Re: [SignServer-develop] SigServer - Level 2 sole control

[Markus K. <ma...@pr...>]

On 12/18/2016 10:12 PM, Jaime Hablutzel wrote:
> To the date (December 2016), are there any plans to support officialy
> TW4S oficially in any of its sole control levels?.
> 

Hi Jaime,

It is currently not planned on the road map. However, the road map could
change if there is a customer demand or if someone is willing to support
the development either financially and/or by contributing patches.

We have not yet looked into the details regarding what would be needed
to implement something like this. Suggestions are welcome.

> Hi Markus
> 
> Best thanks for your response. I think is correct, that level 2 sole control
> must be supported by the SSCD or HSM if you consider the Slide 15. What's
> about the slide 17? If I understand slide 17 right, level 2 sole control can
> also implemented with a "simpler" shaping, because the signing server is
> responsible for the multi factor authentication of the signer. The SSCD
> itself is "only" responsible for nonce creation and the validation of the
> nonce + 1 factor SAD hash and DTBS (e.g. document hash). Under the adoption
> that a SSCD supports level 2 sole control, does the SignServer is able to
> produces signed hashes with level 2 sole control by default? If not, what
> has to be modified and what are the estimated effort?
> 
> Cheers,
> André
> 

Cheers,
Markus
PrimeKey Solutions

Save time and money with an Enterprise support subscription. Please see
www.primekey.se for more information.
https://www.primekey.se/technologies/products-overview/
https://www.primekey.se/service-support/support/