Prerequisites

Enabling verification requires that all imported service design, service offering, and catalog content archives are digitally signed using any JAR signing tool. CSA does not provide a JAR signing tool. A JAR signing tool is typically provided as part of a JDK, but CSA does not include a JDK.

Install a JDK and/or JAR signing tool on the same system that has the content archive that will be signed and the keystore used to sign the content archive. Refer to Create a Signed Content Archive for more information about creating a keystore and signing the content archive.