SignServer Bundles

SignServer Overview

SignServer Enterprise automates and secures the signing process, whatever the
use case, ensuring that teams can sign code and documents quickly and easily,
with full auditability and protection of signing keys. By leveraging client-side
hashing, organizations can maximize performance and control, supporting even
the most complex and large-scale environments.
With SignServer, private signing keys never leave secure, encrypted storage,
even during signing. Different project members or systems can authenticate and
share the same protected signing key, while providing a record of who signed
what. Meanwhile, signature keys are generated and used for signing within an
HSM, and all audit logs are signed for complete traceability.

SignServer Onboarding Bundle

A series of guided and instructive working sessions to install and configure SignServer within the customer’s environment to enable automation and secure the signing process, ensuring that teams can sign code and documents quickly and easily, with full auditability and protection of signing keys.

The Onboarding core service provide a guided initialization and configurations of Keyfactor Signum to provide customers with secure code signing as a service.

Customers can choose to add an Additional Services package for Professional Services-guided:

• SignServer Instance Setup Services

• SignServer Use Case Services

• SignServer Solution Testing Services

SignServer is available on HW, SW, SaaS, Cloud, Container platforms.

SignServer Additional Services

• SignServer Instance Setup Services

  • Initial instance setup for SignServer applications.

• SignServer Use Case Services

  • Additional worker setup and use case configuration for SignServer.

• SignServer Solution Testing Services

  • A robust set of testing services for existing SignServer configurations.

General Scope and Customer Participation

Keyfactor Responsibilities:

Guided deployment and configuration of SignServer in the customer’s environment, which includes:

• Database configuration

• Initial SignServer deployment and installation

• Node installation and clustering

• Peering to EJBCA or other CA

• HSM integration

• SignServer Worker(s) configuration

• SignClient configuration/use cases

Customer Responsibilities:

• Provide necessary infrastructure and resources: The customer is responsible for provisioning and maintaining the required infrastructure and resources necessary for the implementation and operation of the Keyfactor solution.

• Ensure availability of team members for working sessions: The customer must ensure that relevant team members are available to participate in working sessions to gain the necessary knowledge and skills.

• Review and approve deliverables: The customer is responsible for reviewing and approving deliverables provided by Keyfactor to ensure they meet the desired specifications and requirements.

• Design, installation, and configuration of end entity devices and software, including customer applications for validation protocols.

• Design, deployment, configuration, and management of any external database, including:

  • Backups

  • Performance Testing

  • Non-standard EJBCA indexing

• Design integration, configuration, and management of any external HSMs, including:

  • HSM Client installation and configuration

  • Backups

  • Performance Testing

  • Un-documented HSM configurations