NPKD Service communicates with Signing Service in order to sign the domestic Master List. The Signing Settings tab will allow the operator to define the required configurations in order to enable the signing service to sign the Domestic Master List.   

To configure Signing Settings in order to establish communication with Signing Service, navigate to the following screen below:  

The configuration of the items is as follows: 

Items

Description

Master List Signer Settings

Defines the following:

Signing Service Address

It defines the signing service address over which communication needs to be established between signing service and NPKD Service.  

List of Signing Service Addresses 

It displays the list of signing service addresses which are added by clicking on the 'Add' button adjacent to Signing Service Address field.  

Signing Profile

It displays the signing service profile that will be used to sign the Master List. 

Client ID

This field shows a legitimate Client ID that is registered in the Client Manager of Signing Service. 

TLS Communication

If this option is enabled, then NPKD Service will communicate with Signing Service using TLS client authentication. 

Certificate

This field shows the TLS certificate required for communication of NPKD Service with Signing Service when TLS Communication checkbox is enabled.

Signature Settings

Defines the following:

Hash Algorithm

The selected Hash Algorithm will be used to compute the hash over Master List and only this hash will be sent to Signing Service for signing. Currently the following hash algorithms are supported: 

  • SHA224
  • SHA256
  • SHA384
  • SHA512

Master List Signer Certificate

It displays the Master List signer certificate that will be added in the signature computed over Master List and also used by receiving parties for signature verification. The operator can provide the certificate from the file system. 


When all the above mentioned configurations are completed, the NPKD Service will be ready to communicate with Signing Service to perform the signing of the Master List(s).   


Click on the 'Save' button in order to ensure that all the required configurations are saved.



See also 

Domestic Master Lists
Foreign Master Lists