Do we need to generate Digital Certificates to sign Pdf from AEM using AWS KMS

[RamaniBa]

Do we need to generate Digital Certificates to sign Pdf from AEM using AWS KMS?  I need to sign the pdf digitally and there is no verification of the signature involved. Help me understanding this whole process

[Hemalatha]

Hi @RamaniBa ,

You might need to use a PDF library (e.g., Apache PDFBox) to sign the PDF using the key fetched from AWS KMS and a logic to verify the signature in AEM.

Apache PDFBox | A Java PDF Library

Also make sure proper IAM policies are set on AWS and a service user with necessary permission is created on AEM to achieve the requirement.

Hope this helps.

Regards,

Hemalatha C

[RamaniBa]

OKay will look at this. I am looking at using AEM SignatureService Java code on AEM website and KMS.