Cloud Digital Signature Service

Support multiple algorithms and signature types

It fully supports domestic algorithms and mainstream international common cryptographic algorithms, including SM1/SM4/DES/3DES/AES (symmetric), SM2/RSA (asymmetric), SM3/SHA1/SHA256 (abstract), to meet users’ various demands related to PKCS#1 and PKCS#7 digital signatures.

Key and certificate management

It provides the function of the secure and compliant management of users’ keys and certificates. Key management includes key generation, secure storage and destruction. Certificate management supports the generation of users’ requests for signature certificates, certificate import and management, CRL（certificate revocation list） management and so on.

Authority separation

As the authorities of cryptographic machine management and sensitive information management are separated, the operation and maintenance personnel of Ping An Cloud cannot access users’ keys. In addition, each instance supports the separation of responsibilities of system administrators, security and confidentiality administrators, and security auditors.

High availability

To ensure high availability of users’ instance, the system provides automatic fail-over switching function by default. The Acitve-Active clusters option is also available for specific instances types to meet user requirements for high availability.