The following information is provided by ARX, Inc. to aid customers in their evaluation of CoSign for SharePoint (C4SP).

Transcription

1 The following information is provided by ARX, Inc. to aid customers in their evaluation of CoSign for SharePoint (C4SP). Lay Boon Tay Sales Engineering Manager ARX, Inc. 855 Folsom Street Suite 939 San Francisco, CA Direct: (408)

2 COSIGN CENTRAL BACKGROUND The CoSign Central system provides a highly-secure and scalable digital signature solution for the Enterprise. CoSign Central is delivered as a standards-based, FIPS level 3 digital signature appliance pre-integrated with many applications and file formats including PDF, Microsoft Word, Excel, Outlook, PowerPoint, InfoPath, SharePoint, Laserfiche and many more. CoSign is also pre-integrated with a variety of user-management systems including Active Directory, Oracle OID, IBM Tivoli, Novell edirectory, and other generic LDAP servers. The primary components required of a digital-signature solution are included i.e., key management, directory interface and digital-signing functions for several document, form and file formats. Additional features include, support for graphical signatures (and initials), multiple signatures per document, and high-volume, automated, batch signing of electronic records. Figure 1. The CoSign Signature block includes (a) standard digital signature, (b) signer s certificate, (c) date-time stamp, (d) signer s name, and optionally (e) signer s title, (f) graphic-signature image, and (g) reason code. Based on standard Public Key Infrastructure (PKI) technology, CoSign provides central management of signature key pairs from 1024 to 4096 bits in length. Key management is performed from within the secure network-attached CoSign appliance (depicted below). The CoSign appliance is offered with a secure tamper-resistant hardware profile- FIPS level 3. Figure 2. The CoSign Appliance 1 1 FIPS level 3 means physical tamper-resistance, (making it extremely difficult for attackers to gain access to sensitive information in the appliance), role-based and identity-based authentication, and physical and logical separation between interfaces by which critical security parameters enter and leave the appliance. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 2

3 COSIGN FOR SHAREPOINT (C4SP) CoSign for SharePoint is an add-on module for CoSign Central. Packaged as a feature that can be deployed to any SharePoint farm, C4SP brings instant digital signature capability to all SharePoint users. As a browser based application, it supports any computing devices (eg. Tablet computers, smartphones etc.) equipped with HTML browser. C4SP is also compatible with Nintex workflow products for SharePoint, allowing seamless integration of workflow processes with digital signature capability. C4SP supports digital signature on following file format: Portable Document Format (PDF) Microsoft Word 2007/2010 (.docx) Microsoft Excel 2007/2010 (.xlsx) NOTE: We are not using Microsoft Excel 2007/2010 in our evaluation site. Please contact your local ARX representative if you wish to test digital signatures via C4SP on Excel files. Figure 3. CoSign for SharePoint deployment Personal computers SharePoint Web Front-End Portal SharePoint Module Other computing devices HTTP/HTTPS Agent SharePoint Application Server Authenticated SSL/TLS Session Appliance Synchronize (optional) John MIller Active Directory (or LDAP) Built-in Certificate Management Built-in Key Management Built-in Graphic- Signature Image(s) Management ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 3

4 YOUR COSIGN EVALUATION SITE To aid in your testing of C4SP without having to install CoSign Central and C4SP in your own environment, ARX has created a test SharePoint site for you. You should have received the following information from your ARX contact: ARX SharePoint test site URL. Login usernames and passwords. Test documents. Contact your ARX representative if you do not have the above information. PREPARING FOR YOUR EVALUATION You should have the following hardware and software available for a successful evaluation of C4SP: Windows XP, Vista or 7 PC. Windows Vista or Windows 7 can be either 32-bit or 64-bit. Adobe Reader version 9 (version 10 recommended). This is required if you plan to check and verify digital signature(s) created in PDF files. Microsoft Word 2007 or This is required if you plan to check and verify digital signature(s) created in Microsoft Word documents. Computing device with web browser. Internet connection. You should also install our CoSign Verifier utility on your Windows PC to ensure successful validation of signed documents. To do this: - Close Adobe Reader or Adobe Acrobat if it is running. - Download the CoSign Verifier utility from this URL: - Save the downloaded file somewhere convenient (eg. Windows Desktop). - Unzip the file, you can do it by right-clicking on the file and select Extract here menu item. - Go to the extract directory and double-click on the file SetupVerifierU.exe to install CoSign Verifier utility. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 4

5 USING YOUR TEST SITE Any computing devices equipped with web browser should work, we will use a Apple ipad 2 and its Safari browser for illustration in this document. 1. Open your browser and enter the test site URL supplied to you by ARX. 2. You will be prompted for your username and password. Enter those. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 5

6 3. You will be shown the welcome page of your test site. Select Sample Documents link on the left side panel. 4. Select the document you wish to sign. On Windows computers, moving the cursor to the same row as the document is enough. On certain computing devices such as the Apple ipad, tab somewhere on the same row as the document but DO NOT tab on the document. A checkbox will appear on the same row as the document. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 6

7 5. To confirm selection of the document, check the checkbox that appeared on the same row as the document you wish to digitally sign. 6. Select the CoSign tab and select Sign with CoSign item under the Cosign tab. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 7

8 7. In the next screen, select the desired Signature Profile to sign. The Signature Profile determines where the signature will appear in your document. In your test site, there will be 2 pre-defined profiles available. Select a pre-defined reason code if you wish, or you can also enter one of your own. Enter your username and password, click the Sign button to complete the signing process. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 8

9 VERIFYING COSIGN DIGITAL SIGNATURES Many non-windows computing devices do not have applications capable of verifying digitally signed documents. For checking signature status on these devices, go to your test site document library. You will notice that digitally signed document has Last Signature Status and Signature Status column displaying Valid and Valid Signatures respectively. The column Signature Counter indicates the total number of digital signatures in the document. On a Windows computer, you can login to the test site and open the digitally signed document. Remember to install the CoSign Verifier first, see PREPARING FOR YOUR EVALUATION on page 4. For PDF, we recommend using Adobe Reader 9 or 10. When you open a digitally signed PDF, you will notice a green check mark on the upper left hand corner of the Adobe Reader. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 9

10 You can also see the signature field displayed within the Adobe Reader at the appropriate location. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 10

11 DIGITALLY SIGNING ADDITIONAL DOCUMENTS Your test site is initially setup with 1 PDF and 1 Microsoft Word document for testing. If these documents have been signed and you wish to sign those again, you will have to upload blank documents to the test site document library. To do this, login to the test site and go to the Sample Documents document library. Click on the Documents tab and select Upload Document. For PDF documents, select the blank PDF document you received from ARX (eg. PO PDF.pdf ) and upload it. Set the Content Type to Purchase-request-Robert-Davis and click Save. For Microsoft Word document, select the blank Microsoft Word document you received from your ARX representative (eg. PO Word.docx ) and upload it. Set the Content Type to PO and click Save. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 11

12 ADDITIONAL INFORMATION Visit our corporate web site at for more information about CoSign Central and the CoSign for SharePoint (C4SP) add-on module. You can also find various video tutorials here: Should you require further assistance, please contact ARX via Thank you. ARX PROPRIETARY AND STRICTLY CONFIDENTIAL 12