Entrust Signing Automation Engine
Integrate and automate digital signatures into applications and processes across your organization with signing solutions built to support efficiency, document integrity, and compliance at scale.
Entrust Signing Automation Engine is an on-premises signing platform for enterprises and trust service providers, providing a complete range of web services for integrating digital signatures into applications. The engine is designed to centrally incorporate digital signature operations in accordance with the standards of ETSI CAdES, XAdES and PAdES.
Enterprise teams use the Entrust Signing Automation Engine to automate high-volume signing processes, strengthen audit readiness, and maintain document integrity through certificate validation, authentication controls, and centralized signing policies.
Automate unattended bulk document signing
Centralize signing policies and controls
Strengthen compliance and audit readiness
Product Highlights:
Accelerate Business-Critical Workflows
Automate large-scale document signing processes to help reduce delays, improve efficiency, and streamline digital transactions across the organization.
Protect the Integrity of Every Document
Maintain trust in signed documents through authentication controls, certificate validation, and centralized signing policies designed to strengthen security and reduce risk.
Scale Digital Trust with Confidence
Support growing digital signing requirements with a solution built to automate high-volume signing operations while helping meet compliance and audit objectives.
Benefits of Entrust Signing Automation Engine
Unattended, bulk signing integration
Signature generation and verification services can be accessed via web APIs, or using our Watched Folders module.
Strong compliance and auditing capabilities
Audit logs are generated for any service access request and configuration changes.
Centralized key and policy management
Acts as a centralized repository for certificates, keys, and policy management, allowing you to set signature profiles.
How it works
Architecture
Signing Automation Engine incorporates functions that provide a set of security and trust mechanisms as services that can be used with different integration strategies:
- SOAP/WS: Using the OASIS DSS standard as an access protocol for web services
- REST/WS, SOAP/WS: Using the Entrust Signing Automation Engine integration gateway, which supports configuring traffic and data processing with an XML pipeline language
- Java SDK: For easy integration of electronic signature services in native Java applications
The following diagram illustrates a typical integration of the Entrust Signing Automation Engine platform into your organization.
Technical Specifications
- Format: Software appliance (please contact us to learn more about supported hardware or virtual machines)
- Event monitoring: Simple Network Management Protocol (SNMP)
- Security services: OASIS WS-Security, DSS (Digital Signature Service) and SAML, SOAP, and SSL/TLS
- Signature generation standards: PKCS#7, CMS, CAdES (ETSI TS 103 173), XML-DSig, XAdES (ETSI TS 103 171), signature for PDF documents (IETF), PAdES (ETSI TS 103 172) and S/MIME
- Signature validation and augmentation standards: PKCS#7, CMS, CAdES (ETSI TS 103 173 and ETSI EN 319 122), XML-DSig, XAdES (ETSI TS 103 171 and ETSI EN 319 132), signature for PDF documents (IETF), PAdES (ETSI TS 103 172 and ETSI EN 319 142), and S/MIME Encryption standards: PKCS#7, CMS, XML-Enc, and S/MIME
- Digital timestamping support: IETF RFC 3161 and RFC 5816 compatible servers
- Certificate validation support: Using CRLs, IETF OCSP compatible servers and customized mechanisms (OCSP is required for LTV signatures)
- Database and directory access: Oracle, Microsoft SQL Server, PostgreSQL and MySQL, LDAP directory access protocol
- Authentication and authorization: Native authentication methods based on passwords and digital certificates. Password validation can be delegated to LDAP/AD
- HSM support: PKCS#11 devices approved by Entrust Datacard (a license is required for the HSM connector)
- Network file systems supported: SMB/CIFS and NFS
Optional Modules
Watched Folders
A module that executes a series of signature-related actions (e.g. signing, verification, stamping, augmentation) on any file added to selected folders in your network.
Data Encryption
A module that provides document encryption and decryption functionalities. Supported formats are PKCS#7, CMS, XML-Enc, and S/MIME.
Features
Authentication and Authorization
Supports native authentication methods based on passwords and digital certificates. The validation can be delegated to LDAP/AD.
Object and Entity Management
Manages platform entities and objects. External repositories, such as user LDAP/AD, databases, files, and HSMs can be added for protecting private keys.
Certificate Validation
Provides PKI functions for validating certification chains and querying certificate status. Supports OCSP/CRL and customized mechanisms (e.g., databases).
Signature Creation and Validation
Creates and validates signatures compliant with the PAdES, XAdES, and CAdES standards; including document, email, and web services signatures.
Long-Term Validation (LTV)
Extends a signature’s validity up to the lifetime of the TSA certificate. Cryptographic reliability is preserved, the certification chain is incorporated as well as the certificate status information at the time of signing, and a timestamp.
Auditing and Accounting
Logs are securely stored in a uniform and centralized way. It’s also possible to forward log data to an external SIEM tool for processing and generating a report.
Entrust Signing Automation Engine Resources
Entrust Signing Automation Engine
Entrust Signing Automation Engine is an on-premises solution for automated, certificate-based document signing.
Entrust provides foundation for secure digital signing workflows
IDC report analyzes e-signature technologies