Sign a Card with an additional key

This guide shows how to sign a Card with an additional private key for providing your digital solution with the highest level of security.

When you care about your security, you shouldn't trust anyone. Thus, to be sure that a user's Card wasn't replaced with another one, you have to add an additional signature into a Card.

Before publishing a user's Card on Virgil Cards Service you sign a Card with the private key of your Application Server that was generated during Application registration on Virgil Dashboard.

Remember, you cannot change a Card's content after it's published.

Sign a user's Card

In order to add the signature of your app server to a user's Card you need to:

transmit an existing user's Card to your server. You can use any suitable way to transmit the Card.

If you need to export a user's Card to a string representation on a client side or import a Card from the string representation on a server side, use the following lines of code:

// export a Virgil Card to string
var exportedAliceCard = aliceCard.Export();

// import a Virgil Card from string
var aliceCard = virgil.Cards.Import(exportedAliceCard);

// export a Virgil Card to string
exportedAliceCard, err := aliceCard.Export()

// import a Virgil Card from string
aliceCard, err := api.Cards.Import(exportedAliceCard)

// export a Virgil Card to string
String exportedAliceCard = aliceCard.export();

// import a Virgil Card from string
VirgilCard aliceCard = virgil.getCards().importCard(exportedAliceCard);

// export Virgil Card to base64-encoded string
var exportedAliceCard = aliceCard.export();

// import Virgil Card
var aliceCard = api.cards.import(exportedAliceCard);

// export Virgil Card to base64-encoded string
NSString *exportedCard = [aliceCard exportData];

// import a Virgil Card from string
VSSVirgilCard *aliceCard = [virgil.cards
  importVirgilCardFromData:exportedAliceCard];

// export Virgil Card to base64-encoded string
$exportedAliceCard = $aliceCard->export();

// import a Virgil Card from string
$aliceCard = $virgilApi->Cards->import($exportedAliceCard);

# export a Virgil Card to string
exported_alice_card = alice_card.export()

# import a Virgil Card from string
alice_card = virgil.cards.import_card(exported_alice_card)

# export a Virgil Card to string
exported_alice_card = alice_card.export

# import a Virgil Card from string
alice_card = virgil.cards.import(exported_alice_card)

// export a Virgil Card to string
let exportedCard = aliceCard.exportData()

// import a Virgil Card from string
let aliceCard = virgil.cards.importVirgilCard(fromData: exportedAliceCard)!

sign a transmitted user's Card and publish it on Virgil Cards Service:

// publish a Virgil Card
await virgil.Cards.PublishAsync(aliceCard);

// publish a Virgil Card
err := api.Cards.Publish(aliceCard)

// publish a Virgil Card
virgil.getCards().publish(aliceCard);

// publish Virgil Card
api.cards.publish(aliceCard)
    .then(function () {
        // Virgil Card is published
    });

// publish a Virgil Card
[virgil.cards publishCard:aliceCard completion:^(NSError *error) {
    //...
}];

// publish a Virgil Card
$virgilApi->Cards->publish($aliceCard);

# publish a Virgil Card
alice_card.publish()

# publish a Virgil Card
virgil.cards.publish(alice_card)

// publish a Virgil Card
virgil.cards.publish(aliceCard) { error in
    //...
}

As result, a user's Card will be published on the Virgil Cards Service, where it will be available at any time.

setup Virgil Card Verifier. By default, CardVerifier only verifies the signatures of a Card owner and Virgil Cards Service. So when you want to verify an App Server signature, you also have to set up CardVerifier.

At the Virgil Services, the Virgil Card(s) will be also signed. Developers can verify the signature of the Virgil Card owner, the Virgil Services, and the Application Server at any time.