# Prerequisites

## Trust1Connector API DNS

The  Trust1Connector API v3 exposes a secure REST API on the client device. Trust1Team has created a `t1c.t1t.io` DNS entry (or customer-specific DNS entry) that points to `127.0.0.1` in order to facilitate SSL communication. This means that if the customer infrastructure uses a proxy for all network traffic, an exemption **must** be made for `t1c.t1t.io` to always point to the origin device's loopback address. The same holds true for the localhost domain name, this should redirect to `127.0.0.1` on the user's local system, not the localhost of the proxy server.

If no exemption is made and `https://t1c.t1t.io` is handled by a proxy, it will redirect to `127.0.0.1` IP of the proxy server instead of the local machine, and the Trust1Connector API will be unreachable.

The reserved domain from Trust1Team (t1c.t1t.io) has been registered with DNSSEC on the aforementioned URI. When a PARTNER uses its own DNS, we strongly recommend applying DNSSEC on the domain used in production.

### DNS rebind protection

Some (corporate) networks have a policy that disables the ability to bind a domain to a local network IP. The Trust1Connector relies on this for `t1c.t1t.io` which resolves in to `127.0.0.1` which is a local ip for `localhost`

If DNS rebind protection is enabled it is unable to use t1c.t1t.io for connection towards the Trust1Connector because the network does not allow this Domain to be a local ip-address.

To resolve the issue either DNS rebind protection can be disabled or you can **whitelist** the domain `t1c.t1t.io` to allow this domain.

## Applications using the Trust1Connector

Applications that want to make use of the Trust1Connector will be run from a specific domain. This means that the Trust1Connector needs to know that certain domains/applications want to make use of the Trust1Connector's functionality.

For these applications to gain access to the Trust1Connectors API we need to whitelist the domain in whats called the `cors` list. This list contains all the accepted domains that can make use of the Trust1Connector.

{% hint style="info" %}
If you want to use the Trust1Connector on a specific domain, please contact our support team to add this domain to the `cors` list.
{% endhint %}

## Distribution Service

In order to correctly function, the Trust1Connector API **must** be able to connect to its configured Distribution Service. You must allow REST traffic to the following URLs (if applicable):

* Acceptance: `https://acc-ds.t1t.io`
* Production: `https://ds.t1t.io`

A partner can opt for its own Distribution server, whereas the URIs mentioned above, will be defined by the hosting party.

In some cases (environments) the Domain `acc-ds.t1t.io` or `ds.t1t.io` are not accessable. If this is because the domain cannot be resolved we do recommend to either ask the network/system administrator to make sure that those domains can be resolved on the network. Or  changing the DNS server to the google DNS (8.8.8.8 & 8.8.4.4), this has solved the issue for some of our customers.

## Disk Space

{% hint style="info" %}
Keep in mind sizes can vary a bit depending on the Operating system and the environment (develop, acceptance, production)
{% endhint %}

### Windows

Trust1Connector **installer** is about 20Mb in size. The **installed** size comes to 40-50Mb.

This includes the Trust1Connector API, Registry and Sandbox.

### MacOS

Trust1Connector **installer** is about 20Mb in size. The **installed** size comes to 40-50Mb.

This includes the Trust1Connector API, Registry and Sandbox.

The increased size over windows mainly comes to the way MacOS handles dialogs. These are distributed with the Trust1Connector as seperate binaries.

## API Key

All endpoints of the Trust1Connector API are secured and require a JWT to access. To obtain a token, an [API key **must** be exchanged](../core/authenticated-client#retrieving-a-jwt-token).&#x20;

This API key must be requested from TRUST1TEAM, or created by the customer if they are hosting their own Distribution Service. The API key must never be used in a front-end application (where the API key can be compromised). The API key is needed to exchange the token, using a Distribution Server, resulting in a short-lived Json Web Token.&#x20;

A PARTNER can decide to distribute a version without the use of a JWT. In those cases, the liability of the security flow resides completely in the context of the web application, thus Trust1Team can not guarantee the security context where the Trust1Connector is integrated upon.

## Operating System

Trust1Connector support two operating systems for all tokens, Linux (Debian/Ubuntu) for PKCS11 tokens; On request, a Google Chromebook can be supported depending on the deployment or target installer.

* MacOS 11.x or higher
  * X86 architecture
  * M1/M2/ARM architecture
* Windows 810 or higher

Trust1Team support Windows/Mac OSX OS families where lifecycle support is guaranteed from the Vendor of the Operating System. The moment the OS version has been marked as ‘end of life’, Trust1Team can not guarantee the functionality anymore.&#x20;

When PARTNERS are in need to support an older version or keeping the support running on the level of Trust1Team, no guarantees can be made. Trust1Team can setup a custom project, on demand of the PARTNER. Those requirements, changes or other adaptations needed, are not covered in the Trust1Connector license fee.

| Supported OS or platform | Supported | Remarks                                                                                                                                                                                                                                                     |
| ------------------------ | --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Windows 7                | No        | EOL but some partners are running a custom compiled target of the Trust1Connector in production until migration.                                                                                                                                            |
| Windows 8.1              | No        | EOL but some partners are running a custom compiled target of the Trust1Connector in production until migration. [Reference](https://support.microsoft.com/en-us/windows/windows-8-1-support-ended-on-january-10-2023-3cfd4cde-f611-496a-8057-923fba401e93) |
| Windows 10               | Yes       | [Reference](https://learn.microsoft.com/en-us/lifecycle/faq/windows#windows-10)                                                                                                                                                                             |
| Windows 11               | Yes       | [Reference](https://learn.microsoft.com/en-us/lifecycle/faq/windows#windows-11)                                                                                                                                                                             |
| macOS 10.15 (Catalina)   | No        | EOL                                                                                                                                                                                                                                                         |
| macOS 11 (Big Sur)       | No        | EOL                                                                                                                                                                                                                                                         |
| macOS 12 (Monterey)      | No        | EOL                                                                                                                                                                                                                                                         |
| macOS 13 (Ventura)       | Yes       | [Reference](https://endoflife.date/macos)                                                                                                                                                                                                                   |
| macOS 14 (Sonoma)        | Yes\*     | [Reference](https://endoflife.date/macos)                                                                                                                                                                                                                   |
| macOS 15 (Sequoia)       | Yes       | [Reference](https://endoflife.date/macos)                                                                                                                                                                                                                   |

{% hint style="warning" %}
2023-10

macOS 14 (Sonoma) has issues at the moment with usblib and CCID. A future patch will fix the card reader issues; Updates will be come avaible when a patch is released
{% endhint %}

### Windows 8.1 or higher

To run in user-space on Windows 8.1 or higher some components have to be set on the operating system

#### Registry keys

Below you can find a list of all registry keys that will be created for the working of the Trust1Connector, All these keys are added to HKCU

HKEY\_CURRENT\_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

![](https://content.gitbook.com/content/OgDbJ5ZvPk7FwgPBzRqA/blobs/oZWFalGpmdyRtp55tWir/image.png)

HKEY\_CURRENT\_USER\SOFTWARE\Trust1Team\Trust1Connector

![](https://content.gitbook.com/content/OgDbJ5ZvPk7FwgPBzRqA/blobs/b3QFLOtV4n88HDjxIehJ/image.png)

## Cookies

Since 3.5.x no more cookies are used.

## Browsers

The Trust1Connector is browser agnostic so it does not matter what browser is being used as long as it support HTTP communication (HTTP 1.1) (which should all of them).

Version wise we do recommend to use the latest versions of your browser for security reasons but the versions below is was we accept as a **minimum**

* Chrome >80
* Firefox >75
* Edge 88 or higher
* IE 11 (End of Life is June 15 2022)
* All other browsers. As recent as possible
