Declare which OTHER tenants this tenant trusts. When a verifier on this tenant is presented with a Verifiable Credential whose issuer is did:web:<other-tenant>, the signature is checked against the cached public key you approved here. Trust is directional — if you want mutual trust, the other tenant must also add you.
Enter the fully-qualified hostname of the other tenant (e.g. phone.aloaha.com). We’ll fetch their /.well-known/did.json, extract the issuer public key, and cache it.
Cache freshness ≤ 7 days is shown as FRESH. Beyond that the entry still works (verifier keeps using the cached key) but you should re-Refresh to pick up any issuer-key rotation.
Paste a VC-JWT issued by any trusted tenant. This tenant’s verifier (/vcdm.ashx?action=verify) should return valid:true + signature_verified:true.