Signing Service (signingService-SigningService)

The Signing Service is intended primarily for the use on a Niagara Supervisor. As of Niagara 4.13, it allows components within remote stations to make secure Certificate Signing Requests (CSR) to obtain signed X509 certificates, then additional requests to renew these certificates before they expire. The Signing Service fulfills these requests by returning certificates signed by a designated Certificate Authority (CA).

This component is used to fulfill the requests of queuing incoming CSR requests from signing transports, and delegating the request to the appropriate signing profile.

Image

To use the Signing Service component, drag it from the signingService palette to the Config > Services folder in the Nav tree.

You also find an example of a Signing Service pre-configured with an example signing profile and transport in the Typical configuration folder. There is also a plain unconfigured service in the Unconfigured components folder.

Image

To access the properties, expand Config > Services and click SigningService

Property Value Description
Enabled true or false (defaults to true) When true, all Signing Service functionality is enabled. While false, all submitted CSR will fail to process, and any queued CSR will be rejected.
Profiles folder Holds signing profile instances. See “Signing Service High Level Types” for more details.
Transports folder Holds signing profile instances. See “Signing Service High Level Types” for more details.