Personal Secure Module (PSM)¶
The ITSigner can embed qualified electronic signatures in PDF documents by using an Infotech PSM and a signature card.
Qualified digital signatures are legally equivalent to handwritten signatures throughout the EU. Digitally signed documents are also protected against subsequent changes.
The generated signatures are part of the PDF standard and are also compatible and verifiable with known PDF readers. The signature is performed completely locally on the device, only the digital fingerprint (hash) of the document is transmitted to the PSM.
Prerequisites¶
- Required network connectivity:
- https://cdevices.live.infotech.de for registration and update management (HTTP/2)
- https://itsigner.live.zedal.de for use from ITSigner (HTTP/2)
- https://telemetry.live.infotech.de for error reports (optional, HTTP/2)
- https://docker-registry.infotech.de for software updates
Initial Setup of a PSM¶
Prerequisites¶
The PSM must be powered and located near the device through which the setup is performed. Once the PSM lights up blue, it is ready for setup. If it lights up green, there is also already a connection to the Internet.
Info
When starting the app for the first time, permissions for Bluetooth access and finding devices on the local network may be requested. Allow access to enable PSM setup. A wizard then guides through the setup as long as no signature device has been assigned yet.
Mobile App¶
Desktop App¶
The desktop app setup is performed analogously to the mobile app. If no card reader exists, the initial setup wizard is called. If a local card reader is to be used, the search for it must be started manually in the signature devices area.
The search lists all PSMs that are found via Bluetooth or multicast on the local network.
Info
The search runs for a fixed time. If the device was not found during this time, the search can be repeated. The search time increases by one additional second with each attempt.
The current status is displayed for the found devices. Devices that are “Not initialized” can be used for pairing with the app.
Info
If the Bluetooth symbol is active, the device was found via Bluetooth. Otherwise, it was found via LAN. For a stable Bluetooth connection, both devices should be in close proximity to each other.
Devices are not found over a VPN. The app and PSM must be in the same local network (subnet/broadcast domain) for setup. However, this only applies to the initial setup; later use does not require a direct connection between app and PSM.
The password should be sufficiently complex to ensure the security of the signature card.
If the PSM detects a wired connection, WiFi setup is automatically skipped. A WiFi can be set up later at any time.
