Issuing Credentials
In the Credentials menu, click Issue credentials.
Select a pre-made credential schema by clicking on it's name or Create your own schema. You can click on Preview to see what attributes are included in the template.
.png)
Select a design or create a new one for your credentials. Alternatively, you can proceed without a design.
If you have many credentials to issue, you can issue them in bulk. To do this, select Import Spreadsheet.
Download the sample CSV template and fill in the details needed for your credential template. Upload the completed .csv file back to Dock Certs. Read how to correctly format the Spreadsheet for CSV upload.
If you want to add recipients one by one, select Add Manually.
You can distribute your credentials by email or directly to their wallet through their DID.
To send the credential by email, fill in their email in the Recipient Email field.
To send the credential directly to the holders wallet fill in their DID in the Subject ID (Recipient ID) field.
Fill in all other attributes that need to be included in the credential e.g. Subject name, Credential Title etc.
You can download the CSV sample file to use as a base for you recipient data upload. The sample file has only 3 collumns with the name, did and date attributes.
You will need to add columns and remove the ones you do not have in your credential schema.
When uploading a file you will be able to select a charset specification. UTF-8 will bet the choice for most users. If your dataset contains special characters you might need to choose a different charset, based on the one used to encode your data file.
{% hint style="info" %} If you do not know the holders dids you do not have to use it for the import, you can add emails, for the email distribution or distribute credentials manually. {% endhint %}
You will be asked to match the columns on the csv file to the credential fields. If there are any required fields on the credential schema they must be filled in, otherwise the import will not be successful.
If you need the credential to expire, turn on the expiration toggle and enter the expiration date.
After you have added your credential recipients you will be able to select the credential settings. First select which Organization Profile (DID) you want to use to issue the credentials.
You have the options to:
- Persist credential: This option will encrypt the credential by providing a password to access it and store it on Dock’s servers. The credential can be accessed and verified by a URL or QR Code. The recipient can scan the QR Code to import the credential into a wallet app. The credential can be deleted from Dock’s cloud whenever you decide.
- Generate PDF: If you choose to persist the credentials, the PDFs will contain a QR code the recipient can scan to view and store their credential in their phone wallet app.
- Credential revocation: By choosing this you leave an option for the credential to be revoked to invalid state at any time. If you leave this option unchecked, the credential can never be revoked and will always be verifiable.
- [Deprecating] Anchor credentials: This adds a hash of the credentials you issue on the Dock blockchain that can be referenced later to verify when and who created it.
- Zero-Knowledge Proof: Selecting this option will issue your credential with a Dock BBS2023 signing scheme. This allows credential holders to share specific data rather than show the whole credential to enhance their privacy. It must be enabled for paid verifications.
{% hint style="info" %} Persisting is a good option for issuers if they want to securely store the credentials as a backup. It encrypts the credentials using Libsodium crypto secretbox Salsa20/Poly1305 algorithm and stores them on our servers that are located in the US and are powered by Amazon Web Services (AWS). Because the credential information is encrypted, Dock can’t access the information to ensure data privacy and security. {% endhint %}
If you have entered the holders DIDs to Subject ID the holder will receive the credential directly in their wallet without any additional communication needed.
If you have entered the email address, you will have an option to write a message and preview the email that is going to be sent to the receiver of the credential.
If you do not have or want to use DIDs or email for credential distribution you can skip entering those details into the credential. System will notify you that there is no recipient data and credentials will have to be distributed manually.
Once the credential has been issued, it’s important that you download the credentials especially if you didn’t persist them otherwise you can’t get them back.
