walt.id Identity - Decentralized Credentials

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Why This AMI Over DIY Deployment

Deploying walt.id Identity from source requires configuring Docker containers, wiring the Issuer, Verifier and Wallet services together, generating cryptographic keys, setting up nginx, and hardening the stack for production. This AMI eliminates that effort entirely. A complete issue, hold and verify flow for W3C Verifiable Credentials is running within minutes of launch - no manual container orchestration, no key ceremony, no configuration files to edit. You get open-standards portability without vendor lock-in and without per-credential fees.

## Application Stack

The platform runs as a set of pinned upstream containers managed by systemd:

• Issuer API on port 7002 - issues Verifiable Credentials to wallets over OID4VCI
• Verifier API on port 7003 - requests and verifies Verifiable Presentations over OID4VP with configurable credential and presentation policies
• Wallet API - a server-side holder wallet that receives, stores and presents credentials, backed by a local SQLite database
• Web Wallet on port 80 - served through an nginx reverse proxy so you can register, hold and present credentials from a browser

Docker Engine is installed from the official Docker package repository and every walt.id image is captured into the AMI, so instances start offline without pulling anything.

## Dedicated Storage Tier

The Wallet API state - holding wallet accounts, keys and stored credentials - lives on a separate, independently resizable data volume. Your holder data survives instance replacement and the wallet data tier can be grown without disturbing the rest of the instance.

## Open Standards Identity

Every capability is exposed through clean HTTP APIs built on open standards: OID4VCI issuance, OID4VP verification, W3C Verifiable Credentials, Decentralized Identifiers and selective disclosure. Build issuers, verifiers, holder wallets and integrations against one consistent, standards-based stack and connect it to your own applications, wallets and trust frameworks.

## Secure First Boot

On first boot a one-shot service generates unique wallet signing and encryption keys and a unique wallet administrator account, written to a file only the root user can read. No administrator password, no shared secret and no default credential ships in the image. The Issuer and Verifier learn the instance public address on every boot so credential offers and presentation requests point at the right host without hand editing. The Wallet API is bound to loopback and reached only through the web wallet on port 80.

## Use Case: University Digital Diplomas

A university deploys this AMI as its credential-issuance backend. The Issuer API mints tamper-proof digital diplomas as W3C Verifiable Credentials and delivers them to graduates via OID4VCI. Graduates store the credential in the web wallet and later present it to prospective employers through OID4VP. The employer's system calls the Verifier API to confirm authenticity and revocation status in seconds - no phone calls, no paper transcripts, no intermediary databases.

## Getting Started

Browse to the instance on port 80 to open the web wallet and sign in with the generated administrator credentials, or register a new holder account. The Issuer API on port 7002 and the Verifier API on port 7003 are ready for your applications and integrations. A built-in end-to-end self-test issues, holds and verifies a sample credential to prove the whole flow works.

## cloudimg Support

24/7 technical support by email and live chat. Our engineers help with deployment, the Issuer, Verifier and Wallet APIs, OID4VC and DID configuration, credential and presentation policies, the web wallet, TLS setup and runtime tuning.

walt.id is a trademark of its respective owner. All other product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.