Expand my Community achievements bar.

Do we need to generate Digital Certificates to sign Pdf from AEM using AWS KMS

Avatar

Level 3

Do we need to generate Digital Certificates to sign Pdf from AEM using AWS KMS?  I need to sign the pdf digitally and there is no verification of the signature involved. Help me understanding this whole process

3 Replies

Avatar

Level 5

Hi @RamaniBa ,

 

You might need to use a PDF library (e.g., Apache PDFBox) to sign the PDF using the key fetched from AWS KMS and a logic to verify the signature in AEM.

 

Apache PDFBox | A Java PDF Library

 

Also make sure proper IAM policies are set on AWS and a service user with necessary permission is created on AEM to achieve the requirement.

 

Hope this helps.

 

Regards,

Hemalatha C

Avatar

Level 3

OKay will look at this. I am looking at using AEM SignatureService Java code on AEM website and KMS. 

 

Avatar

Level 1

Hi Hemalatha,

I saw your response and have got the following questions:

Our Goal - To Sign Documents with AWS KMS KEY, get the following:

  1. Adobe Approved Trusted Layer Stamp 
  2. Signatures are valid

My Questions

Will appreciate your prompt response.

 

Thanks & Regards,

RB