Using In Built KeyStore by AEM how do I automate digitally signing many forms

[RamaniBa]

Using the In Built KeyStore by AEM Can I digitally sign many forms without manual intervention. How is it to be done 

Ramani 

[sherinregi]

Hi @RamaniBa 

You can try using the inbuilt keystore and sign.

Add the necessary private keys and certificates to the keystore.

Then you can create a workflow model and a workflow step which will handle the signing part .In workflow read the asset you want to sign, invoke keystore and then get the key and certificate for signing the asset and then return the asset.

the below links will help you in trying a POC 

https://jpsoares.medium.com/how-to-use-the-aem-key-store-feb454e80d64

https://github.com/AdobeDocs/experience-manager-65.en/blob/main/help/forms/using/aem-document-servic...

[RamaniBa]

Hello - Thanks. In what you mentioned do I need to create the public and private keys and the digital certificate? 

Is the KeyStore a physical database structure? 

Does it store the private key , certificate and alias in a row?

How do I pull out the correct key that corresponds to the manager who has to sign digitally without manual intervention

[sherinregi · Accepted solution]

Hi @RamaniBa 

Thats correct . AEM has the ability to store your cryptographic artifacts but you need to provide the key and certificate which you need to use. 

On storage part you can check the below blog for more details 

https://jpsoares.medium.com/how-to-use-the-aem-key-store-feb454e80d64

On pulling part you can refer to the above page for the details .Hope it helps