CertSign Integration for electronic signature
Certsign is a digital certification for digital signatures. It will provide the user with the capability to use the Esign processor in the Studio and Portal. This makes possible to sign contracts and other documents by a customer. The existing integration provides two types of signature:
- Remote signature (with authorization code sent through sms)
- Automatic signature (with an existing certificate)
- Automatic signature with qualified electronic sign.
After the installation of the ESign provider package, you should add the following configuration in Vault, or in JobServer serviceSettings.config:
In Vault
| Key Path | Key Name |
|---|---|
| kv/<environment>/<FintechOS Portal instance>/app-settings | FTOSServicesESignProvider2Endpoint |
| kv/<environment>/<FintechOS Portal instance>/app-settings | FTOSServicesESignProvider2AppId |
| kv/<environment>/<FintechOS Portal instance>/app-settings | ESignProvider2CertName |
-
For the FTOSServicesESignProvider2Endpoint key, add as value the URL to the environment.
-
For the FTOSServicesESignProvider2AppId key, add as value the subscription key.
-
For the ESignProvider2CertName key, add as value the mapping for the certificate provided by FTOS.
In JobServer serviceSettings.config:
<add key="FTOSServicesESignProvider2Endpoint" value="https://aztestapi01.azure-api.net/certSign"/> <!-- This is the test env url -->
<add key="FTOSServicesESignProvider2AppId" value=""/><!-- the subscription key -->
<add key="ESignProvider2CertName" value="certSignTest"/> <!-- the mapping for the certificate provided by FTOS-->
If you have to configure the automatic signature also, add the following secrets in Vault:
| Key Path | Key Name |
|---|---|
| kv/<environment>/<FintechOS Portal instance>/app-settings | ESign2AutomaticNumber_{ProfileName} |
| kv/<environment>/<FintechOS Portal instance>/app-settings | ESign2AutomaticName_{ProfileName} |
-
For ESign2AutomaticNumber_{ProfileName}, add as value the serial number provided for the specific profile
-
For ESign2AutomaticName_{ProfileName}, add as value the issuer information for the profile
(Deprecated) Add keys in web.config
Copy<add key="ESign2AutomaticNumber_{ProfileName}" value=""/> <!--this will contain the serial number provided for the specific profile-->
<add key="ESign2AutomaticName_{ProfileName}" value="cn=certSIGN CA Class 2 G2,ou=certSIGN CA Class 2 G2,o=certSIGN,c=RO"/> <!--this will contain the issuer information for the profile-->
The token {ProfileName} must be replaced with a profile name that will be used when requesting the signature process.