Cosign Digital Sign Template with airSlate SignNow

Cosign digital sign template

my name is Jonathan schreiber I'm a sales engineer from a RX and today we're going to be going over administrative training on the cosine signature solution this presentation will be available also from our website after the call might take a day or two to get up as well as if anything in particular needs to be done over again we'd be happy to communicate with you on that subject I want to start with a quick poll here if you look at your gotomeeting bar you should see a poll the question here is cosine currently deployed at your company yes no or not sure okay most people have question at this point and looks like about three-quarters of you do have it deployed I see a few people do not have it deployed and some people aren't sure this is going to be a webinar on administrating the cosine appliance so be pertinent if you either have it installed or your company is about to deploy it I do want to ask one other question before we get started which is for the people that were involved that do have cosine installed or even if you don't have it installed yet were you involved in the installation and admin training when cosine was originally installed so I am curious about that I've gone ahead and open that one up okay and it looks like most people have voted and that they were not involved in the original installation administrative training okay and there is one other question we can get to as the call / dressers so I'm going to go ahead and share my screen to bring up the PowerPoint slides and I'll go ahead and start the slideshow as stated we're going to be going through the cosine digital signature solution administrative webinar so let's take a look at our agenda for today we'll start off with an introduction of the cosine features cosine components what's actually involved in the signing process and then another screen showing the architecture the I once I've complete will go through how to configure the cosine appliance parameters how to take a backup of the cosine appliance some of the options available when it comes to high availability and load balancing monitoring of the cosine appliance as well as how to distribute the cosine client configuration to your end users and then we'll have some time for some Q&A at the end so our introduction is stated let's go over some of the features of cosine cosine provides a non for jable digital signature based on tki it's a centralized approach so we have a central appliance that stores all of your certificate information signing keys as well as graphical signatures it has a secure enclosure because it is appliance based it is on your network and it provides extensive third-party application support so we support signing of office documents in PDF are definitely the most popular but really any product that natively supports digital digital signatures can be signs such as cad drawings as well and then we also provide universal signing so even if it's a document format maybe it's only used to your company you are able to apply a digital signature to it by using our print to co-sign method we do support multiple user authentication methods most popular being username and password and we'll show you more about that during this call but we do also support cat cards or the ID smart cards random number generators things of that nature cosine provides a built-in CA and it's within the appliance it's going to handle the generation of all of your user certificates and finding certificates and manage those for you we also provide the ability to synchronize your users database from a current existing directory system I will show you the different options there and i'll have a poll question regarding that later on but we do sink the most popular one is against active directory so if you have a sinus group and active directory will sync against it cosine as a digital signature solution does manage your graphical signatures as well as you can see in this image we have a few scribbles on the page there famously John Hancock but also patty king and third one I can't honestly read the last name of but we do manage the graphical signatures and they're stored on the appliance itself and lastly we provide a signature API also known as safi which allows for easy integration with applications and systems or for building your own web portal things of that nature so let's go through what components make up cosine the cosine server which is that network attached appliance we saw an image of in the last screen and it can be installed as noted in high availability mode which we'll get into later in the call there is the client-side software so this is software that's installed on each end user's machine corporate desktops and servers that allows for signing we do have web services or soap AP is that enable external applications to use cosine capabilities when you install cosine clients one of the options is to use is to install rather the administrative portion which will install the administrator Microsoft management console or MMC just nappin installed on administrative machines and will show you what capabilities that enables you to have later in the call lastly as an administrator you'll be excuse me as an administrator you'll also have access to the electronic pad that we provide with cosine provide one of them and the drivers install on your machine and so you can manage the end capture the end users signatures which get stored on the appliance itself okay so let's go through what happens in a typical digital signature process so here we have our user who's going to log on and create a document next the user is going to click on the sign option depending on the document format this will be click on the sign option and the document hash is taken by the cosine clients and securely sent to cosine over an SSL connection now the RSA signature process begins and cosine sinks against the users directory to verify the user's identity and place it and excuse me signs that hash value lastly the digital signature is sent securely back to the application for signing and the native form of the document is digitally and graphically signed so let's take a look at basic sure of cosine so here we have the cosine appliance in the middle and you can see that as noted in the last one we have our end user who's going to be signing the end users in the top left who can send back and forth to the appliance documents to be signed or the hash of the documents to be signed you can see cosine is syncing directly off of the users directory to keep a list of the valid valid users but the authentification of that user is happening directly off of your users directory so cosine communicates there to verify those credentials the end user can also add graphical signatures to the system and you'll see on the bottom here the system handles the built-in CA it's also the store of the private key repository as well as graphical signatures and all of that by the way is taken in the backup which we'll get into backing up the system a little later in this call in the bottom right hand corner you can see the administrator who has that snap in for Microsoft management console and is able to administrate the cosine appliance through that so now let's talk about configuring specific cosine appliance parameters and also the I'm going to wait a moment between each slide just to let you know so using the management console the as noted when you are the cosine administrator and you install the administrative plugin it does provide for you that Microsoft management console for managing the cosine appliance the prerequisites for being a cosine administrator by the way is that you are valid cosine user and you your user is selected to be a cosine administrator which will speak to in just a moment and lastly you're logged into the appliance so as noted you can actually have cosine thinking against your directory system whether that's active directory or otherwise in Active Directory when you're thinking against Active Directory rather you create two users groups for cosine one is the cosine Steiners group cosine users group one is the cosine admins group to be a valid administrator or cosine you need to be a member of both groups and that's very important simply being a member of the cosine admins group will not grant you administrative access to cosine so that's why these prerequisites are written out in this fashion if you are sinking against Active Directory you need to be a member of both groups in order to be a valid administrator of cosine so let's take a look at what the main capabilities are of that Microsoft MMC from the MMC snappin you can install the cosine appliance and configure it you can backup and restore cosine data as well as upload cosine firmware updates which come directly from a RX you can process manual synchronization of cosine and the directory service as well as monitor the appliance for logs and performance information will be showing you how to do that too at the end of the call this is also where you would configure the high availability and load balancing parameters and you can do certificate management here as well if you were syncing with an external certificate authority managing the subordinate CA or uploading an SSL certificate to the box lastly you can view and modify system parameters and we'll speak directly to the system parameters that are available in just a moment okay so let's look at where that utilities actually located the cosine control panel which by the way is under on a window system start all programs a RX cosine cosine control panel when you have the administrative section installed you'll see that bottom section of appliances users management and client configuration management and will click on appliances management the appliance management screen comes up with the MMC which you can see here and any cosine appliance that it recognizes on the system will be listed and you can see here to 12 to 25 dealt 1249 is listed the cosine version the serial number which is also the name of the appliance on your network status have not logged in and the rule here which is alternate so this box was installed high availability and it's the alternate appliance most of the time it'll say primary okay I've noted one of the functions we can do from the mfc is actually install an appliance so here we're going to right click on close on appliances all tasks install and if we're going to sink the cosine defiance against Active Directory then we're going to click on new Active Directory appliance and you can see that there are several options for how to install what directory system to install against let's look at some of are available in that right click menu so login is how we actually log into the appliance as ourselves now this is when you're right clicking by the way on the appliance IP address so here you can see we're not right clicking on cosine appliances were very clicking just below it on the cosine cosine demo box which is what it's called but on the cosine IP so we can log into the appliance we can actually take a back up from here so we click on backup which we'll do in just a moment in a later slide we can upload software this is the cosine firmware versions that are going to be sent from a RX so this is how you'd upload a firmware patch or firmware upgrade to the system synchronize is how you can process a manual synchronization with the directory system you do have the ability to clear CA files download logs in case you're in touch with the support representative they would of course send you instructions but this is the location of the log files for the appliance you can restart the box there are three types of restart there's a soft restart which is going to toggle the services on the appliance a hardware restart which is going to actually bring the appliance to a halt and power back on as well as a hardware restart which is excuse me a appliance shutdown which is going to just that it's going to bring me finds to a halt you'll actually need to physically access the appliance to press the power button to turn it back on the next menu here is high availability this is how we manage the high availability and load balancing parameters on the appliance how we manage alternate appliances subordinate CA so this is where we can download the certificate request or upload the subordinate CA information to make cosine subordinate of another internal CA system you can upload the ssl certificate and then there's also the cosine performance monitor which we'll get into in later slides as well ok so let's keep going and using the appliance parameters here so let's take a look once we're logged into an appliance at some of the settings we have here so in this case we're going to look at client security settings okay this is going to be global so these settings actually for client security settings are also available on a machine by machine basis but this is going to set up some global rules and you can see your prompt for signature so do you want your users to be prompt for credentials your username and password or you know their CAC card whatever it is each time they sign okay and you can see some other options here enable automatically user login so there are some security settings which can be changed and I should mention as we go through these that any option that you change within appliance management will require a soft or hard restart of the box so you have to toggle those services off and on so if we were to come in here and change prompt for signature from false to true we would then want to right click on the IP address of the appliance select all tasks restart soft restart before that took effect okay and actually I believe that I have images of that so we're changing this system prompt for signature and then we do a soft restart and you can see that here I'll tasks restart soft restart okay so other things that are available here are automatic user logon for directory independent mode this is when you're not syncing with active directory okay so it approved accessing the users public information without presenting credentials so you could set that to true or false and again when you have that set you'd want to i'm just going to go back one's life if you want to change that you would then go all tasks restart and perform a soft restart so which aspects of the certificate can you actually change or have access to from the management utility here and what we're going to go through excuse me on these slides are the CDP and aia locations which are provided for in this screen so the certificate distribution point is actually it contains an updated crl the certificate revocation list contains information regarding revoked users certificates which is within the revocation list CDP objects is by default when you're sinking against Active Directory when you've done an Active Directory info is located in the SIS well of active directory and it's the CDP locations put into the end-user certificates so after they sign if you drill down that certificate information that users certificate would contain CDP information and when you're publishing to active directory in the sis file cosine can actually update and publish the new crls when they're required the AIA information is also published to sits ball specifies the location of the root certificate within your network and that information is also embedded into the end user certificate so when you're thinking against back to directory it's actually quite simple because cosine handles all of that publishing for you these locations are actually set in the during the initial installation but you can check them or move them from the appliance management window and so here we are you can see that we've now selected the certificate management tab here or option and we've highlighted the crl publishing frequencies so how often are we going to publish a new certificate revocation list and it's set here for one day okay you can also see on the screen the location so you can see a I a publication location as well as crl publication location are both listed here okay so let's take a look on our next slide we also have the ability as mentioned earlier we can do more than just username and password we support more than just username and password I think there was a question here okay there was a question regarding password prompts from users the question specifically is when downloading files from sharepoint our end users are being prompted for username and password it's usually filled out but it's an extra click that's actually generally not a cosine issue but a SharePoint issue with regards to whether or not the user is logged into their windows workstation through ad and if the SharePoint environment is also syncing off of ad so if if you're logged into SharePoint for example from a machine that's not a domain machine or you're logged in as different user when you click to download it the program that's downloading for example if you're opening a word document opening a PDF would have to log in to SharePoint in order to download that file it's a great question and I'm happy to discuss that especially since it's a little bit outside the scope of cosine I'll be happy to discuss that on a different call okay but here we're talking about extended authentication as stated we can do more than just username and password we support I believe it highlights if I go back to the slide here pilton radius and smart cards we can also so if you're doing radius authentication you would need to pay attention to the highlighted fields here and we're going to highlight some more depending on what which you're going with for smart card authentication you can see that we have the timeout we have all sorts of credentials here that relate directly to smart card authentication and lastly biometrics for example fingerprint biometrics things of that nature where you have your settings here so we do support them and we have configuration utilities available for them depending which one you're using the most popular of course is the sink infective directory and use your Active Directory user name and password so let's talk about some I well active directory is the most popular let's talk about some password policy that get set in this screen when you're not sinking against active directory so when you're using our cosine directory independent mode we're using cosines internal directory then you'll have this password policy and it's very similar to the password policy you'd find in Active Directory things of that nature you can set your minimum password length you can set password validity periods as well as requiring users to change their passwords things of that nature so when you're not thinking infective directory you definitely have some options when it comes to password policy lastly one last thing I want to speak about while we're here and we're going to get into this a little further when we go into performance monitoring of the system but actually under the Advanced tab is where we can set the cosine debug level and by default I believe it set the two and you can set it all the way up as high as four course when you said before those logs are going to be rather large so really you're not going to go into this setting unless you have a cosine support representative on the line or your troubleshooting a specific issue but here's where the cosine debug level is set to two generally if we're troubleshooting an issue that requires downloading the log we'll have you toggle this 24 restart the system reproduce the situation collect the log and then we'll bring it back down to two that way we keep the log sizes reasonable okay so the next top check on our list is actually to take a backup or restore the cosine appliance so how do we take them he'll back up the cosine appliance we're going to and actually more importantly what gets backed up with the cosine backup utility cosine backup utility will back up in one file the cosine database which is the user key certificate graphical signatures the internal CA files as well as cosine configuration data so that cosine configuration data refers to say for example password policies things of that nature everything's and appliances management as well as any information with reverse of sync with ad if you are syncing with Active Directory it'll save that information as well okay so how do we take and excuse me I should mention that the generated backup is saved as an encrypted file and the backup file can only be decrypted using the cosine appliance so when we do a restore functionality you'll require three things you'll require the excuse me the backup file that you took which is saved anywhere on your machine or a network drive a valid cosine appliance as well as the decryption key our backup mini key created during the initial installation of cosine so the cosine appliance came with three little USB keys one of which is the red license key which lives in the appliance and two of them are blue backup keys which are duplicates of each other only one of those keys is required for restore from backup okay so how do we take a backup of the appliance we open up the administrative MMC and we right-click on the cosine appliance once we're logged in and we select all tasks back up it'll ask where we'd like to back up where we'd like to create the backup file and to give the backup file a name here we're just calling it back up and placing it on our desktop a status bar will appear showing that we're topping the backup file from the appliance to the local system and finally the backup finishes successfully and a backup of the system has been taken ok so now have our backup file how do we restore an appliance from back up well there are some parameters that have to be set or met rather the appliance has to be in factory settings mode this means that if you have a current appliance you would have to serial connect to the appliance and essentially wipe the database of the appliance or if it's and applying a new appliance shipped to you it should be in factory settings mode but you'd have to check and typically a ARX support representative would assist you in checking to make sure that it is in factory settings mode next you would right click on cosine appliances so just to point out here you're not right clicking on the IP address you're right clicking on cosine appliances all tasks and instead of clicking install you would click on restore and this will take us through the restore options so the first thing it's going to do is ask us to point at the backup file that we'd like to restore from next it will ask us for the built-in username and password and these were created during initial installation okay now during a restore process you actually could change these but if you do have them set as standard for your company then it's probably best to enter the same ones but that's of course entirely up to whomever's administrating the appliance these credentials by the way are not in your Active Directory environment or your directory system these are your local to cosign so cosines built in administrative credentials it will then ask for the IP of the appliance you're restoring it's going to go through some screens that are greyed out which are confirming the installation details from that you're backing up from so it's going to show you here for example your CA information you won't be able to change anything if you're restoring from backup but it's showing you what's going to be restored and finally we get to the progress bar but we're not fully done yet it's not hands off at this point you can see that the screen is asking us to insert the original installations backup key and that's one of those blue keys we spoke about earlier so you'll need physical access the appliance to go walk over and place the blue key into the appliance once it's red the blue key it'll ask you to reinsert the license key that red license key that lives in the appliance and then the cosine appliance installation price will progress and finally complete successfully okay so that's how to restore an appliance from a backup file and we also went over how to retrieve that backup file from the appliance our next header here is high availability and load balancing okay so I'm going to bring up a screen that shows a system diagram of high availability setup you can see that we're going to have our domain controller our Active Directory cosine user and our cosine appliance farm so you should note here that the cosine appliances are sinking against each other so the alternates are sinking against the primary and that's an IPSec secured communication so secured replications the primary appliance is the only one that's communicating with the domain controller okay so one appliance is made of this primary that's your original installation only the primary sinks with the directory service or domain controller the alternate appliances as stated establish IP sex sessions with the primary for data replication okay and they do we'll announce themselves via service connection points in active directory so as will show in a second if one if one cosine appliance is down it'll roll for the next one as you can see your cosine clients to software installed in the end user's machine detects the appliances automatically in the directory service and it also the SCP tells the client the status of that appliance whether it's up or down okay so let's look into a little further high availability and load balancing and we're of course on an administrative phone call solace webinar rather so let's talk about management features on the primary appliance only so here on the primary when the primary appliance is down rather cosine users can continue signature operations but users cannot be added or removed because remember only the primary is communicating with the directory service okay and that primary and alternate appliance the tag you know the primary points are alternate lines those are static roles okay another important thing to notice that only the primary appliance can be backed up and I should note though for example I know that we've stated primary and alternate are static roles but if there is a situation where you need to promote in alternate to be your new primary that is possible to do so we can promote an alternate but you can only have one primary a dependent so if you promote an alternate you're demoting a primary which can happen in the case of Europe possibly taking one box down for maintenance or replacement etc so how do we go to the primary and alternate appliances how do we see the status of them so you can see the status of your alternate appliances by logging into the primary appliance and when you do you'll see two folders instead of the one we saw earlier and instead of going into system parameters which we work with earlier in the skull we're going to go into subscribed alternate and undersubscribed alternate that's going to show us the serial number or the appliance name of the alternate appliance the IP address of the alternate appliance as well as its status which will I the show okay or sink or running um here it shows okay so the time and it can also show typically what the last thing to sink was so maybe it added a few users or remove diffusers the last time that it synced with the primary how do we actually install that alternate appliance by right clicking on the IP address of the primary so we're not right clicking on chosen appliances we're right clicking on the IP address of the primary appliance all tasks and once we're logged in we're able to click on high availability and you can see here we have our options we have to install the alternate which is going to be you know a new installation of it also defines if we're clicking on the alternates IP we can set that alternatives primary we can subscribe an alternate as well so if you if you're turning back on in alternate appliance you can resubscribe it here so the last thing that we were going to speak about is monitoring the cosine appliance and downloading or retrieving of logs so cosine of does offer performance monitoring it also does offer as we noted earlier and we'll get back into appliance log files and they're also cosine client logs that can be downloaded okay how do we activate the performance monitoring of a cosine appliance from the MMC once again once you're logged in right click on the IP address of the appliance all tasks cosine performance monitor and we'll click start monitor is to bring up an option screen showing us how many hours we would like to monitor the system and how often we want a sample and in this case we're going to monitor for 96 hours or in sample every 15 seconds generally speaking you would only turn this on when a Eric support representative asks you to turn this on on the system so here we're going to click OK and the performance monitor get started how do we view these logs to analyze them so we'll click on that same screen all tasks cosine performance monitor and we'll select download logs and it'll ask us where we'd like to download it to and you can see that it's downloading as a CSV file once that downloaded we can view it using the windows performance monitor okay and so here we can open it take a look at the file that was created by cosine so here we're opening that specific file and we're able to monitor to take a look at the system over that period we had selected 96 hours with a 15 second sampling so we're able to view the system okay what other log files are available from the cosine appliance we have the appliance event log which log signing operations major errors and administrative actions such as backing up the appliance the appliance debug log which is internal debug information for a RX internal use only that means that typically you're only downloading that when a support representative has requested that log from you also if you recall during our conversation of what parameters could be changed through the MMC we did speak about where the debug log level is and so typically when you're requested that file you would first go in and up the debug log level and lastly the appliance install log which is an internal debug information related to the installation process only so if there was a problem during installation or we want to verify something about the installation the ARX representative working with you would ask you for the installation log okay there are also client log files which on our next slide we're going to go into excuse me another next slide it's about three slides away my apologies but there are client logs available which will show on a client's item end user side that has client software installed the logs of assigning processes not actually for the appliance specific to a user and will show that in just a moment so where can we actually retrieve these log files from for the appliance you can see here that if we go to all tasks download logs we can download the event log the debug log or the install logs from here when we click on any one of those it will ask us where we'd like to save it and what we'd like to call it if you are sending this to an Eric's representative we always request that you put your company name in the name of the file and it's going to give us a progress bar showing us the progress of downloading a lot creating the log and downloading it and finally it's saved successfully for our log so you can generally view them using the microsoft event viewer okay so here is an example of one we're going to open a log file this is the log file that we just downloaded a moment ago and here we can see everyone's going on we can double click to see exactly the information so it's just basically the Windows Event Viewer viewing of a cosine log file of the event log I should say so I mentioned earlier that there are some logs that are available within client configuration if you open up client configuration on an end user's machine you'll see under client as well as under signature API and Microsoft Office that under the miscellaneous tab you have the option to set a log and so here the detail level he's selected no love generally speaking if you're trying to collect the log you would set that to detail and you can specify a file location where you want the law to download to to write to and if you select the location a final name rather it doesn't this will create it for you so here are the detail level options you have no log errors warnings messages details and functions and I stated most of the time if we're troubleshooting an error we would want that set to details okay the last thing that we're going to discuss is the distribution of the cosine client configuration so your end users with cosine client installed there are options for for example how often they are prompted for a reason code or the default reason code that appears whether or not when they open a signed word document the word document automatically verifies the signature or not these are all settings that can be set on an end user's machine and the list goes on okay so when the user set these things they get saved to their local registry so the configuration files that you can grab are actually valid registry files and there are three methods for distributing those registry settings one is manually using the configuration files to take the r EG move it to the desktop and and load it you can use login scripts or any distribution software as well as Active Directory group policy okay when you do a manual configuration distribution using the configuration files we're going to select a certain machine with the desired settings so you set up one user the way that you want all of your users to be defined and from the client configuration screen which is in the control plan blind configuration we're going to select file and export to configuration file and this is going to allow us to save that re G file the registry settings to an individual file which we can then copy to another machine or to a network location and on the next machine you can double click on that re G file select yes to load that registry file to the to the registry click OK that it's been done successfully and of course just as applying any registry setting it may require a restart of the machine in order to accept a new configuration but now the new configuration is loading is loaded rather we spoke about using Active Directory group policy so let's talk about how to how to use Active Directory group policy to push out the registry settings so we're going to set a certain machine with the desired settings now you'll notice the screen looks a little different this is going to be a machine that has the administrative console installed and you'll go to client configuration management so you have to make sure that you click on the correct piece here instead of client configuration you're going to click on client configuration management and once it's set up correctly we're going to click on file and select export to group policy and this will allow us to select which users group to apply the configuration to and we'll click Save and of course whichever rules are in effect for that group policy the settings will be pushed to the users okay so question if you have access to the system here you could take a you can type in your questions in the questions bar or in the chat window just to go over so today we've gone through an introduction of the cosine system the features components and signing process as well as architecture we've gone through configuration of cosine appliance parameters backing up of the cosine appliance high-availability load balancing I'm sorry we went through backup and restore goes on up line monitoring the cosine appliance and viewing the logs as well as distributing the cosine client configuration okay so let's take a look here at some questions we have one here can the backup be scheduled to run automatically there actually is a command line version of the backup utility which can be used so on any machine that has the cosine client installed with the administrative section there's a small utility get back up that can be run of course anything that can be run from command line can be scheduled as a windows timer job so I hope that answers the question as noted at the beginning of the call I do see that we have more people here than before the video of this slide session will become available on our website for download okay okay here regarding setting up a user system the question is if the user does not have admin rights can a admin install the reg settings or does the user right have to be elevated I assume you mean administrative rights to their own machine and it's fine an administrator can come in and and load the registry and then that user settings would be changed the user does not have to be elevated ok so there's also a question regarding is there a way to monitor our excuse me is there a way to download the changes that have been made to the appliance so any change the appliance would be in appliances management and that's where you would view them the default settings are not really logs anywhere they are the default settings oh and I believe each parameter will show I could check that for you but I believe each parameter shows what the default is when you click on it but I can certainly really Fred's the one that asks a question I can certainly look that up and get back to you on it so there's another question here regarding how to retrieve this video there's actually going to be an email going out from our marketing department with details of where this video will be available online we do though have a similar webinar that's already available on our support site if you go to a RX com there's a support link at the top of the page and there is a cosine administrative training webinar available a video rather available there as well as yesterday's webinar the end user training there's a similar video to that available on our site in the support section as well you you you you you okay I think that about wraps us up here if you do have any further questions please feel free to email support of a RX com or you can go on our support on our a RX website to our support forums for and you can post to our forms if you have further questions or you can read up on what other people have asked and have answered on our forums as well so a RX com or support at erics com thank you all for attending you