• Supported Signature Formats

    Creates advanced digital signatures based on IETF and ETSI standards including:

    XAdES
    CAdES
    PAdES
    ASiC
    PKCS#1 (Hash signing) signatures formats.

    The advanced digital signatures will have embedded revocation information and cryptographic timestamps.

  • Seamless integration with HSMs or Smart Cards

    Quickly integrates with your existing HSMs over PKCS#11 such as:

    Entrust nShield
    Utimaco Cryptoserver
    Microsoft Azure Key Vault
    AWS HSM etc.

    Likewise you may also plugin Smart Cards containing signing keys to create digital signatures.

  • Serve Multiple Policies

    Setup multiple policies to cater different configurations like cryptographic algorithms, signature placement coordinates, pages, visible or invisible, certified or approval signature formats etc. This allows serving different business applications having different document signing needs.

  • Quick Developer Integrations

    Khatim signing server provides developer friendly, restful interfaces allows them to integrate with their ECM, CRM and CMS in a matter of minutes. All end-points are secured and authorized over TLS Client Authentication.

  • Cross Platform, Diverse Deployments

    Khatim signing server is built with platform independence in mind hence supports Windows and Linux alike. You can deploy in different environments be it on-premise, private or public cloud, VMs or physical machines.
  • Cryptographic Agility

    Keeping in view businesses having different cryptographic needs, Khatim signing server supports both RSA and ECDSA cryptography with SHA-256, 384 and 512 hashing algorithms.

  • Military Grade Access Control

    Ensures military grade security (AES 256) to your signing server instance during administration using TLS client authentication.

  • Admin Friendly GUI

    Control your signing server administration with GUI based interfaces. From key generation, policy management to transaction log viewing all can be done from a single place.

  • Proactive Alerts & Troubleshooting

    In situations where signing server is not working as it should, Khatim signing server proactively notifies administrators to take immediate action. For traceability, all issues are recorded which can be pushed securely to your central logging systems e.g. Splunk, Grafana, Greylog, LogRhythm etc.
  • Logging & Auditing

    Khatim signing server records all incoming transactions & configuration for detailed analysis including the lower level cryptographic objects (CRL, OCSP, Timestamps) to construct long term digital signatures. Administrator can download and investigate request/responses on the fly, any time for troubleshooting or to check server status.
  • Unlimited Scalability

    Get ready to experience blazing fast signing with Khatim Sign Server! With the ability to install it as a cluster of multiple signing servers, you can reduce latency and add signing servers at any time without stopping already running instances. This gives you the unparalleled throughput that you’ve been dreaming of, all while keeping your workflow running seamlessly. Say goodbye to sluggish performance and hello to lightning-fast signing with Khatim Sign Server!
  • Reporting & Statistics

    Get real time statistics of how your signing servers are behaving. Administrators can drilled down information based on different data points like signature formats, signing policies, success/failure, alerts, signing algorithm and more. Khatim signing server also creates daily summary reports along similar data points providing administrator a snapshot of what types of signatures were generated during the day, any failures and alerts.