Set up a Sample Signer Using an HSM Crypto Token

To set up a sample signer by using an HSM crypto token, do the following:

1. Click on Add below the workers' list (See Figure 3).

2. Click on From Template, select pdfsigner.properties in the list menu, and click on Next.

PdfSigner Template example

3. Edit the signer settings in the configuration text area and change the WORKERGENID1.CRYPTOTOKEN setting to use the commented-out sample by using the PKCS#11 crypto token, CryptoTokenP11_, to match the crypto token set up.

4. Click on Apply.

Signserver PdfSigner Configuration example

5. Set the DEFAULTKEY worker property by clicking on the new signer, click on Configuration and then click the Edit link in the table row for the DEFAULTKEY property.

Signserver select PdfSigner

6. Enter the key alias for the newly generated key in the HSM into the Value text area and click on Submit.

PdfSigner configuration example

7. Install the signer certificate chain as issued by your CA:

   1. Click the link to your PKCS#11 crypto worker in the workers' list and click on Install certificates.

8. Click the > button to select your key generated previously.

9. Click on Browse and select your issued certificate chain.

10. Select Install in token and click on Install.

Signserver PdfSigner certificate install

11. To activate the new signer, select the link to the new signer in the workers list, and click on Activate.

12. Enter the HSM slot PIN and click on Activate.