ADSS-Admin-Guide - powered by Ascertia

Ascertia
Help & Support Center

Search:

Contents

Welcome
- Contacting Ascertia Support
- ADSS Server Knowledge Base
Getting Started
- System Requirements
- Glossary
- Reference to PKI Standards
Concepts & Architecture
- Identity Proven, Trust Delivered
- ADSS Server Features and Benefits
- ADSS Server Trust Services
- ADSS Server Architecture & Interfaces
- ADSS Signing Service Overview
- ADSS Verification Service Overview
- ADSS Certification Service Overview
- ADSS OCSP Service Overview
- ADSS TSA Service Overview
- ADSS XKMS Service Overview
- ADSS SCVP Service Overview
- ADSS LTANS Service Overview
- ADSS Decryption Service Overview
- ADSS CRL Monitor Overview
ADSS RA Service
- Configuring the RA Service
  - Step 1 - Profile Categories
  - Step 2 - RA Profiles
  - Step 3 - Registering Business Application
  - Step 4 - Using the Service Manager
- Device Certificates
  - Issued Certificates
  - Pending Requests
  - Declined Requests
- End-User Certificates
  - Issued Certificates
  - Pending Requests
  - Declined Requests
- Transactions Log Viewer
- Logs Archiving
- Alerts
- RA Service Interface URLs
ADSS Certification Service
- Configuring the Certification Service
  - Step 1 - Configuring Certification Authorities
  - Step 2 - Creating a Profile
    - Creating a Certification Profile
    - Creating an Attribute Certificate Profile
    - Creating a CV Certificate Profile
  - Step 3 - Registering Business Applications
  - Step 4 - Using the Service Manager
- Directory Integration
- Identity Certificates
  - Issued Certificates
  - Pending Certificates
- Attribute Certificates
- CV Certificate
  - Issued Certificates
  - Pending Requests
  - Declined Requests
- Certificate Templates
- CV Certificate Templates
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
  - Profiles Report
- Optimising ADSS Certification Server Performance
- Certification Service Interface URLs
ADSS Signing Service
- Configuring the Signing Service
  - Step 1 - Generating Keys and Certificates
  - Step 2 - Registering CAs
  - Step 3 - Configuring CRL Monitor
  - Step 4 - Configuring Signing Profile
    - General Settings
      - Supported Signature Types
    - Signature Settings
      - PDF/PAdES Signing Attributes
        
        Visible PDF Signatures
        
        Using a Local Language
        
        Invisible PDF Signatures
        
        Using a Local Language
      - PDF/PAdES Hash Signing Attributes
      - Microsoft Office Signing Attributes
      - PKCS7 Signing Attributes
      - CMS/CAdES Signing Attributes
      - XML/XAdES Signing Attributes
      - S/MIME Signing Attributes
    - Advanced Settings
  - Step 5 - Registering Business Applications
  - Step 6 - Using the Service Manager
- PDF Signature Appearances
- PDF Signature Locations
- Transactions Log Viewer
- Authentication Logs
- Logs Archiving
- Alerts
- Management Reporting
  - Service Stats Report
  - Usage Report
  - Profile Stats Report
  - Client Stats Report
  - Instances Stats Report
  - Service Statistical Report
- Optimising ADSS Signing Server Performance
- Signing Service Interface URLs
ADSS Go>Sign Service
- Configuring the Go>Sign Service
  - Step 1 - Creating a Go-Sign Profile
    - Document Signing Configurations
      - Signature Settings
        
        PDF/PAdES Signing Attributes
        
        Visible PDF Signature
        
        PDF Signature Appearances
        Using a Local Language
        
        Invisible PDF Signature
        
        Using Local Language
        
        PDF/PAdES Hash Signing Attributes
        CMS/CAdES Signing Attributes
        XML/XAdES Signing Attributes
        MS Office Signing Attributes
      - Viewer Settings
      - Key Store Settings
      - Certificate Filter Criteria
      - Service Settings
      - Advanced Settings
    - Certificate Generation Configurations
      - Certificate Generation Settings
      - Key Store Settings
      - Service Settings
      - Advanced Settings
    - PKCS10/CSR Creation
      - Certificate Generation Settings
      - Key Store Settings
    - Supported Signature Types
  - Step 2 - Registering Business Applications
  - Step 3 - Using the Service Manager
- Language Manager
- PDF Signature Locations
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Go-Sign Service Interface URLs
ADSS RAS Service
- Configuring the RAS Service
  - Step 1 - Configuring RAS Profile
  - Step 2 - Registering Business Applications
  - Step 3 - Configuring Notification Settings
  - Step 4 - Using the Service Manager
- Transactions Log Viewer
- Logs Archiving
- Alerts
- RAS Service Interface URLs
ADSS SAM Service
- Configuring the SAM Service
  - Step 1 - Configuring Hardware Crypto Source
  - Step 2 - Configuring SAM Profile
  - Step 3 - Registering Business Application
  - Step 4 - Using Service Manager
- Registered Users
  - User Keys
  - User Devices
- Transactions Log Viewer
- Logs Archiving
- Alerts
- SAM Service Interface URLs
ADSS CSP Service
- Configuring the CSP Service
  - Step 1 - Configuring Hardware Crypto Source
  - Step 2 - Configuring Notification Settings
  - Step 3 - Configuring CSP Profile
  - Step 4 - Registering Business Application
  - Step 5 - Using Service Manager
- Registered Users
- Transactions Log Viewer
- Logs Archiving
- Alerts
- CSP Service Interface URLs
- Use Cases
  - Authenticating CSP Users
ADSS TSA Service
- Configuring the TSA Service
  - Step 1 - Generating Key and Certificate
  - Step 2 - Configuring TSA Profile
    - Publicly Available TSAs
  - Step 3 - Using the Service Manager
- Access Control
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
  - TSA Profiles Report
  - Service Statistical Report
- Timestamp Service Interface URLs
- Optimising ADSS TSA Server Performance
ADSS Verification Service
- Configuring the Verification Service
  - Step 1 - Generating Keys and Certificates
  - Step 2 - Registering CAs
  - Step 3 - Configuring CRL Monitor
  - Step 4 - Configuring Verification Profile
    - General Settings
    - Trust Anchor Settings
    - Signature Settings
    - Algorithms Settings
    - Path Discovery Settings
    - Path Validation Settings
    - Advanced Settings
  - Step 5 - Configuring Signature Quality
  - Step 6 - Registering Business Application
  - Step 7 - Using the Service Manager
- Validating and Enhancing Existing Signatures
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Verification Management Reporting
  - Service Report
  - Usage Report
  - Target CA Report
- Verification Service Interface URLs
ADSS OCSP Monitor
- Service Manager
- Test Cases
- Test Scenarios
- Live Report
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Latest Warning Report
  - Latest Scenario Summary Report
ADSS OCSP Service
- Support for Multiple Trust Models
- Multiple CA and Unique Certificate Validation Policies
- Configuring the OCSP Service
  - Step 1- Generating Keys and Certificates
  - Step 2 - Registering CAs
  - Step 3 - Registering Trusted CAs for OCSP Service
  - Step 4 - Configuring CRL Monitor
  - Step 5 - Using the Service Manager
- Advanced Settings
  - OCSP Request Handling
  - Default OCSP Policy
- Forwarding Modes
- Access Control
- Tranasactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
  - Target CA Report
  - Daily Request Report
  - Service Statistical Report
- Optimising ADSS OCSP Server Performance
- Operating OCSP Service in FIPS 201 Compliant Mode
- OCSP Service Interface URLs
ADSS SCVP Service
- Configuring the SCVP Service
  - Step 1 - Generate Key and Certificate
  - Step 2 - Register CAs Using Trust Manager
  - Step 3 - Configure an SCVP Validation Policy
    - General Settings
    - Trust Anchor Settings
    - Path Discovery Settings
    - Path Validation Settings
    - Advanced Settings
  - Step 4 - Configure CRL Monitor
  - Step 5 - SCVP Service Manager Settings
- Access Control
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
  - Target CAs
- Operating the SCVP Service in FIPS 201 Compliant Mode
- SCVP Service Interface URLs
ADSS XKMS Service
- Configuring the XKMS Service
  - Step 1 - Generate Key and Certificate
  - Step 2 - Registering CAs
  - Step 3 - Configure CRL Monitor
  - Step 4 - Configuring XKMS Profile
    - General Settings
    - Trust Anchor Settings
    - Path Discovery Settings
    - Path Validation Settings
    - Advanced Settings
  - Step 5 - Registering Business Applications
  - Step 6 - Using the Service Manager
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
  - Target CAs
- XKMS Service Interface URLs
ADSS LTANS Service
- Configuring the LTANS Service
  - Step 1 - Registering Timestamping Authorities
  - Step 2 - Configuring LTANS Profile
  - Step 3 - Registering Business Applications
  - Step 4 - Using LTANS Service Manager
- Archive Data Log
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
  - LTANS Profile Report
- LTANS Service Interface URLs
ADSS HMAC Service
- Configuring the HMAC Service
  - Step 1 - Generating HMAC Keys
  - Step 2 - Configuring HMAC Profile
  - Step 3 - Using the Service Manager
- Transactions Log Viewer
- Logs Archiving
- Alerts
ADSS Decryption Service
- Configuring the Decryption Service
  - Step 1 - Generating Keys and Certificates
  - Step 2 - Configuring Decryption Profile
  - Step 3 - Registering Business Applications
  - Step 4 - Using the Service Manager
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Decryption Interface URLs
ADSS OCSP Repeater Service
- Configuring an OCSP Repeater
  - Step 1 - Generating Keys and Certificates
  - Step 2 - Registering CAs
  - Step 3 - Configuring CRL Monitor
  - Step 4 - Configuring OCSP Repeater Service
  - Step 5 - Registering Trusted CAs for OCSP Repeater Service
  - Step 6 - Using the Service Manager
- OCSP Repeater Access Control
- Transactions Log Viewer
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
  - Target CA Report
- OCSP Repeater Service Interface URLs
ADSS NPKD Service
- Configuring the NPKD Service
  - Step 1- Configuring ICAO PKD Upload Settings
  - Step 2 - Configuring ICAO PKD Download Settings
  - Step 3 - Registering Business Application
  - Step 4 - Using the Service Manager
- Manual Download
- Manage Certificates
  - CSCA Certificates
  - DS Certificates
- Manage CRLs
- Master Lists
  - Domestic Master Lists
  - Foreign Master Lists
  - Signing Settings
- Transaction Log Viewer
- Logs Archiving
- Alerts
ADSS SPOC Service
- Configuring the SPOC Service
  - Step 1- Using the Service Manager
  - Step 2 - Configure CVCA
  - Step 3 - Configure Foreign SPOC
  - Step 4 - Configuring SPOC Profile
  - Step 5 - Registering Business Application
- Manage Requests
  - Domestic Requests
  - Foreign Requests
- Manage Certificates
  - Domestic Certificates
  - Foreign Certificates
- General Messages
  - Received Messages
  - Sent Messages
- Transactions Log Viewer
- Logs Archiving
- Alerts
Manage CAs
- Local CAs
- View CRLs
  - View CRL Latest Contents
- External CAs
  - ADSS CA Server
  - Microsoft CA
  - Symantec MPKI
  - GlobalSign EPKI
  - GlobalSign HVCI
  - EJBCA
  - QuoVadis CA
  - Entrust CA
  - Offline External CA
  - DigiCert PKI
  - SPOC Server
- Local AAs
- Local CVCAs
- Local DVCAs
- Manual Certification
  - X.509 Certificates
  - CV Certificates
- Certificate Templates
- CV Certificate Template
- Alerts
Key Manager
- Crypto Source
  - PKCS#11 Standard
  - Utimaco CryptoServer CP5 HSM
  - Azure Key Vault
  - AWS CloudHSM
  - MS-CAPI/CNG
  - Importing Existing Keys
- Service Keys
  - Creating New Keys
  - Importing Keys
  - Creating Certificates
    - Creating CSR/Certificates
    - Importing Certificates
    - Exporting Keys/ Certificates
    - Searching Certificates
    - Rekey CSCA Certificates
  - Creating CV Certificates
    - Create CV Certificates
    - Importing CV Certificates
    - Change Sequence Number Algorithm
    - Rekey Certificate
    - Searching CV Certificates
  - Searching Keys
  - 5 Ways to Create Certificates
- Certificate Groups
- Certificate Templates
- CV Certificate Template
- Auto Renew Certificates
- Default DName
- Alerts
Trust Manager
- X.509 Certificates
  - Step 1 - Identifying the TA
  - Step 2 - Validation Policy
  - Step 3 - CRL Settings
  - Step 4 - Advanced Settings
- Domestic CVCAs
- Foreign CVCAs
ADSS CRL Monitor
- CRL Monitor Key Features
- CRL Storage within ADSS Server
- Proxy Settings and Digest Authentication
- Using the Service Manager
- High Availability for CRL Monitor
- Viewing CRL Details
  - Searching for CRLs
  - Viewing the Contents for a CRL
- CRL Monitoring
- Instant Revocation
- CRL Logs
- Logs Archiving
- Alerts
- Management Reporting
  - Service Report
  - Usage Report
Global Settings
- System Certificates
- NTP Time Monitoring
- Timestamping
- Real Time Revocation
- Notification Settings
- System Alerts
- High Availability
- System Security
- Authentication Profiles
- Authorisation Profiles
- Import/Export Settings
- Advanced Settings
  - System Level Settings
    - General
    - Core Instance
    - Console Instance
    - Service Instance
  - Services Level Settings
    - Signing Service
    - Verification Service
    - Certification Service
    - OCSP Service
    - OCSP Repeater
    - TSA Settings
    - XKMS Service
    - SCVP Service
    - LTANS Service
    - Decryption Service
    - OCSP Monitor
    - GoSign Service
    - RA Service
    - CRL Monitor
    - RAS Service
    - SAM Service
    - CSP Service
    - NPKD Service
    - SPOC Service
  - Other Settings
    - Archiving
  - Adding Custom Property
- Miscellaneous Settings
Access Control
- Operators
- Roles
  - Creating New Roles
  - Default System Roles
Client Manager
- Signing Service
- Verification Service
- Certification Service
- XKMS Service
- LTANS Service
- Decryption Service
- Go-Sign Service
- RA Service
- RAS Service
- SAM Service
- CSP Service
- SPOC Service
- NPKD Service
System Log Viewer
- Operational Logs
- Event Logs
- Logs Archiving
Server Manager
- ADSS Server Instances
- ADSS Services
- System Health
Approval Manager
- Enabling Dual Control
- Using Approval Manager
Operational Management
- Starting & Stopping ADSS Server
- Accessing the ADSS Server Console
- Adding an Operator to ADSS Server
  - Generating a new Operator Certificate
  - Creating Operator Accounts & Enabling Dual Control
  - Set-up Emergency Use Admin Accounts
- Managing Backups
- Managing Disk Space
  - Trace Logs
  - Database
- Upgrading ADSS Server
- Checking PKCS11 HSM Functionality
- Trace Logs Export Utility
Advanced Configuration
- ADSS Server Logging
  - Managing ADSS Server Logs
- Localisation
  - Changing Notification (Alert) Messages
    - Email Notifications
    - SMS Notifications
    - SNMP Notifications
    - Syslog Notifications
  - Changing System Messages
  - Replacing the ADSS Server Welcome Page
- ADSS Service Interface Error Codes
- Changing ADSS Default Service URL
- Configuring Tomcat for TLS Authentication Using HSM Devices

IndexBookmarkPrint