For EMV offline data authentication, BankAxept provides an EMV CA service which issue Issuer Public Key (IPK) certificates. IPK are used by chip personalizer to issue ICC certificates, which are used during payments for dynamic data authentication (DDA/CDA) and offline PIN encipherment. The terminal service providers use the CA Public Keys to verify that IPK certificates have been issued by the BankAxept CA. The EMV CA for BankAxept is managed Bits AS.
The document below contains the Certificate Authority Public Keys for BankAxept and how the keys shall be used in terminals.
The production BankAxept Public keys shall only be used together with approved payment solutions supporting offline PIN.
Document: BankAxept – EMV CA – Public Keys
Version: 1.33
Last updated: 11.05.2023