Important
For the production environment, a separate X-Road Security Server must be deployed on separate infrastructure (physical or virtual), with its own IP address and DNS name, different from those of the test environment.
Please do not use the test environment's Security Server, or its IP address or DNS name, for production. The Security Servers of the test and production environments, and their corresponding network identifiers, must be kept separate.
Alongside the transition to the production environment, the test infrastructure must be maintained and continue to operate for testing purposes.
ADEL environments¶
| Environment identifier (NB! case sensitive) | AM (production) | ISAADemo (test) |
|---|---|---|
| Organizational characteristics | ||
| Real data is used | Yes | No |
| Members are real institutions and companies | Yes | Yes |
| Certifier | The Information Systems Regulatory Commission | The Information Systems Regulatory Commission (test certificates) |
| Obligation to use a hardware signing device | Depends on the requirements of the trust service provider | No |
| Joining channel | adel.am | adel.am |
| Service Level Agreement | Accession agreement | N/A |
| Technical characteristics | ||
| Central servers (primary, secondary) | cs1.adel.gov.am cs2.adel.gov.am cs3.adel.gov.am |
cs1.demo.x-road.isaa.cloud |
| Monitoring servers ¹ | monitoring.adel.gov.am | metrics-ss.demo.x-road.isaa.cloud |
| Membership classes | GOV – Government institutions MUN – Municipality institutions NGO – foundations and non-profit organizations PUB – Public Organizations PVT – Private Company | |
| Global configuration validity | 72 hours | 72 hours |
| OCSP validity ² | 8 hours | 8 hours |
| Number of OCSP requests | 30 per day (every 48 min) | 30 per day (every 48 min) |
| Maximum timestamp service interruption length ³ | 4 hours | 4 hours |
| Timestamp interval ⁴ | 30 per day (every 48 min) | 30 per day (every 48 min) |
- The security server must have open ports 5500 and 5577 for these monitoring IPs.
- The OCSP response is valid from the last OCSP response. In the event of an invalid OCSP, the security server stops the message exchange.
- If the timestamp service timeout is exceeded, the security server stops the message exchange.
- If there are untimestamped messages on the security server.