Canadian CST-GA, STI-PA and STI-CA on-boarding steps
Sansay is an approved Certificate Authority (STI-CA) in Canada. This document provides the necessary information for becoming part of the STIR/SHAKEN ecosystem in Canada, specifically focusing on obtaining a Canadian STI Certificate from Sansay STI-CA.
CST-GA
The CST-GA governs the STIR/SHAKEN ecosystem in Canada. Canadian STIR/SHAKEN participants are:
- STI-PA (Policy Administrator)
- TSP (Telephone Service Provider)
- STI-CA (Certificate Authority).
As a Service Provider the first step to receive approval is to complete the CST-GA application form: https://cstga.ca/participate/tsps/
Application requirements include obtaining an OCN (Operating Carrier Number) from NECA that is specific to Canada. If the OCN is registered to a related company, the related company must be registered with the CRTC to provide voice services in Canada and listed on the application.
STI-PA
After completing the CST-GA application process, you'll receive an on-boarding email requesting you to perform User Acceptance Testing (UAT) on both the CST-GA portal and the STI-PA. To complete critical portions of the STI-PA UAT, you must first enroll your company with STI-PA.
STI-PA Enrollment Steps
Your company's primary contact should email Neustar Customer Support (communications@support.neustar) to begin the enrollment process, which includes executing an STI-PA User Agreement. The email should contain:
- Primary contact name
- Phone number
- Email address
- Company name
If available, the primary contact should also provide the IP addresses to add to your Company's Access Control List (ACL) for the UAT environment. After submission, the primary contact will receive an enrollment email from Neustar Customer Support containing a User ID and temporary password.
Completing STI-PA UAT
To complete the STI-PA UAT process, you'll need to create an API user as shown below. Note that "sansay_api" is just an example username, not a requirement. You will be required to provide the API credentials to Sansay securely.
STI-CA
Upon completing CST-GA and STI-PA UATs Sansay will proceed to create your account in the Sansay STI-CA portal and securely deliver the following items:
- Private key (.key.pem file)
- Certificate repository URL (.pem)
Certificate renewals are available through our STI-CA portal.