US Navy, PEO Digital ATO - Configuring CAC digital signatures

[alexbarbato]

Overview

For groups leveraging the PEO Digital Authority To Operate (ATO), you will need to configure the CAC digital signature process in a unique way given the architecture design of this Navy network. The attempt to upload using the out of the box configuration will fail due to the default requirement that all traffic is met with the standard DoD Warning Banner and CAC authentication. There is an established and approved PEO Digital process for routing machine to machine traffic, which must be leveraged here to allow the signed PDF to be uploaded.

Fundamentally, there is a two step process to get the CAC digital signature workflow configured and working.

1. Reach out to the team managing the ATO and network (PEO Digital or their representatives) to work with them to configure your "API" URL.
2. Once the "API" URL has been provided to you, configure your instance as per the guidance below.

Configuration Steps

1. Create a new System Property with the "API" URL as designated. Pick the appropriate scope for the application you're working on CAC digital signatures in.
   

   glide.api.url = "https://YOUR.API.URL.MIL/"​ // It is important to include the trailing "/"

2. Update the Script Include for "PdfSubmissionHandler"
   

   // 1. Copy line 76
   // 2. Comment out line 76
   // 3. Create a new line below line 76 and paste
   // 4. Update the line you just pasted as the below
   var instanceUrl = gs.getProperty("glide.api.url");​

3. Update the Script Include for "SmartCardSigningUtilsSNC"
   

   // 1. Copy line 40
   // 2. Comment out line 40
   // 3. Create a new line below line 40 and paste
   // 4. Update the line you just pasted as the below
   annotMap["sn_instance_url"] = gs.getProperty("glide.api.url");​

[yvonneKTRS]

So If we are a DISA tenant we will need to reach out to DISA for the API? I know we are switching environments to get off the DISA tenancy so it might be worth it to wait.

[alexbarbato]

I suppose it depends what you mean by DISA tenant - this article is largely a nuance specific to some sub set of Navy customers only.

You may want to reach out to the ServiceNow team supporting you and see if they have guidance!