Set up an issuer
An issuer sends documents to your customers' wallets and signs them on your organization's behalf. Issuers live under Setup → Issuers, separately in Sandbox and Production.
Create the issuer
On Setup → Issuers, choose Create issuer. It asks only for a Name and an optional Description. Everything else is set on the issuer afterwards, starting with which documents it issues.
The four tabs
| Tab | What it holds |
|---|---|
| Overview | A summary of the issuer, its readiness, and recent activity with a link to its records |
| Documents | The documents this issuer issues, their wallet formats, and customer sign-in for each document |
| Certificates | The signing certificates the issuer needs for its documents |
| Settings | Name, description, stopping issuing, and deleting the issuer |
Add documents
An issuer can't issue anything until it has at least one document. Open the Documents tab and choose Add document. Pick the documents from the list; both wallet formats, SD-JWT VC and ISO mdoc, are included unless you change them under Customize formats. Remove a format only if your customers use a single wallet type. A document that exists in only one format is added in that format alone; see Documents.
To let customers sign in with your own system before they receive a document, open Customer sign-in in that document's actions menu. This needs a provider under Developers → Customer sign-in and one under Developers → Data sources first. See Issue a document.
Removing a document stops new issuing of it from this issuer. Documents already issued stay valid. For what a document is and where documents come from, see Documents.
Certificates
Each document needs a signing certificate before the issuer can issue it.
- Sandbox: LutraID prepares a test signing certificate for you after you add documents.
- Production: if you use your own certificate authority, as on a self-hosted installation, create a request on the Certificates tab, have it signed, then upload the returned chain. On the hosted service, LutraID expects to provide most issuing certificates; see Production setup and ask support before you start.
The issuer header shows when certificates are missing or need attention.
Organization-level settings
Some things an issuer uses are set once for the whole organization:
| What | Where |
|---|---|
| Legal identity | Settings → Legal identity |
| API keys | Developers → API keys, choosing this issuer when you create the key |
See API keys and Production setup.
Who can do what
Owners and admins set up issuers. Members can open issuer pages and see their settings, documents and certificate status, but can't change them.
Troubleshooting
A document doesn't appear in Issue document. Check that the document is on the issuer's Documents tab, and that its signing certificate is ready on the Certificates tab. Documents that aren't ready are listed separately under Not ready to issue here.