Prerequisites
SMTP server
SigningHub uses email as the primary notification medium. User registration and all notifications are sent via SMTP. Hence, it is a critical part of the architecture and deployment. Details required are:
Hostname/IP address of SMTP server
Listening Port of the SMTP server
TLS/SSL authentication to communicate with the SMTP server (if required)
User name and password to authenticate to the SMTP server (if required)
Email 'From' Address for notifications sent from SigningHub
Email 'To' Address for alerts and warnings sent by SigningHub
Email Subject for alerts and warnings sent by SigningHub
If there is no alternative, it is still possible to use the SigningHub. However, this involves copying the notification emails directly from the database and manually running the links therein. This usage is strongly discouraged in favour of a standard deployment, though.
Windows Roles and Features (2016, 2019, 2022, 2025)
SigningHub Enterprise has dependencies on several Windows roles and features. These must be installed before deploying SigningHub Enterprise. Required dependencies are added via Windows Server Manager.
Open Server Manager and select Manage.
From the menu, choose Add Roles and Features.
On the Add Roles and Features Wizard, click Next until you reach the Server Roles screen.

Click Next until you reach the Role Services screen.
Select the required items as shown. These are mandatory for SigningHub Enterprise when Active Directory is used for user authentication.

Scroll down and select the remaining required options.

Continue clicking Next until you reach the Identity Federation Support screen.
Select Identity Federation Support and click Next to proceed through the subsequent IIS feature selection screens.

If the Windows operating system media is not available on the server, you may be prompted to provide the source path on the Confirm Installation Selections screen.

Provide the correct path to the installation media and click OK.
Once the roles and features have been successfully installed, restart IIS.
Restart the IIS server from the IIS Management Console to ensure the changes take effect. Ensure that the IIS server is restarted, not individual application pools or websites.
URL rewrite module
This module is required to open SigningHub in responsive design mode, when opened on a mobile device. Click here to download the URL Rewrite module from Microsoft.com.
To install the URL Rewrite Module, a live connection is required to get URL Rewrite. Click here to download or use an offline version.
Additional Windows configuration (2016,2012 R2,2012)
Make sure that the Decimal Symbol is dot (.) instead of comma (,) in Control Panel > Region> Additional Settings as shown in the following screenshot:

ADSS signing server dependencies
ADSS Signing Server has no Windows dependencies like those required for SigningHub Enterprise. This is because it is a Java EE application that runs off the bundled Tomcat server. However, a database is still required, and optionally an HSM to secure private key material.
If you are using an external CA, then the ADSS Signing Server must be configured appropriately. Otherwise, SigningHub Enterprise will not function as expected. Click here for complete details of the ADSS Server.
Database
Both SigningHub Enterprise and ADSS Signing Server require their respective databases. It is not needed to create the schema or configure any other feature before the installation.
Permissions are required to allow the creation of database tables, and entry, modification, and removal of data within those tables.
SQL Server For details about SQL Server installation, user creation and permissions, refer to Microsoft-SQL-Server-Installation-Guide-for-ADSS-Server.pdf in the [ADSS Server-Home]/docs directory.
Oracle The following privileges are required to install the application with Oracle DBMS:
Connect
DBA
Resource
The same level of database permissions is required for SigningHub Enterprise and ADSS Signing Server databases and users.
Username and Password must not contain the following characters: [] {} () , : ? * = ! @ | <> = ; ' "" & . These characters are used to either initialise a connection or separate connection values, and a few are not allowed in XML. For reference, see the link.
Last updated
Was this helpful?

