walt.id Identity

AWS Security

walt.id Identity for issuing, holding and verifying W3C Verifiable Credentials over open standards, self hosted with a web wallet.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

walt.id Identity is an open source platform for decentralized identity and verifiable credentials. It provides an Issuer API, a Verifier API and a server side Wallet API, plus a browser web wallet, so you can issue, hold and verify W3C Verifiable Credentials using open standards including OID4VCI, OID4VP and Decentralized Identifiers.

Why the cloudimg image

The Issuer, Verifier and Wallet services are preinstalled and wired together behind a web wallet on port 80, with an end to end self test that proves the issue, hold and verify flow. On first boot every instance generates unique wallet signing keys and a unique administrator account written to a root only file, the wallet state lives on a dedicated data volume, and cloudimg provides 24/7 support.

Common uses

  • Issue and verify Verifiable Credentials
  • Self hosted decentralized identity backend
  • Server side holder wallet for automation

Key features

  • walt.id Identity preinstalled as pinned upstream containers managed by systemd: an Issuer API on port 7002, a Verifier API on port 7003, a server side Wallet API and a browser web wallet on port 80 behind nginx, no manual setup required
  • Issue, hold and verify W3C Verifiable Credentials over the open OID4VCI, OID4VP and Decentralized Identifier standards, with the wallet state on a dedicated independently resizable data disk
  • Hardened first boot generates unique wallet signing keys and a unique administrator account for every instance, stored in a root only file, with 24/7 technical support from cloudimg

See it running

Real screenshots taken while testing this image against its deployment guide.

walt.id Identity screenshot 1 walt.id Identity screenshot 2 walt.id Identity screenshot 3

Description

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Overview

walt.id Identity is an open source platform for decentralized identity and verifiable credentials. It gives you the building blocks to issue, hold and verify W3C Verifiable Credentials using open standards including OpenID for Verifiable Credential Issuance (OID4VCI), OpenID for Verifiable Presentations (OID4VP) and Decentralized Identifiers (DIDs). This image delivers the stack fully installed and wired together, so a complete issue, hold and verify flow is running within minutes of launch.

Application Stack

The platform runs as a set of pinned upstream containers managed by systemd: the Issuer API on port 7002 issues Verifiable Credentials to wallets over OID4VCI, the Verifier API on port 7003 requests and verifies Verifiable Presentations over OID4VP with configurable credential and presentation policies, and the Wallet API is a server side holder wallet that can receive, store and present credentials, backed by a local SQLite database. A web wallet user interface is served on port 80 through an nginx reverse proxy, so you can register, hold and present credentials from a browser. Docker Engine is installed from the official Docker package repository and every walt.id image is captured into the AMI, so instances start offline without pulling anything.

Dedicated Storage Tier

The Wallet API state, holding the wallet accounts, keys and stored credentials, lives on a separate, independently resizable data volume, so your holder data survives instance replacement and the wallet data tier can be grown without disturbing the rest of the instance.

Open Standards Identity

Every capability is exposed through clean HTTP APIs built on open standards: OID4VCI issuance, OID4VP verification, W3C Verifiable Credentials, Decentralized Identifiers and selective disclosure. Build issuers, verifiers, holder wallets and integrations against one consistent, standards based stack, and connect it to your own applications, wallets and trust frameworks.

Secure First Boot

On the first boot of your instance a one shot service generates unique wallet signing and encryption keys and a unique wallet administrator account, written to a file only the root user can read. No administrator, no shared secret and no default credential ships in the image; the Issuer and Verifier learn the instance public address on every boot so credential offers and presentation requests point at the right host without hand editing. The Wallet API is bound to loopback and reached through the web wallet on port 80.

Ready To Use

Browse to the instance on port 80 to open the web wallet and sign in with the generated administrator credentials, or register a new holder account. The Issuer API on port 7002 and the Verifier API on port 7003 are ready for your applications and integrations, and a built in end to end self test issues, holds and verifies a sample credential to prove the whole flow.

cloudimg Support

24/7 technical support by email and chat. Help with deployment, the Issuer, Verifier and Wallet APIs, OID4VC and DID configuration, credential and presentation policies, the web wallet, TLS and runtime tuning.

Use Cases

Issue and verify W3C Verifiable Credentials over open standards. Stand up a decentralized identity backend for your applications. Operate a server side holder wallet for automation and testing. Prototype and demonstrate reusable identity and credential flows. Build trust frameworks on OID4VC and DIDs.

walt.id is a trademark of its respective owner. All other product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Related technologies

walt.iddecentralized identityverifiable credentialsssioid4vcoid4vcioid4vpdiddigital walletopen source