Capsule Signing Feature

Capsule packager now comes with the integrated HP Code Signing Service (HPCSS) feature. HPCSS signing is the central Code Signing Service established to meet the requirements of all users having access to ITOM Marketplace to centrally sign their software and firmware components. It is a Java-based client which communicates to the Code Signing Server over Secure Sockets Layer (SSL).

For successful signing, you should:

• Install HPSign Client. See Installing HPSign Client
• Set Environment Variable. See Setting Environment Variable
• Specify Boolean Sign Values. See Specifying Boolean Sign Values

Installing HPSign Client

• To Install HPSign Client:
• Go to https://hpcssweb-pro.austin.hp.com/hpcssui/ViewProject.xhtml to download and install the client.
Note: You need to secure an approval from HPE manager to access the web site.

• Follow the instructions during the installation and verify if all the prerequisites are met.

Setting Environment Variable

• Make sure the HPCSS path is present in the environment variable. If not, add it to the Class path.

Specifying Boolean Sign Values

• Specify the Boolean sign values at the root level of the capsule.xml file. For more information on XML file, see Capsule File Example of Create Capsule Definition File.

For example, <buildCapsule sign=true/false>

• If Signing is set to true, as in, <buildCapsule sign=true>

  You must provide the Project name, which has the LDAP group already configured within <signProjectName></signProjectName> tag. On successful acceptance of the Project name, the Capsule Packager will move ahead and sign the final capsule.

• If Signing is set to false, as in, <buildCapsule sign=false>

  Capsule signing operation is not performed.

If all of the prerequisites are met, the Capsule will be signed and will be available at the output directory.