Configuring Credential Attributes used by ADS

Prerequisites

If you configure credentials for document certification and digital signatures, you need to have configured the Web Service SSL connection.
On AIX platforms, you need to have installed a full version of JCE on the AS Java that hosts the ADS in the folder (<JRE_HOME>/lib/security). The JCE files are required for extracting data from the credential file. After the installation of the JCE you need to restart the AS Java.

Context

Configuring the credential attributes consists of registering the password and the alias of each credential, which is used by Adobe Document Services (ADS).

Additional credential attributes

In addition to the required password and alias, you can also configure optional attributes, depending on the type of credential you have installed. After installing a credential and registering its password, you must configure the credential. Each credential record specifies the credential type and alias, and the location or filename of the credential.

A credential can be one of three file types - P12 Record, HSM Record or MSCAPI Record. Each of these file types has a number of attributes that must also be set. The following table shows the credential attributes and their file types:

Credential Attribute	Description	P12 Record	HSM Record	MSCAPI Record
Alias	Unique name by which the credential is known to the PDF Manipulation Module API	X	X	X
P12	Filename of the credential file (.pfx file)	X	-	-
Sha1	Thumbprint or sha1 value needed to distinguish among different keys of a credential. The sha1 value must be contained in the credential file.	X	X	X
DLL Path	Path to the library file, that implements the PKCS#11 interface for that particular HSM.	-	X	-
Slot	Slot number, that identifies where the private key is stored in the HSM.	-	X	-

Procedure

Start the SAP NetWeaver Administrator via the address http://<server>:<port> / nwa .

<server> : AS Java where the ADS are installed

<port> : HTTP port of the AS Java
Choose Configuration Management Infrastructure Management Adobe Document Services .
In the left pane, choose Configuration .
Select Credentials from the list and choose Add New Object .
In the Alias field, enter the alias of the credential you installed as follows:
- If you configure a Reader Rights Credential for usage rights, enter ReaderRights .
- If you configure a credential for certification, enter DocumentCertification .
- If you configure a credential for digital signatures, enter ServerSignature .
  
  Note
  Entries for the name of the credential are case-sensitive.
From the Type field, select the type of credential you are configuring (P12, HSM or MSCAPI).

The fields that become active and available for editing depend on the credential type that you choose.
For a P12 File, select the credential from the list.

Note
The list displays all P12 files that are installed in the directory mentioned in Installing a PKCS #12 Credential .
In the sha1 field, enter the sha1 value. This value can be copied from the credential file itself, and is typically a string of numeric and alphabetic characters. (This step is optional if your credential only contains one sha1 value.)

Caution
If you entered ReaderRights in the Alias field, you must not make any entry in the sha1 field.
For an HSM Record, type the Slot and DLL Path value in the corresponding fields.
In the Password field, enter the password you received together with the credential you installed.
Confirm the password and save.
Restart the AS Java.