Secrets Retention Service

As of 1 November 2012, OneSpan changes its policy regarding the storage of the Digipass secrets that are embedded inside our products. The new policy states that Digipass secrets will be destroyed by OneSpan, unless the customer opts for the Digipass Secrets Retention service. This Service is provided for a certain fee and is currently only available for banking customers.

What Are Digipass Secrets?

The security of OneSpan’s Digipass products relies on so-called Digipass secrets. These are cryptographic keys that are used to generate and verify one-time passwords and electronic signatures. The Digipass secrets are usually embedded in the client-side products when OneSpan delivers them to the customer. They are provided to the server-side via file formats, such as DPX and PSKC.




Order Process

You can ensure that Digipass secrets of a certain order are retained by closing a Digipass Secrets Retention Contract for the defined order. You can choose between different storage and retention periods ranging from 2 to 5 years. If you do not order the Digipass Secret Retention service, OneSpan will by default destroy the Digipass secrets of an order 6 months after generation of the DPX or PSKC files.

Digipass Secret Retention Service

OneSpan offers a Secrets Retention Service for each order placed. This paid service entails that OneSpan will destroy the Digipass secrets of its customers after delivery of the order. Only if explicitly asked, will OneSpan store Digipass secrets. Once Digipass secrets of a certain order have been destroyed, they cannot be redelivered. The service currently applies to all Digipass hardware devices (excluding card readers, Digipass KEY PKI devices and Digipass Nano). The storage and retention service for OneSpan’s software devices will become available in 2013. The Digipass Secrets Retention Service is currently only offered to financial institutions. The service will be extended to all OneSpan customers in the future.


Renewal of the Retention Service Contract

When the Digipass Secrets Retention contract is about to expire, OneSpan will inform you 3 months and 1 month prior to the expiration of the contract. You then have the option to renew the contract should you wish to do so. Possible retention periods from which you can choose are the same as for a new contract. The new contract becomes effective upon termination of the previous contract. 

To sign up for this service or to get pricing, please contact your OneSpan Sales Manager.