Home

Latest News

What is SignServer?

SignServer is an application framework performing cryptographic operations for other applications. It's intended to be used in environments where keys are supposed to be protected in hardware but there isn't possible to connect such hardware to existing enterprise applications or where the operations are considered extra sensitive so the hardware have to protected more carefully. Another usage is to provide a simplified method to provide signatures in different application managed from one location in the company.

SignServer has ready to use:

• TimeStamp Authority (RFC 3161 compliant)
• Signers for different documents: PDF, XML, ODF, OOXML, MRTD (ePassport document signer)
• Validators for documents: XML
• Certificate Validation Service Framework for validating certificates using CRLs or OCSP
• Group Key Service Framework
• Simple Mail Signer

SignServer has been designed for high-availability and can be clustered for maximum reliability.

Different kinds of sign tokens exist:

• Soft token using PKCS12 files.
• PKCS#11 HSM tokens, such as the Utimaco CryptoServer, SafeNet ProtectServer, nCipher nShield or AEP KeyPer.
• PrimeCardHSM using smart cards.

What's new in SignServer 3.1?

Some of the new features in version 3.1 are:

• A new module system where the bytecode for a worker can be package as a separate module that can be loaded and unloaded at runtime
• XMLSigner/Validator
• ODFSigner
• OOXMLSigner
• CRLValidator
• OCSPValidator
• MRTDSODSigner (ePassport document signer)

More information can be found in the manual or in the changelog.

Open Source

This software is OSI Certified Open Source Software. OSI Certified is a certification mark of the Open Source Initiative.

The source code of SignServer is hosted on SourceForge.net and all downloads include the complete source code.