API Gateway and Axway Validation Authority

This guide describes the interoperability between API Gateway and Axway Validation Authority. For specific information about the installation and general use of either API Gateway or Axway Validation Authority, refer to their respective documentation.

Why use the products together

Axway Validation Authority server (VA server) ensures the integrity and validity of online transactions by delivering real-­time validation of digital certificates issued by any Certification Authority (CA). To validate a digital certificate, a client application can query the VA server using the Online Certificate Status Protocol (OCSP) as an alternative to retrieving Certificate Revocation Lists (CRLs).

In API Gateway, you can use the OCSP Client filter to retrieve certificate revocation status from an OSCP responder, such as Axway Validation Authority. When using Axway Validation Authority as an OCSP responder, the following use cases are supported:


The prerequisites for API Gateway and Axway Validation Authority interoperability are as follows.

API Gateway

You must install Axway API Gateway version 7.5.3 or higher, and have a valid API Gateway license file from Axway.

Axway Validation Authority

You must install Axway Validation Authority version 4.11.2 or higher and have a valid Validation Authority license file from Axway.

Related Links