Starting with version 4.15.0, SKFS introduced support for Digital Asset Links (DAL) as a configurable feature. In version 4.16.0, DAL has been integrated into the FIDO Policy module and database, providing support for unlimited DAL configurations and enabling dynamic updates.
This web service effectively manages the DAL Target and X509 certificates associated with every target within the database and allows FIDO administrators to perform add, get and update transactions across any FIDO domain.
A FIDO administrator can perform the following operations for DAL:
- addtarget: add DAL target and associated x509 certificate(s) and fingerprint(s) to a domain
- gettarget: retrieves all the DAL target(s) and associated x509 fingerprint(s) and certificate(s) configured for a domain
- updatetarget: updates the status of a DAL target to active/inactive
- updatetargetanddisable: updates the status of DAL target to active/inactive. If all the active DAL targets are set to inactive, this web service also disables DAL configured for this domain within the Policy Module.
- addx509fingerprint: adds list of x509 certificate(s) and fingerprint(s) for a DAL target
- updatex509fingerprint:updates the status of x509 fingerprint(s) to active/inactive
- updatex509fingerprintanddisable: updates the status of x509 fingerprint(s) to active/inactive. If all the active x509 fingerprints are set to inactive, this web service also disables DAL configured for this domain within the Policy Module.