You can print out this table and use it to help you with bootstrapping the sign and encrypt engine.
Descriptor | Place-holder | HSM | Issuer | Key type / size | Key Usage | Validity | Trusted by |
|---|---|---|---|---|---|---|---|
EncryptedFields | No | RSA / | Any | None | |||
configZipEncrypter | RSA / | Any | None | ||||
configZipSigner | RSA / | IDM | |||||
objectHistorySigner | No | RSA / | Any | None | |||
signEmailDescriptor | / | Email recipients | |||||
hermodDeviceEnc | No | / | Any | None | |||
SelfServiceJWTSigner | No | RSA / | Any | None | |||
ContentProviderJWSSigner | RSA / | ??? | |||||
att_* | RSA / | Any | None | ||||
idopteAuthentication | No | RSA / 2048 | Any | Client side Idopte Middleware | |||
insideClientAuth | No | RSA / | digitalSignature | Inside server | |||
(PIN blob) | RSA / 2048 | Any | None |