This section describes how to log in to SignServer Cloud for the first time, following these steps:

To access the Admin Web of the deployed SignServer Cloud instance, the superadmin credentials need to be retrieved from the server and installed on a system and/or browser.

PrimeKey recommends using Mozilla Firefox since it currently has self-enrollment capabilities and its own keystore separate from the operating system. Note that if you are using Google Chrome, you will need to import the key file to the local machine keystore.

Step 1: Download p12 file from SignServer Keystore Retrieval Webpage

The landing page of the SignServer Cloud Instance will be accessible until the SuperAdmin keystore is downloaded from the instance. To get the superadmin.p12 file from your instance do the following:

  1. Enter the SignServer Keystore URL into your browser:
    https://<AWS Public DNS Name or AWS Public IP Address>/
  2. On the landing page that appears, click the SuperAdmin Keystore Download link:
  3. The username is "superadmin" and the password is the password that was entered into the SignServer Cloud Wizard.


Note that these credentials only can be used once and when authenticated, these credentials are expired.

If you are not able to access the keystore retrieval page, refer to the Troubleshooting section.

Step 2: Download Credentials

  1. At the bottom of the Keystore retrieval page is the link to the superadmin.p12 file. Download this file and keep it safe.



  2. Upon clicking on the download link, a p12 file will be prompted to download. Please keep this file safe.

Note that once the download link is selected the keystore retrieval page will no longer be accessible. If the p12 file is ever lost it can be retrieved from the instance directly from the directory /opt/signserver/p12/pem.

Step 3: Install p12

With the p12 file downloaded, install the bundle on your system and/or browser's trust store.

To install the credentials in Mozilla Firefox:

  1. On the Firefox menu, select Preferences.
  2. Click Privacy & Security.
  3. Scroll down to the Security section and click View Certificates.
  4. On the tab Your Certificates, select Import.
  5. Browse to the p12 file to import and enter a password.
    The password is the Instance ID of the SignServer Cloud instance, see Step 1.

Step 4: Browse to SignServer Admin Web

With the credentials installed, select the AdminWeb or access to SignServer Admin Web at the URL:
https://<AWS Public DNS Name or AWS Public IP Address>/SignServer/adminweb.

If you are not able to access the Admin Web, refer to the Troubleshooting section.

You will be prompted with a certificate dialog to authenticate to the adminweb of your instance.