Setup Kluis

Setup Kluis

Kluis HSMs are not directly accessible over Internet but would be accessible only through API Application Servers.

Client needs to Register on Kluis by requesting Crypto Signer Client (CSC) account using his eMail address as UserId.

Steps to Register on Kluis and Enroll Certificate:

1. Please scan your KYC document such as Passport or Adhar card, etc which has your Photo, complete Name and Address. File should be pdf file or image file .png or .jpg less than 1 MB.

2. Request Account: Request Crypto Signer Client (CSC) Account from Kluis CRM portal at https://crm.signer.digital/CscRegistration. (Wait for Ac Approval.)

3. Initialize Token:

Purchaes required number of tokens on Kluis HSM. (Offline step.)
Login to CSC account at https://crm.signer.digital and navigate to 'Token Management' page.
Un-Initialized tokens would be shown highlighted in yellow.
Click the image button to Initialize Token - this will open 'Set Token Attributes' dialog.
Please input and re-confirm Security Officer (SO Pin - for token admin), Token Label (alphanumeric, no spaces and special characters), and User PIN.
Clicking 'Proceed' button will initialize token and set above parameters for the token.
Token replication on mirror HSMs in same Data Center and Disaster Recovery Data Centers may take upto 24 working hours.

4. Enroll For Certificate:

Create Certificate Request:1

Navigate to 'Enroll Certificate' page.
Select TokenLabel (as given in Initialize Token step above) from drop down list.
Enter User PIN (as given in Initialize Token step above).
Clicking 'Enroll Certificate' will open Certificate Enrollment Information Dialog.
Fill the information correctly and click 'Generate CSR to Enroll Certificate'.
On success, CSR would be available in the Text area below the button. Copy the CSR complete text to a file.

Send Certificate Request to CA

Open Certifiying Authority portal to send CSR for obtaining Digital Signature Certificate.
Example: Open link https://dsc.safescrypt.com/sifycryptosigner/ in Internet Explorer only.
Complete Registration Form by uploading required documents and CSR file created in above step.
Once the Certificate is created by CA, download the .cer certificate file.

Import Downloaded Certificate
Login to CSC account at https://crm.signer.digital and navigate to 'Enroll Certificate' page.
Select the same token used at the time of CSR creation form the dropdown and provide UserPIN.
Click on 'Import Certificate' button which shall open 'Import Certificate' dialog.
Provide .cer certificate file downloaded from CA portal in above step and click 'Import Certificate' button.
Confirm certificate import by clicking 'List Token Content' button which shall show both PrivateKey and Certificate in the table below.

--------