The customer provides a platform for electronic legally binding signatures. To safely store private keys they needed to use a highly secure and HIPAA-compliant Hardware Secure Module (HSM) provided by Amazon (AWS CloudHSM). The deployment and configuration of the service, as well as the creation of properly secured private keys and integration of applications with HSM are not some easy tasks. Greg Solutions applied our extensive experience to support the customer every step of the way, starting from the configuration of CloudHSM till the generation of a proper CSR (certificate signing request) for the Cloud Authority (CA) and integration of the application with CloudHSM using the Client HSM daemon, HSM SDK and Java. Expertise delivered: - AWS Cloud HSM Deployment - Java Development - Logging System Integration - Monitoring System Integration - Infrastructure as a Code Development

1. AWS Cloud HSM
Implementation

2. About The Client
02
ESIGN GENIE
https://www.esigngenie.com
eSign Genie is a US-based HIPAA-compliant company which
provides a platform for digital signatures. Embedded into the
customer’s software or used independently, it allows to create
documents/reusable templates, share them securely and obtain fast
and secure legally binding electronic and digital signatures.
USA
LOCATION
ESIGNATURE SAAS
PROVIDER
INDUSTRY

3. Project Summary
TEAM SIZE
2 People
DURATION
3 weeks
03
- AWS Cloud HSM Deployment
- Java Development
- Logging System Integration
- Monitoring System Integration
- Infrastructure as a Code Development
EXPERTISE DELIVERED

4. The Challenge
DOCUMENTATION
Provide comprehensive documentation and
support for the client’s development team to help
them migrate the system from the hardware
HSM to AWS CloudHSM
SECURITY
Deploy and configure AWS CloudHSM clusters
for multiple environments to securely store
private keys
INITIAL SETUP
Pass the workflow of generating non-exportable
private keys to retrieve a certificate from the
certificate authority
AUTOMATION
Enable the automation of document signatures
using the Java and private keys from CloudHSM

5. Results
05
AWS HSM
Deployed and configured highly secure AWS CloudHSM clusters in
multiple AWS environments using Terraform for the initial steps
CONNECT JAVA APPLICATION TO HSM
Implemented a Java Web API server that interacts with CloudHSM using
PKCS 12 and helps to securely sign user documents
STABILITY
Ensured system stability - added Cloud HSM monitoring using AWS
Cloud Watch

6. Amazon Web
Services
Terraform
Java
AWS EC2
AWS
Cloud HSM
Amazon
CloudWatch
Technical Stack
bash

7. “Greg Solutions team completed the entire project within a few
weeks and the product was extremely solid; it didn't need any
further maintenance. They displayed a deep experience in the
technology used. Having excellent project management skills,
the team had great synergy and their process was thorough.”
Client Feedback
Mahender Bist
Founder and CEO at eSign Genie

8. Let's keep in
touch
CONTACT US
info@greg-solutions.com
12
READ MORE
https://greg-solutions.com/cases/dermpro