Security server

There are no organisation-specific limitations to the number of security servers, but this must always be assessed on a case-by-case basis. When assessing the number of security servers required, consider the type of information systems to be connected to the server (for example is the system critical) and the usage volumes.

You can also share a common security server between several organisations. Then there is no need for your own security server.

The technical requirements of the security server which will be joined to the Data Exchange Layer vary between the amount and the size of the outgoing and incoming messages. The more and the bigger messages are moved through the security server, the higher the performance of the server must be, and the more storage capacity is needed. The need of the storage capacity is bigger depending on the type of the logging.

Familiarise yourself more with the technical requirements of security server.

Yes there is, see a video about configuring a security server (in Finnish, subtitles available in English)Opens in a new window.. There is a playlist of videos on how to join the Suomi.fi Data Exchange Layer on YouTube. Videos are narrated in English and have Finnish, Swedish and English subtitles.

Check out also the playlist of videos on how to join the Data Exchange LayerOpens in a new window..

You can also watch a video demo on how to configure a security server using semi-automatic scriptsOpens in a new window. (X-Road Toolkit).

No, it can not, because the security server can be registered to only one of the Data Exchange Layer's environment (FI-DEV, FI-TEST or FI) at the time. Registration takes place when the security server is installed. To move a security server from one environment to another, you must reinstall the server.

Yes, it is possible. A security server connected to the Suomi.fi Data Exchange Layer may be organisation-specific or shared between many organisations. Each security server has its own authentication certificate, which is used for connections between security servers.

Correspondingly, each organisation has its own signing certificate, which is used to sign messages sent by systems. If multiple organisations are connected to the same security server, the organisation's own signature certificate verifies the messages used by the organisation's own services.

Read more about sharing a security server.

First, check if you can find a more detailed error message in the security server’s var/log/xroad/proxy.log and /var/log/xroad/signer.log files.

You can use this support articleOpens in a new window. from the developers of X-Road to help you interpret error messages. The support article also lists possible fixes for the most common error messages.

If you cannot find the error message you received in the support article or if you have difficulties in finding an error message, please contact the Data Exchange Layer’s support address palveluvayla@palveluvayla.fi.

X-Road currently supports RHEL and Ubuntu operating systems. Please see X-Road’s support articles for more information on migrating your operating system to a newer version:

• Ubuntu 20.04LTS -> 22.04LTS upgradeOpens in a new window.
• RHEL 7 -> 8 upgrade.
  Opens in a new window.