Configuring a SWIFTNet security officer

You must set up at least one SWIFTNet security officer on an SAG. To do this:

  1. Request a certificate from SWIFT.
  2. Create a certificate for the security officer.
  3. Set the relaxed SNL mode for the security officer.
After you complete these steps, the security officer can issue the following commands:
  • registerSwiftNetUser (rgsnu)
  • disableSwiftNetUser (disnu)
  • revokeSwiftNetUser (rvsnu)
  • setupUserForCert (suct)
  • setupUserForRecovery (surc)
  • grantRole (gr)
  • ungrantRole (ur)

When the security officer issues these commands, the distinguished name (DN) must be specified as the requestor, signer, authoriser, or only the requestor and signer.

The security officer must always issue these commands on the same SAG on which that security officer was set up.