What are the security certificate requirements?
In order for customers to have a trusted connection with an Equifax API, they must utilize the updated Sectigo certificates.
You can import the required certificates into your organization's trust store by performing the steps below.
- Navigate to the Sectigo Intermediate Certificates - RSA support site and download the specific certificates described in the next two steps.
- Under Organization Validation, click [Download ] Sectigo RSA Organization Validation Secure Server CA [ Intermediate ]
- Under Root Certificates, click [Download] SHA-2 Root : USERTrust RSA Certification Authority
The accepted TLS 1.2 ciphers for the Equifax for Developers Portal include the following ciphers:
- ECDHE-RSA-AES256-GCM-SHA384
- DHE-RSA-AES256-GCM-SHA384
- ECDHE-RSA-AES128-GCM-SHA256
- DHE-RSA-AES128-GCM-SHA256
NOTE: The Equifax endpoint is SNI enabled and if you're running a legacy utility you may have to consider a change which considers SNI in your endpoint resolution.