Create a New Electronic Seal Profile

Create a new electronic seal profile

1. Create a new Electronic Seal connector.

2. Click the 'Configurations' option from the navigation panel.

3. Click the 'Electronic Seal Profiles' option.

4. The 'Electronic Seal Profiles' page is displayed for you to make the necessary changes.

5. Click theicon from the grid header.

   
6. The 'Add' electronic seal profile screen will appear to add the electronic seal profile details. It comprises of three sections, i.e. Basic Information, Signing Method and Settings. Specify the basic information and click the button to provide the respective electronic seal profile details.

7. Click the 'Create' button. A new electronic seal profile will be saved and displayed in the list. See the table below for field descriptions.

Electronic Seal Profile
Fields	Description
Basic Information
Name	Specify a unique name for this electronic seal profile, e.g. My Electronic Seal Profile. This name will be used in the Service plan configuration.
Description	Add any description related to this electronic seal profile for your record.
Active	Select this check box to enable this electronic seal profile for service plans configuration. Inactive profiles cannot be configured in the service plans.
Signing Method
Signing Server	The "Signing Server" drop-down list displays all the ADSS Sever connectors and CSC Electronic Seal connectors. Select the one to use for electronic seal signing. Click the eye icon to view the details of the selected connector.
Signing Server Profile ID	This field will only appear in case an ADSS Signing Server has been selected. In the "Signing Server Profile ID" field, specify the ID or name of the profile, created in the ADSS Signing Server for electronic seal signing, e.g. "adss:signing:profile:001"
Signing Timeout (secs)	In the "Signing Timeout (secs)" field, specify the time in seconds after which the electronic seal signing requests should expire.
Settings
Hashing Algorithm	Specify the hashing algorithm (i.e., SHA1, SHA256, SHA384 or SHA512) to create the signatures.
Signature Type	Select whether PAdES-B-LT or PAdES-B-LTA signatures are required for your end users. Signature type must be the same as configured under ADSS signing profile.
Dictionary Size (KB)	Specify the signature dictionary size. When signing PDF documents, space is reserved within the document to embed the signature, called the signature dictionary. The size of the signature dictionary is directly proportional to the certificate chain to be used in the signature. The default value is set to 100 KB, however, there is a possibility that the computed signature can exceed the default dictionary size. In such a case, users may view the system message “signature dictionary size “100” KB is smaller than expected size e.g. “200” KB. Therefore, it is recommended to reserve an appropriate space for the signature dictionary to accommodate your certificate chain. In case PDF/A compliance is enabled in the Service Plan, then it is important to set the "Dictionary Size" to 15 KB for the Signing Profile selected in that Service Plan. In addition, based on the selection made in the "Signature Type" field of such a Signing Profile, you need to make the following configurations in the ADSS Server. In case "PAdES-B-LT" is selected in the "Signature Type" field, then configure the validation policy as OCSP for the whole certification chain under "Trust Manager" in ADSS Server. In case "PAdES-B-LTA" is selected in the "Signature Type" field, then set validation policy to any available value (i.e. CRL/OCSP) as the revocation information is kept in DSS.
Signature Enhancement Connector	Signature enhancement connector facilitates a System Admin to configure a separate timestamp server (i.e. Ascertia ADSS Server), which can be independent of the signing server being used for signing. This drop-down displays the list of ADSS Server connectors (i.e. those connectors which has 'ADSS Server' set as a 'Provider'), and is used for the time stamp. The signature enhancement connector appears for both signature types (i.e. PAdES-B-LT and PAdES-B-LTA signatures) and uses this enhancement connector for both signature and document timestamp.
Signature TimeStamp Policy ID	Specify the Signature TimeStamp Policy ID that must be the same as configured under Ascertia ADSS Server for TimeStamp Authority Profile. The Signature TimeStamp will be performed using the configured TimeStamp Authority Profile matching the TSA Policy ID at signing time. TSA profile information will be embedded within the document to identify the TimeStamp Profile used by the signatory. Policy ID value must be in the following format: 1.2.3.4.5 If there is no TimeStamp Policy ID is provided, then it will use the Default TimeStamp Authority Profile configured under the Ascertia ADSS Server.