About this documentation

Edit online

This documentation describes how to deploy and use the IBM Digital Asset Offline Signing Orchestrator on your IBM Z® and LinuxONE servers with Secure Execution.

Note: Figures in this documentation illustrate concepts and are not necessarily accurate in content, appearance, or specific behavior.

Intended audiences

Edit online

The primary audiences for this documentation are the following user roles, who collaborate to complete cold signing process of digital assets:

  • System Administrators
  • Operators
  • System Custodians
  • Auditors

The different tasks that are described in this documentation are associated to one of these user roles. A single user can have a single role or multiple roles. For more information about the roles, see User roles.

Documentation structure

Edit online

  • Getting started with IBM Digital Asset Offline Signing Orchestrator shows the high-level steps on how to install, configure, and use the Offline Signing Orchestrator.

  • User roles explains different admin and user roles of the Offline Signing Orchestrator, who can act differently with required authentication.

  • Architecture overview shows various components of the Offline Signing Orchestrator, which are spread across LPARs with network isolation.

  • Authenticating to Offline Signing Orchestrator guides you to authenticate to Offline Signing Orchestrator with client certificates or with certificates that are stored on a hardware security key (HSK).

  • Managing documents explains how to manage transaction documents in Preconfirmation queue or Postconfirmation queue.

  • Starting a Signing iteration explains how to start a signing iteration and provides information about different signing iteration states.

  • Flushing the system explains how to flush the system and the different states of Offline Signing Orchestrator when a flush command is issued.

  • Console guide guides you to configure certificates to access Offline Signing Orchestrator UI console and explains UI console components.

  • Known limitations lists some known limitations in the current version of the Offline Signing Orchestrator.

  • Troubleshooting lists possible issues with suggested troubleshooting guidance. You can always refer to the logs first when you encounter any issues.

  • FAQs summarizes frequently asked questions about IBM Digital Asset Offline Signing Orchestrator. Leave comments to us if you have further questions to ask.

  • Terminology lists terms that are used throughout the documentation.