Customer cases / Financial services

Hana Bank: BDRC link with the Ministry of Justice.

Servermeister migrated Mylette’s Bank Data Retrieval Connector (BDRC) for Hana Bank Amsterdam from an outdated Tomcat installation to a new, container-based on-premise environment. The BDRC links the bank to the Banking Data Referral Portal of the Ministry of Justice and Security.

BankIT at Docker office· nginx · SQL ServerMutual TLS · PKIoverheid
8 weeks

from kick-off to operational API and dashboard

1 server

for API and dashboard, instead of a separate front and back end server

4 games

one point of contact between bank, head office in Korea, Mylette and Justid

The customer and the starting situation.

As a bank in the Netherlands, Hana Bank is legally connected to the Banking Data Referral Portal. Through this portal, investigative and supervisory authorities automatically request customer and product data. Mylette’s BDRC answers these requests on behalf of the bank.

The existing BDRC ran on an older Tomcat installation with a separate front and backend server. Since version 3.1, Mylette only provides container images and no longer updates the Tomcat variant. Migrating was therefore not a choice, but a condition for remaining supported and safe.

The Amsterdam branch does not have its own IT department. There was no documentation of the network around the existing servers, and management was done via an unmanaged jump desktop. Mylette provides the software, but does not install and manage. Hana Bank was therefore looking for a party that could bear the full implementation.

The challenge.

The assignment was technically clear, but the preconditions were strict.

  • Continuity towards Justice. The ministry expects 24-hour availability. The link may not be offline without prior consent.
  • Three parties plus a head office. Every change affected Hana Bank Amsterdam, the head office in Korea (DNS and NAT), Mylette and Justid.
  • No installation assistance from the supplier. Servermeister performed the installation independently based on documentation and one walkthrough.
  • Mandatory Microsoft SQL Server. The application runs on Linux, the database had to remain Microsoft, with its own backup and retention.
  • Mutual TLS with PKIoverheid. Until then, the certificate management was in the hands of Mylette, who wanted to transfer it.
  • Unknown network. Routing, firewall rules, and endpoints first had to be mapped out on-site.
In short
  • CustomerHana Bank, Amsterdam branch
  • SoftwareMylette (BDRC)
  • Implementation Servermeister
  • Chain partnerMinistry of Justice and Security (Justid)
  • Lead time8 weeks, from kick-off to live
Core of the solution
  • Linux Server with Docker and Nginx
  • Windows Server with Microsoft SQL Server
  • Mutual TLS with PKIoverheid Certificate
Don’t have your own IT department on location?

We are the point of contact between you, your suppliers and external parties.

Get quote

The approach.

Servermeister acted as the IT department that Hana Bank does not have locally: one point of contact between bank, supplier and ministry.

1

Kick-off and scope

Joint session with Hana Bank and Mylette on assignment, purpose, preconditions and responsibilities, followed by a technical walkthrough of Mylette.

2

On-site

inventory

Survey of the existing servers and network, plus advice on power supply, UPS and cabling in the server room.

3

Choice of

architecture

API and dashboard together on one Linux server instead of two, with the database on a separate Windows server. That saves hardware and management.

4

Hardware and basic installation

Placement of the servers, network configuration behind the FortiGate firewall, Ubuntu with Docker and nginx.

5

Database

Windows Server 2025 with SQL Server 2025, an empty database with the correct collation and its own login. The API container builds the schema itself at the initial start.

6

API container and certificate

BDRC API behind nginx, with the PKIoverheid certificate and mutual TLS towards Justice.

7

Test connection before production

First validate the test port with the Ministry of Justice and the head office, only then the production port and the switch of DNS and NAT.

8

Dashboard

BDRC Dashboard rolled out with local users and roles.

9

Documentation and aftercare

A dedicated installation guide and defined launch scripts so that updates and recovery are reproducible.

The solution

Only the API is accessible from the outside.

Requests from the Justice Department arrive at nginx through the firewall. nginx handles the mutual-TLS connection with the PKIoverheid certificate and forwards the request to the BDRC API. API and dashboard share one database on a separate server; The dashboard is only available internally.

ExternalJustice · Referral Portal
↓ mutual TLS · PKIoverheid
NetworkFirewall (NAT)
↓
Linux server · Dockernginx → BDRC APIBDRC Dashboard, internal
only
↓
Windows Server 2025Microsoft SQL Server 2025

Result and follow-up.

Hana Bank has a supported, documented BDRC environment with a dedicated point of contact for management.

Supported platform

BDRC 3.3.3 as a container, without its own maintenance of Java and Tomcat. Updates are the replacement of an image.

Less infrastructure

One application server instead of a separate front and back end server, plus a database server.

Demonstrably working

The API runs stably on the new database, the health check answers positively and the link is accessible from the outside with mutual TLS.

Insight for the bank

Compliance and management can see the status, the data provided and the request logs in the dashboard.

Management invested

Certificate renewal, updates and network management are the responsibility of Servermeister, rather than a vendor that doesn’t consider it to be part of its scope.

Since 2008

Companies that run on us.

For over 15 years, we have been providing secure and reliable IT to small and medium-sized businesses. For a fixed monthly fee and with short contracts.

BankIT at the Hana

Bank

Mylette BDRC office at Hana Bank

From outdated system to a container environment with, as an IT department that the branch itself does not have.

Read the case →

EventsServer management

MOJO Concerts

IT in order, lower costs

The largest concert provider in the Netherlands. We put their IT in order and reduced costs.

Read the case →

GovernmentLinux server management

Municipality of Epe

A point of contact for Linux

Fixed updates, certificate management and 24/7 monitoring, so that the in-house ICT department could focus on the rest.

Read the case →

★★★★★ 10/10 on Trustpilot · 97% of the requests for help solved
All customer cases →