Integration with hardware PKI digital signatures

Dear all,

Has anyone integrated Webtop or Taskspace with hardware PKI infrastructure?

We want to use hardware PKI infrastructure to store the user's private key and use the harware to verify the user during

a) Document check-in

b) Document modification

c) Workflow tasks (approval, sign-off etc)

We are using Documentum 6.7 and are aware what

a) The Content Server Fundamentals Guide

b) The Documentum Administrator User Guide

c) The xCP Electronic Signature xCelerator https://community.emc.com/docs/DOC-11485

say about this but we are interested in Digital signatures not Electronic ones and in using hardware to store the private keys.

Does anyone have any pointers?

Thanks in advance,

Nikos

Find more posts tagged with

Comments

aelbaraka

Hi,

I have the same requirement.

We need to use PKI infrastructure (not RSA) in order to use it during check-in, modification et signing documents in documentum.

Do you have some ideas??

Thanks in advances.

jsapaj

Hello Nikos,

I have experience with digital signature with Documentum. I will comment on some points that you need to be aware of:

1. Digital signature is format-dependent, you can have a token with a digital certificate and the password of course, but the signature will depend on the document's format. It's not the same to sign a PDF, a Word or an XML document, all of them follow different signature standards.

You can follow 3 different methods to sign your documents:

2. You can instruct users to sign documents on their native app before checkin or import (free approach)

3.Or, you need a custom java applet inserted (customized) into Webtop to sign from user's PC. Digital certificates and private keys cannot be transferred to the Webtop nor the Content Server so customized Webtop components with this applet will ask user for it's password every time they perform Checkin. I have personally implemented this solution on one government agency customer for XML files with attached documents on any format.

4.Or, You can have an independent signature repository or appliance that you can integrate via WebServices or API on customized Webtop's components that you need to use. I believe that you could also do this on a TBO and add some control or password attribute to your doctypes in order to fulfill the PKI appliance's requirements.

Finally,

You can also take a look to Documentum's Trusted Content Services license, It provides an API to sign PDF Documents that you can use to make customizations and applications that works with PDF.

If you need further assistance you can contact us. We are a pure Documentum shop with customers on South America, Mexico, USA and Africa.

Regards,

Jorge Sapaj

Solutions Architect

Puntocom S.A.

www.puntocom.cl

aelbaraka

Hi Jorge,

Thank you for your response.

can you give me your email address please.

Thank you

jsapaj

Hi aelbaraka,

I prefer not to post my email address on a public forum. You can contact me via our web site: http://www.puntocom.cl/Contacto

Regards,

Jorge S.