This section provides comprehensive step-by-step tutorials for onboarding to EBSI services. These tutorials guide you through the complete process of becoming a trusted issuer in the EBSI ecosystem.
Onboarding Overview
The EBSI onboarding process involves two entities working together:
- New Entity: The organization that wants to become a trusted issuer
- Trusted Issuer/Support Office: An existing trusted issuer or Support Office that facilitates the onboarding
The onboarding process consists of 6 key steps:
- Setup your wallet: Configure your CLI wallet (New Entity)
- Issue VC Onboard: Issue onboarding credentials (Trusted Issuer/Support Office)
- Register DID Document: Create and register your decentralized identifier (New Entity)
- Issue VC Trusted Issuer: Issue trusted issuer credential (Trusted Issuer/Support Office)
- Register Trusted Issuer: Register yourself in the Trusted Issuers Registry (New Entity)
- Register Issuer Proxy: Set up proxy services for credential management (New Entity)
Tutorial Flow
The tutorials are designed to be followed in sequence, with different entities performing specific steps:
Steps for New Entity
Step 1: Setup your wallet
Learn how to setup your wallet in the CLI and prepare for the onboarding process.
Step 3: Register DID Document
Create and register your decentralized identifier (DID) document, establishing your identity in the EBSI ecosystem.
Step 5: Register Trusted Issuer
Register yourself in the Trusted Issuers Registry, making your issuer status publicly verifiable.
Step 6: Register Issuer Proxy
Set up proxy services to manage credential issuance and revocation efficiently.
Steps for Trusted Issuer/Support Office
Step 2: Issue VC Onboard
Learn how to issue verifiable credentials for onboarding new entities to EBSI services.
Step 4: Issue VC Trusted Issuer
Issue credentials that establish the new entity as a trusted issuer, enabling them to issue verifiable credentials to others.
Prerequisites
For New Entity
Before starting the onboarding process, the new entity needs:
- EBSI Access: Ensure you have access to the appropriate EBSI environment
- Node.js v22: Install the recommended Node.js version
- CLI Knowledge: Familiarize yourself with basic CLI commands
- Trusted Issuer Contact: Identify a trusted issuer or Support Office to facilitate your onboarding
For Trusted Issuer/Support Office
To facilitate onboarding, the trusted issuer or Support Office needs:
- Existing EBSI Access: Must already be onboarded and have issuer credentials
- Issuer Permissions: Appropriate permissions to issue onboarding and trusted issuer credentials
- Node.js v22: Install the recommended Node.js version
- CLI Knowledge: Familiarity with credential issuance commands
Getting Started
For New Entity
# Start the CLI
npx @cef-ebsi/cli
# Set your environment
env test # or pilot/production
# Begin with Step 1: Setup your wallet
# Follow the tutorials for new entity steps
For Trusted Issuer/Support Office
# Start the CLI
npx @cef-ebsi/cli
# Set your environment
env test # or pilot/production
# Load your existing issuer credentials
using user ES256K did1 <private-key> <did>
using user ES256 did1 <private-key> <did>
# Begin with Step 2: Issue VC Onboard
# Follow the tutorials for trusted issuer steps
The onboarding process requires coordination between both entities. The new entity should contact a trusted issuer or Support Office before beginning the process to ensure proper coordination of steps 2 and 4.
1. Setup your wallet
This step is performed by the New Entity that wants to become a trusted issuer in the EBSI ecosystem.
2. Issue VC to Onboard
This step is performed by an existing Trusted Issuer or Support Office to issue onboarding credentials for new entities.
3. Register DID Document
This step is performed by the New Entity using the onboarding credential received from a Trusted Issuer or Support Office in Step 2.
4. Issue VC for Trusted Issuer
This step is performed by an existing Trusted Issuer or Support Office to issue trusted issuer credentials for new entities that have completed Step 3.
5. Register a Trusted Issuer
This step is performed by the New Entity using the trusted issuer credential received from a Trusted Issuer or Support Office in Step 4.
6. Register a Proxy
This step is performed by the New Entity after successfully completing Step 5 (Register Trusted Issuer). This is the final step in the onboarding process.