The Sun PKCS#11 provider is not supported on the Windows 64-bit platform. As a result, HSM functionality is not supported for LiveCycle ES running on Windows 64 using the Sun JDK.
To provide HSM functionality for LiveCycle ES running on Windows 64, create a Signature SPI component that is able to access an HSM credential. This component creates a LiveCycle ES service that implements the Signatures SPI model. The Signature service delegates the signing to the SPI component which in turn delegates the call to a secure HSM web service.
To enable LiveCycle ES running the Windows 64-bit platform to sign or certify a PDF document using an HSM credential, perform the following steps:
- Run the Signature service using the following code to sign or certify a document:
HashMap prop = new HashMap();
prop.put("hsmAlias", Alias of HSM Profile in the LiveCycle ES Truststore);
prop.put("hsmWSEndPt", WSDL location given above, that is https://<machinename>:<port>/hsmws?wsdl);
Cert cert = provide the certificate which is provided in the HSM profile
Credential spiCred =Credential.getInstance(cert.getEncoded(),"RemoteHSMSPIService");
For information about signing a document using a SPI component, see the "Testing the signature handler" section in Programming with LiveCycle ES.