Connection to our production API

The communication between the TPP and the Bank production API is always secured by using a TLS-connection Mutual authentication using TLS version 1.2. This TLS-connection is initiated by the TPP and has to be established always including client (i.e. TPP) authentication. For this authentication the TPP has to use a qualified certificate for website authentication (QWAC). This qualified certificate has to be issued by a qualified trust service provider according to the eIDAS regulation.