.png){kind=logo}
Enterprise
The P11NG Crypto Worker does not perform any operations on its own and instead only hosts a Crypto Token that can be referenced by other Workers. The P11NG Crypto Worker internally implements a P11NG Key Wrapping Crypto Token and requires a P11NG Crypto Token referenced by the CRYPTOTOKEN property to use as the source crypto token.
Fully qualified class name: org.signserver.p11ng.common.cryptotoken.P11NGKeyWrappingCryptoWorker
As of SignServer 6.0, the JackNJI11KeyWrappingCryptoWorker has been renamed P11NGKeyWrappingCryptoWorker.
To download a sample configuration file for this worker, see Sample Worker Configurations.
Worker Properties
|
Required Property |
Description |
|---|---|
|
|
Specifies the key alias of the secret/symmetric wrapping key in the token that should be used to wrap and unwrap keys. Required. |
|
Property |
Description |
|
|
Specifies the name of Worker or Crypto Worker holding the P11NG Crypto Token to use as the source crypto token. |
|
|
(Optional) Specifies the key alias of wrapped key stored in the database that can be used to test that unwrapping is working. If specified, the Worker will be offline if a test signing cannot be performed with this key. |
|
|
(Optional) Specifies the cipher algorithm used to wrap the keys by secret/symmetric key. The value can be provided as a PKCS#11 mechanism name, a long constant value, or a hexadecimal constant value. For more information on the Wrapping Cipher Algorithm, see P11NG Key Wrapping Crypto Token. Default: |
If running in NoDB Mode, not all Crypto Token features are supported by the P11NG Key Wrapping Crypto Worker. For more information, see NoDB Mode in P11NG Key Wrapping Crypto Token.