Qualification PIT DIP Simulator Guidance


documents.jpg

Qualification Pre-Integration Testing (PIT) Data Integration Platform (DIP) Simulator Guidance

Code Bodies are providing guidance for participants about the use of locally-hosted versions of the DIP Simulator versus the Programme-hosted DIP Simulator.

Participants should be aware that the security parameters are complex and where a locally-hosted version is not set up correctly, it introduces risk that a participant may not be aligned to the security requirements of the DIP itself, therefore invalidating any test results.

The Programme-hosted DIP Simulator’s security parameters are correctly configured for testing meaning that participants using the Programme-hosted version can be confident that their security requirements are aligned.

For further guidance, please see the Interface Code of Connection (CoCo) and PKI Certificate Policy on the Interface Code of Connection and PKI Certificate Policy page of this website.

The Programme and Code Bodies recommend that the Programme-hosted DIP Simulator is used for Functional and Migration Testing wherever possible.​

It may still be acceptable to use a locally-hosted version provided participants can demonstrate their alignment to DIP security configurations. However, participants should be aware that there is a risk that the security configuration may be incorrect and could impact DIP onboarding or create errors during Qualification Testing.​

Programme participants should provide confidence that the DIP security configuration has been appropriately implemented and issues will not be encountered in the full integration for the Pre-Integration Testing (PIT) Phase. Participants should be aware of the key security parameters that form part of this provision are use of API Keys, mTLS implementation and evidence of message signing.

For example, in the ‘Test Run’ feature, where screenshots are currently used for PIT evidence as per the guidance document, there is an indicator called ‘Signature Provider’ which shows as valid or not to indicate whether Message Signing is turned on. Participants could also screenshot their settings showing that these parameters are turned on/implemented.

If you have any questions about the DIP Simulator, please email the Sims and Ems team at [email protected] 

If you have any questions about Qualification Testing, please email the Code Bodies at [email protected]  and [email protected]