Downloading the CSP/PKCS#11 Package

  1. Go to (Menu) > SIGN+ > Getting Started (left menu).
    The Getting Started page is displayed.
  2. In the Downloads widget (AppViewX Native Library) > , click Download your CSP / PKCS#11 package.
    The Pages > Download Package page is displayed.
  3. In the General Details section select the values as follows:
    Table 1. General Section - Field Description table
    Fields Description
    *OS Type Select the operating system of your choice from - Windows, Linux, or Mac.
    *Authentication Type Select the type of authentication from
    • User-Based: User-based authentication verifies identity through user name credential.
    • OAuth-Based: Authentication through OAuth-based authorization through service account.
    *User Name
    Note: This field is displayed if Authentication Type is selected as User-Based.
    Select the username from the dropdown for which the SIGN+ package installer is required.
    *Service Account
    Note: This field is displayed if Authentication Type is selected as OAuth-Based.
    Select the service account from the dropdown for which the SIGN+ package installer is required.

    For creating a service account in appviewx, click here.

    *Connection Type Select the option to download the CSP/PKCS#11 package through either Compute Cluster or Cloud Connector.
    Note:
    1. You can download the CSP/PKCS11 package through the compute cluster only if no cloud connectors are configured in the cluster.
    2. This option applies only to non-HSM-based certificates. For HSM-based certificates, configuring a cloud connector is mandatory to ensure proper communication with the HSM.
    3. The Custom Connector URL feature in SIGN+ enhances flexibility by allowing communication with the SIGN+ server via a load balancer. This setup enables the configuration of multiple dedicated Cloud Connectors, ensuring efficient routing of user requests from the end user's machine to the appropriate connector.
    *CC Host Name
    Note: This field is displayed if Connection Type is selected as Cloud Connector.
    Select the cloud connector host name from the dropdown.
    *: Mandatory fields
  4. In the Signing Configuration Details section select the values as follows:
    Table 2. Signing Configuration Details - Field Description table
    Fields Description
    *Select Signing Policy Select the Signing policy name which is specified to a user group.
    Note: The default policy name is set as the first policy in the dropdown.
    *Select Signing Key Select the sign key using which the uploaded file can be signed.
    Note: The default signing key is set as the signing key of first policy in the dropdown.
    *: Mandatory fields
  5. Click Add.
    The selected Policy and Signing Key are displayed in a table. The contents of the table are described below.
    Table 3. Column description of Signing Configuration Details
    Column Description
    Policy Name The policy selected in the field Select Signing Policy.
    Key Name The policy selected in the field Select Signing Key.
    Action Contains a delete icon to remove the value from the table.
    Note: Once the Policy is added, it cannot be added a second time.
  6. To download the package files, click the Download button.
    The package files are saved at the file location on your system. Different types of files are generated based on the selected OS Type. The files and their hierarchy are as follows:
    • Windows
      1. Sign+ Installer file
      2. <Policy_Name> folder - contains the root, intermediate, and code-signing certificates.
      3. Libraries - contains the folders CSP, Dependencies, and PKCS11 along with avx_sign_config.json.
    • Linux
      1. Sign+ Installer file
      2. <Policy_Name> folder - contains the root, intermediate, and code-signing certificates.
      3. Libraries - contains the folder PKCS11 along with avx_sign_config.json.
    • Mac
      1. Sign+ Installer file
      2. <Policy_Name> folder - contains the root, intermediate, and code-signing certificates.
      3. Libraries - contains the folder PKCS11 along with avx_sign_config.json.