Air-Gapped Mode

The Securosys Authorization App supports the transfer of requests for TSB environments running in the Air-Gapped profile. To proceed it is required to fully understand the overview, workflow and the terminology of the air-gapped deployment mode.

To enable the Air-Gapped Mode, navigate to the Air-Gapped tab on the bottom right and click the toggle.

Approvals Unavailable

During Air-Gapped Mode the application will not be able to fetch any approval or key management tasks from your configured Approver TSB. Disabling Air-Gapped Mode returns the user back and allows the use of approval and key management tasks.

Configure TSB Connections

Configure the Online TSB connection by clicking on CONFIGURE.

Separate Configuration

The Air-Gapped TSB URL Configuration is separate to the application settings configuration.

1. Enable and configure mTLS if required

2. For faster configuration, click IMPORT API CONFIG to select and import a .json file. This file should have the following structure:

   {
     "api_url":"<specify URL of TSB>",
     "api_key_approval":"<specify approval key name>",
     "api_key_operation":"<specify key operation>",
     "jwt_token":"<input JWT Token>"
   }

   
   
   

3. Alternatively, configure the configuration fields manually.

Configuration Parameters	Details
TSB URL	URL to the Transaction Security Broker the application is connecting to. Can only be changed by going through the New Registration procedure. The trash bin button can be used to delete the existing URL.
API Key Operation	Optional API Key required for access to a specific Key Operation REST API endpoint. See Transaction Security Broker
API Key Approval	Optional API Key required for access to a specific Approval REST API endpoint. See Transaction Security Broker
JWT Token	Optional Authentication method used to connect to the TSB. See TSB - API Authentication

After configuring the Online TSB, proceed to configuring the Offline TSB. Use the same steps taken for Online TSB.

Air-Gapped Transfer Workflow

For the full description of the Air-Gapped workflow see in the TSB docs.

To transfer requests with the Authorization App, first configure the connection to the Online and Offline TSBs, as described above. Ensure the phone can connect to both TSBs, either via network or USB to the TSB host machine.

To transfer requests, start in your Online environment. Each step requires the previous and cannot be skipped.

1. To import the request from your Online TSB, click SCAN REQUEST. Scan the request QR code received from the Online TSB. Optionally, click VIEW REQUEST to verify the details.
2. Move to the Offline TSB environment and send the scanned request to the Offline TSB and collect the response. Optionally, click VIEW RESPONSE to verify the details.
3. Return to the Online TSB environment and complete the request response transfer by sending it to the Online TSB. Optionally, click VIEW STATUS to verify the details.

When finished or at any point, click RESET SESSION to start a new transfer session.