How to update a premium API certificate via production portal - NEW user guide from 2026-05-27

Premium API Certificates

When you need to update your Premium API certificate, you can now perform the update of your Public certificate via your existing access to Nordea self service Portal in production.

We recommended you to update your certificate for Premium APIs in a proper time before it expires to delimit the risk of any service downtime.

The supported PKI X509 certificate types allowed to be updated within the portal are:

• Self signed certificates only used for Premium APIs using CCM/CN Agreement.
• Corporate Access SignerID certificate, for Premium APIs only using Corporate Access Agreements.
• Web Service LogonID certificate, for Premium APIs only using Web Service Agreements.
• eIDAS QSEALc using PSD2 APIs and only used by PSD2 Licensed TPPs.

Notes; 

Trusted PKI x509 Signing Certificates issued by others than Nordea, will not be approved.

Only one certificate can be uploaded and active at a time for an Application.

Please ensure that you provide right Certificate for your Agreement and Subscription!

The new Certificate and it's content will be validated towards the replaced certificate and the Agreement that is related to Premium API service for the Application.  

Please ensure that: 

• the certificate type correspond to the Agreement used by the Application for the specific Premium APIs.
• the certificate ID in subject serial is related to the same Agreement.
• the certificate type correspond to the API subscriptions enabled for the Application.
• the certificate issuer correspond to the requested issuer for the Agreement. 
• the new certificate is valid and has status active in within the corresponding Web Service or Corporate Access Agreement.
• the certificate has not been expired, blocked, revoked or malformed.

Success: Two green collared successful response messages will be provided on the screen after submit when update has been completed. 

Failure: If an error message is shown "some thing went wrong", then the update of certificate has not been fully completed. Please check the error checklist info below. 

Please note: Only one Agreement type with their related certificate can be used and uploaded for one or several Applications within the onboarded developer organization. 

Please revisit this Article for updates and news about supported Certificates, Agreements and their relations to specific Premium API products.  

Edit Application with a new Certificate - user guide

• When logged in - > Go to Apps on top of the page:

• In the Apps page click on the app you want to update certificate:

• Click on the three Dots on the right upper courner and select Edit

• Paste your Public certificate in text format without the -----BEGIN CERTIFICATE----- / -----END CERTIFICATE----- in the textbox for Signing Certificates
• Click on Save

If the certificate update was successful and certificate validated, the two green success messages will be shown..

Error messages when updating Certificate: 

If any of these red responses is shown, then the update was not performed and need to be redone. If the problem continue, please reach out to our support.

• From the "update an application" screen.

Relations between Agreements, Premium APIs and Certificates.

Please note: If you update from Self Signed certificate to Corporate Access Certificate, then the Corporate Access Certificate have to be used for the Application for future.

Premium APIs for Instant Payment regulation

What could have gone wrong if an error message is shown? Most common reasons.