diff --git a/pav-server/src/main/java/com/palnet/biz/api/external/controller/ExternalLaancController.java b/pav-server/src/main/java/com/palnet/biz/api/external/controller/ExternalLaancController.java
index 78f5d18a..934ccf66 100644
--- a/pav-server/src/main/java/com/palnet/biz/api/external/controller/ExternalLaancController.java
+++ b/pav-server/src/main/java/com/palnet/biz/api/external/controller/ExternalLaancController.java
@@ -46,7 +46,7 @@ public class ExternalLaancController {
         TsPlanRq tsPlanRq;
         try {
             tsPlanRq = JsonUtils.fromJson(body, TsPlanRq.class);
-        } catch (Exception e){
+        } catch (Exception e) {
             ErrorCode errorCode = ErrorCode.TS_PARAM;
             Map<String, String> error = new HashMap<>();
             error.put("rspCode", "300");
@@ -75,22 +75,56 @@ public class ExternalLaancController {
             Map<String, String> error = new HashMap<>();
             error.put("rspCode", ErrorCode.TS_ETC.code());
             error.put("rspMessage", ErrorCode.TS_ETC.message());
-            return ResponseEntity.status(300).body(error);
+            return ResponseEntity.status(700).body(error);
         }
-        return ResponseEntity.ok().build();
+
+        Map<String, String> successRs = new HashMap<>();
+        successRs.put("rspCode", ErrorCode.TS_SUCCESS.code().replaceAll("TS", ""));
+        successRs.put("rspMessage", ErrorCode.TS_SUCCESS.message());
+        return ResponseEntity.ok().body(successRs);
     }
 
     // TS VC 유효성 검토 callback url - endpoint
     @PostMapping("/vc/callback")
-    public ResponseEntity<?> vcCallback(@RequestBody TsQrcodeRs rs) {
-        log.info(">>>> vc/callback body: {}", rs);
-        tsService.vcCallback(rs);
-        return ResponseEntity.ok().build();
-    }
+    public ResponseEntity<?> vcCallback(@RequestBody String body) {
+        log.info(">>>> vc/callback body: {}", body);
+        TsQrcodeRs rs;
+        try {
+            rs = JsonUtils.fromJson(body, TsQrcodeRs.class);
+        } catch (Exception e) {
+            ErrorCode errorCode = ErrorCode.TS_PARAM;
+            Map<String, String> error = new HashMap<>();
+            error.put("rspCode", "300");
+            error.put("rspMessage", errorCode.message());
+            return ResponseEntity.status(300).body(error);
+        }
+
+        try {
+            tsService.vcCallback(rs);
+        } catch (CustomException e) {
+            log.error("IGNORE: ", e);
 
-    public static void main(String[] args) {
-        ErrorCode errorCode = ErrorCode.fromCode("TS200");
-        System.out.println(errorCode);
+            ErrorCode errorCode = ErrorCode.fromCode(e.getErrorCode());
+            if (errorCode == null) errorCode = ErrorCode.TS_ETC;
+
+            String tsErrorCode = errorCode.code().replaceAll("TS", "");
+
+            Map<String, String> error = new HashMap<>();
+            error.put("rspCode", tsErrorCode);
+            error.put("rspMessage", errorCode.message());
+
+            return ResponseEntity.status(Integer.parseInt(tsErrorCode)).body(error);
+        } catch (Exception e) {
+            log.error("IGNORE: ", e);
+            Map<String, String> error = new HashMap<>();
+            error.put("rspCode", ErrorCode.TS_ETC.code().replaceAll("TS", ""));
+            error.put("rspMessage", ErrorCode.TS_ETC.message());
+            return ResponseEntity.status(700).body(error);
+        }
+        Map<String, String> successRs = new HashMap<>();
+        successRs.put("rspCode", ErrorCode.TS_SUCCESS.code().replaceAll("TS", ""));
+        successRs.put("rspMessage", ErrorCode.TS_SUCCESS.message());
+        return ResponseEntity.ok().body(successRs);
     }
 
 }
diff --git a/pav-server/src/main/java/com/palnet/biz/config/WebSecurityConfig.java b/pav-server/src/main/java/com/palnet/biz/config/WebSecurityConfig.java
index 21a20078..e632f62d 100644
--- a/pav-server/src/main/java/com/palnet/biz/config/WebSecurityConfig.java
+++ b/pav-server/src/main/java/com/palnet/biz/config/WebSecurityConfig.java
@@ -41,6 +41,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
 			"/api/server/**",
 			"/api/comn/file/download",
 			"/api/comn/file/download/**",
+			"/api/external/laanc/**",
 			// TEST
 			"/api/v1/utm",
 			/* swagger v2 */