS.
In this regard, we inform you that the current on-premise environment will cease to be operational on October 31, 2024 at 23:59 p.m. ** h. Therefore, it is imperative that applications integrated with it adapt their integration to point to the new PSIS environment on AWS.
To make this adaptation, it is only necessary to change the endpoint, replacing the current one with a new one from AWS.
In the following tables you have the list of endpoints, current and new, for each of the environments:
Pre-production:
| operation | Current endpoint on-premise | AWS endpoint |
| Validations of certificates and signatures | http://psisbeta.catcert.net/psis/catcert-test/dss | https://psis-pre.aoc.cat/psis/catcert-test/dss |
| Validations of PDFs | http://psisbeta.catcert.net/psis/catcert-test/dsspdf | https://psis-pre.aoc.cat/psis/catcert-test/dsspdf |
| Creating RFC3161 Timestamps | http://psisbeta.catcert.net/psis/catcert-test/tsp | https://psis-pre.aoc.cat/psis/catcert-test/tsp |
| Creation of signatures | https://psisbeta.catcert.net/psis/catcert-test/dss | https://sign.psis-pre.aoc.cat/psis/catcert-test/dss |
Production:
| operation | Current endpoint on-premise | AWS endpoint |
| Validations of certificates and signatures | http://psis.catcert.net/psis/catcert/dss | https://psis.aoc.cat/psis/catcert/dss |
| Validations of PDFs | http://psis.catcert.net/psis/catcert/dsspdf | https://psis.aoc.cat/psis/catcert/dsspdf |
| Creating RFC3161 Timestamps | http://psis.catcert.net/psis/catcert/tsp | https://psis.aoc.cat/psis/catcert/tsp |
| Creation of signatures | https://psis.catcert.net/psis/catcert/dss | https://sign.psis.aoc.cat/psis/catcert/dss |
IMPORTANT: Keep in mind that domains in AWS do not respond to a single IP address, and that IP is constantly changing randomly. So, you need to remove any restrictions at the IP level in relation to the new domains (psis-pre.aoc.cat and psis.aoc.cat). Likewise, any geolocation restrictions will also need to be removed, as the service will initially be offered from the Ireland area, but this will change in the future.
For any question about it, you can contact the Customer Service Center.