inoQulate by pQCee

inoQulate is a service to protect your PDF documents against Quantum attacks. This is the administration manual for the inoQulate solution.

For more information about inoQulate product or pQCee, please visit https://www.pqcee.com/inoqulate.

The inoQulate solution is built upon several key components:

1. EJBCA - A Certification Authority Software

2. Signserver - A solution that cryptographically signs code and documents

3. PostgreSQL Database - A Relational Database

4. A service runner that automates the process of contacting Signserver to sign a batch of PDF files.

Table of Contents

• 1. Getting Started with inoQulate on the Azure Marketplace in a Sandbox Environment
  • 1.1. Before You Start
    • 1.1.1. Credentials involved
    • 1.1.2. Register Resource Providers
  • 1.2. Subscribe to inoQulate from the Azure Marketplace
    • 1.2.1. inoQulate Marketplace Listing
    • 1.2.2. Basics
    • 1.2.3. Kubernetes Cluster
    • 1.2.4. Tags
    • 1.2.5. Review
  • 1.3. Set up the Solution
    • 1.3.1. Connect to the Azure File Share
      • 1.3.1.1. Using Azure Cloud Shell (recommended)
      • 1.3.1.2. Using your own Bash terminal
      • 1.3.1.3. Access the Azure File Share from the Azure Portal
      • 1.3.1.4. Connect the File Share to your terminal
    • 1.3.2. Download and install setup files
    • 1.3.3. Install the inoQulate PDF Verifier
      • 1.3.3.1. Download from the Azure Cloud Shell
      • 1.3.3.2. Download from the Azure Portal
      • 1.3.3.3. Install the verifier
  • 1.4. Recommended Next Steps (Optional)
    • 1.4.1. Set Allowed Container Images
    • 1.4.2. Restrict Kubernetes API Access
• 2. Using the inoQulate Solution
  • 2.1. TL;DR
  • 2.2. Working Directory
    • 2.2.1. Files and reports
    • 2.2.2. SPP Proofs
    • 2.2.3. Configuration Files and generated certificates
  • 2.3. Scheduled Runs
  • 2.4. Create a Pipeline for your documents
  • 2.5. Test run the service
  • 2.6. Verifying the inoQulation
    • 2.6.1. Adobe Acrobat Reader
    • 2.6.2. inoQulate PDF Verifier
• 3. Troubleshooting
  • 3.1. I am installing the solution for the first time, but there are errors when I run setup.sh.
  • 3.2. The db logs repeatedly show FATAL: no pg_hba.conf entry for host "10.xx.xx.xx", user "xx", database "xx", no encryption.
  • 3.3. My Azure Resource Deployment was successful but the setup failed.
  • 3.4. My Chrome/Firefox browser won’t recognise my SuperAdmin certificate.
• 4. Frequently Asked Questions
  • 4.1. How do I run commands on my Kubernetes cluster?
  • 4.2. How do I retrieve the Object ID of the administrator?
  • 4.3. How do I access the admin webpages of EJBCA and Signserver?
  • 4.4. What’s the web address for the EJBCA Admin Page / Signserver Admin Page?
    • 4.4.1. Constructing the Address
  • 4.5. How do I fully uninstall the solution?