...

Detailed Overview Of Descriptors

The engine’s descriptors are:

• encryptedFields: Encryption and decryption of fields in the Identity Manager database

• objectHistorySigner: Signing and verification of the object history

• configZipSigner: Signing and validation of the configuration files

• configZipEncrypter: Encryption of the configuration files

• signEmailDescriptor: Signing of emails

• hermodDeviceEnc: Creation of device encryption certificates that are used in Smart ID messaging

• ContentProviderJWSSigner: Creation of JWS signatures used for Smart ID messaging content provider API

• SelfServiceJWTSigner: Authentication of Smart ID Self-Service users to the Identity Manager backend

• att_*: Attestation for provisioning to Smart ID Mobile / Desktop Apps

• (arbitrary name): Decryption of PIN blobs from pre-personalized smart-cards created with the Personal Desktop Client

Here each descriptor is described in detail, including requirements how it shall be bootstrapped.

...