Skip to main content
European CommissionEBSI European Blockchain

Onboarding Tutorial

This section provides comprehensive step-by-step tutorials for onboarding to EBSI services. These tutorials guide you through the complete process of becoming a trusted issuer in the EBSI ecosystem.

Onboarding Overview

The EBSI onboarding process involves two entities working together:

  • New Entity: The organization that wants to become a trusted issuer
  • Trusted Issuer/Support Office: An existing trusted issuer or Support Office that facilitates the onboarding

The onboarding process consists of 6 key steps:

  1. Setup your wallet: Configure your CLI wallet (New Entity)
  2. Issue VC Onboard: Issue onboarding credentials (Trusted Issuer/Support Office)
  3. Register DID Document: Create and register your decentralized identifier (New Entity)
  4. Issue VC Trusted Issuer: Issue trusted issuer credential (Trusted Issuer/Support Office)
  5. Register Trusted Issuer: Register yourself in the Trusted Issuers Registry (New Entity)
  6. Register Issuer Proxy: Set up proxy services for credential management (New Entity)

Tutorial Flow

The tutorials are designed to be followed in sequence, with different entities performing specific steps:

Steps for New Entity

Step 1: Setup your wallet

Learn how to setup your wallet in the CLI and prepare for the onboarding process.

Step 3: Register DID Document

Create and register your decentralized identifier (DID) document, establishing your identity in the EBSI ecosystem.

Step 5: Register Trusted Issuer

Register yourself in the Trusted Issuers Registry, making your issuer status publicly verifiable.

Step 6: Register Issuer Proxy

Set up proxy services to manage credential issuance and revocation efficiently.

Steps for Trusted Issuer/Support Office

Step 2: Issue VC Onboard

Learn how to issue verifiable credentials for onboarding new entities to EBSI services.

Step 4: Issue VC Trusted Issuer

Issue credentials that establish the new entity as a trusted issuer, enabling them to issue verifiable credentials to others.

Prerequisites

For New Entity

Before starting the onboarding process, the new entity needs:

  1. EBSI Access: Ensure you have access to the appropriate EBSI environment
  2. Node.js v22: Install the recommended Node.js version
  3. CLI Knowledge: Familiarize yourself with basic CLI commands
  4. Trusted Issuer Contact: Identify a trusted issuer or Support Office to facilitate your onboarding

For Trusted Issuer/Support Office

To facilitate onboarding, the trusted issuer or Support Office needs:

  1. Existing EBSI Access: Must already be onboarded and have issuer credentials
  2. Issuer Permissions: Appropriate permissions to issue onboarding and trusted issuer credentials
  3. Node.js v22: Install the recommended Node.js version
  4. CLI Knowledge: Familiarity with credential issuance commands

Getting Started

For New Entity

# Start the CLI
npx @cef-ebsi/cli

# Set your environment
env test # or pilot/production

# Begin with Step 1: Setup your wallet
# Follow the tutorials for new entity steps

For Trusted Issuer/Support Office

# Start the CLI
npx @cef-ebsi/cli

# Set your environment
env test # or pilot/production

# Load your existing issuer credentials
using user ES256K did1 <private-key> <did>
using user ES256 did1 <private-key> <did>

# Begin with Step 2: Issue VC Onboard
# Follow the tutorials for trusted issuer steps
note

The onboarding process requires coordination between both entities. The new entity should contact a trusted issuer or Support Office before beginning the process to ensure proper coordination of steps 2 and 4.

1. Setup your wallet

This step is performed by the New Entity that wants to become a trusted issuer in the EBSI ecosystem.

2. Issue VC to Onboard

This step is performed by an existing Trusted Issuer or Support Office to issue onboarding credentials for new entities.

3. Register DID Document

This step is performed by the New Entity using the onboarding credential received from a Trusted Issuer or Support Office in Step 2.

4. Issue VC for Trusted Issuer

This step is performed by an existing Trusted Issuer or Support Office to issue trusted issuer credentials for new entities that have completed Step 3.

5. Register a Trusted Issuer

This step is performed by the New Entity using the trusted issuer credential received from a Trusted Issuer or Support Office in Step 4.

6. Register a Proxy

This step is performed by the New Entity after successfully completing Step 5 (Register Trusted Issuer). This is the final step in the onboarding process.