The Touchstone® API requires a signed SSL certificate for communication.You must install a signed SSL certificate installed for Touchstone before you make a call into the web service.

To install the SSL certificate:

1. Export the SSL certificate from the Touchstone application server.
2. Import the SSL certificate into the system on which you plan to develop, that is, the system on which you plan to call the API.

Export the SSL Certificate

To export the Touchstone SSL certificate, perform the following steps:

1. Log in to the Touchstone application server.
2. Open the Internet Information Services (IIS) Manager.
3. In the Connections list of the Internet Information Services (IIS) Manager, select the application server node.
   
4. In the IIS area, double-click Server Certificates.
   
5. In the Server Certificates pane, right-click the Touchstone certificate and select Export.
6. In the Export Certificate dialog box, fill in the fields:
   
   • Export to field: Type the location to export the Touchstone SSL certificate to.
   • Password field: Type a password to protect this SSL certificate.
   • Confirm password field: Retype the password.
7. In the Export Certificate dialog box, click OK.
   The IIS Manager exports the Touchstone SSL certificate.
8. Copy the exported SSL certificate to the system that you plan to call the Touchstone API from.

Import the SSL Certificate

1. Log in to the system that you plan to call the Touchstone API from
2. Open Internet Explorer.
3. In Internet Explorer, select Tools > Internet Options.
4. In the Internet Options dialog box, click the Content tab.
5. On the Content tab, click Certificates.
   
6. In the Certificates dialog box, click the Trusted Root Certification Authorities tab.
   You must import the certificate as a trusted root certificate.
   
7. On the Trusted Root Certification Authorities tab, click Import.
8. In the Certificate Import Wizard, perform the following steps:
   1. Click Next.
   2. Click Browse.
   3. In the Open dialog box, select the SSL certificate that you exported and then copied to the system that you plan to call the APIs from. Then, click Open.
   4. Click Next.
   5. In the Password field, type the password that you specified when you exported the SSL certificate.
      
   6. Leave the Enable strong private key protection check box deselected.
   7. Leave the Mark this key as exportable check box deselected.
   8. Leave the Include all extended properties check box selected.
   9. Click Next.
   10. Ensure that the Place all certificates in the following store option is selected, and ensure that the Certificate Store field displays "Trusted Root Certification Authorities."
       
   11. Click Next.
   12. Click Finish.
   13. If the Certificate Import Wizard displays a security warning, click Yes.
   The Certificate Import Wizard imports the SSL certificate.
9. When the Certificate Import Wizard dialog box indicates that the SSL certificate import was successful, click OK.
10. Locate the imported certificate in the Trusted Root Certification Authorities tab to verify that the certificate imported successfully.
    

After you import the Touchstone SSL Certificate, you can make your first call into the web service.