The Batch Signature Generator automates signing records with missing or invalid signatures. You can upload a CSV (typically from guardrail checks) of invalid records. This utility creates optimized batches and produces signed
update sets, ready for download and import into your protected instance. This process helps you streamline your workflow and eliminate manual creation of signing jobs.
시작하기 전에
Roles required:
- security_admin
- codesigning_admin
- sn_kmf.cryptographic_manager
The guardrail scan CSV report that was generated during CoT setup is essential to complete this task. If you want to rerun the guardrail check, you can navigate to the Signature Verification Status tab
within the Health and Status Dashboard. Select the Rescan button to start the scan.
이 태스크 정보
Follow the given steps to automatically generate batch update sets for records with invalid or missing signatures on the trusted instance.
프로시저
-
Select +Add file, select the CSV file from your device, and select the Upload button.
주: The CSV file can be modified to include only the essential records needed for signature generation, in line with organizational priorities.
You should see a success message displayed on the banner.
-
Select the Start scan button to generate update sets.
The progress bar indicates the status of the update set generation. If you encounter an error message, check the file to make sure that the contents and column names are correct. Review the file carefully to
confirm there is at least one eligible record.
-
Select Next button once it's enabled.
-
You can either selectively download each update set or select the Download all button.
-
Select the Download report button to view the update set generation summary.
The report shows:
- Update sets created with their names and scope information.
- Any unsigned records that require attention.
-
Select Complete if you have downloaded all the required update sets or select Close to return to the session at a later stage.
결과
You can import the downloaded update sets on the protected instance to complete further signing steps.