Using Signing Service on the same station

The following section describes the Signing Service high-level workflow when onboarding a component on the same station.

Prerequisites:

Niagara module version: signingService-rt
The Signing Service is pre-configured on the same station (also see “Configuring the Signing Service”).

Perform the following steps:

Install a Signing Requester component on the station (also see “Installing a Signing Requester”).
From the Signing Requester Type drop-down menu, select LocalSigningRequester and expand Signing Requester.
To register this component with the Signing Service, right-click on Individual or Combined Signed Cert Config and select Actions > Onboard
The Onboard window opens.
Select which Signing Profile should be used to process the generated CSR. Note that you need admin/write permission on the selected profile for the operation to succeed.
If successful, the status will change to Onboarded, and renewal will be automatically attempted prior to the certificate’s expiration according to the value in the Advance Renewal Percent property.