Key Points
Supports manual or automatic refreshing of the timestamp evidence information to protect against the long-term erosion of crypto algorithm security
Complies with IETF LTANS Specifications in particular RFC 6283 and Long Term Archive Protocol (LTAP)
Can use the internal ADSS TSA Service module or connect with one or more external TSAs
Signed data objects can have their signature verified before being archived. The full verification report and evidence data (e.g. CRLs/OCSP etc.) are also archived as process-related meta data
Supports notary signing of archived data using the Archive Authority’s private signing key held in a Hardware Security Module (HSM)
Supports RSA signing with keys of 1024, 2048, 4096 bits
Supports ECDSA signing with keys of 192, 224, 256, 384, 521 bits
Supports hash algorithms: SHA-1, SHA-2 (SHA-256, SHA-384 and SHA-512)
Offers time drift monitoring, alerting and service stop features
Includes full secure transaction logging
Supports secure client application authentication and authorisation checks
Provides summary and detailed management reporting
Multiple integration options are possible using ADSS Client SDK. Alternatively watched folder integration using Ascertia Auto File Processor (AFP) can also be offered
Designed for High Availability, resilience and high throughput capability