...

Overview

...

 uses frevvo uses public key cryptography. When a  server a frevvo server is first started, it generates a public and a private key. This is automatically generated using the RSA algorithm. There is no official certificate authority (CA); however, if you want one you can supply your own public and private keys that are certified by some authority (like Verisign). An official CA is not required, since the data is signed by and verified by using frevvo using keys generated by frevvo. You must keep the private key "private" by setting up good security practices to the serverfrevvo server's disk. The public key may be shared with anyone and, in fact, if you manage the server as the admin user, and click on Security you can see the public key displayed there.

When a section is signed, the data in the section, together with a time stamp, the signing user, and a few other things are used to generate a message digest. The message digest is digitally signed using the private key. The signatures (there can be more than one) are included with the submission – in the repository and sent in the HTTP POST so you can can save it yourself if you want.

When the form is re-initialized from the submission documents, you must also supply the signatures. The initialization process will verify that the data has not changed (i.e., has not been tampered with) and the signature is still valid. If the signature is not valid, it is removed and the entire Section is displayed with a visible error (large red background). If it is valid, there is a green background and the Section cannot be edited.

...

One way signatures become invalid is when the production form is changed to remove a control that was inside a signed section. See Admin Best Practices for updating a form/workflow in production.

Signed Sections

provides frevvo provides true digital signature functionality via a Section control in your form. The user signs a specific Section, so that different parts of the form can be signed by different people rather than a signature being applied only to the entire form. Signed sections provide authenticated digital signatures with either a Wet Signature or Text/Signature Image type of signature. 

...

...

• None Required - no signature required, section not digitally signed.
• Text/Signature Image - An uploaded signature image for the user will be used, if one is available. The user's name will be printed otherwise. The date of the signature, based on the user's browser settings, will also display.
• Wet Signature -  will  frevvo will present the signature entry dialog to capture the user's signature. The date of the signature, based on the user's browser settings, will also display.

...

The Lock sign means that the next person in the workflow can not cannot remove the signature and edit the signed data. A good use case is an employee performance review where the manager starts the form, and signs the review, and sends it to the employee. You would check Lock sign so the employee cannot unsign and edit the data entered by the manager.

The Must sign property makes the signature required. With Must sign, a form cannot be submitted or a workflow is not sent to the next person until the signature is added. Checking Must sign will disable the None Required option from the Signature dropdown and automatically selects Text/Signature Image. You can change the Signature dropdown to Wet Signature.  

Sections that are hidden/not hidden via a rule or the Visible property in the designer, behave as stated below with respect to Must Sign:

...

• When used in a standalone form or the first step of a public workflow, the user must be logged into  in frevvo in order to sign the section.

• When used in a Workflow Step, this type of signature will authenticate the signer based on the Workflow Step assignment.

  • If the Workflow Step is assigned to a a frevvo User, that person must login to perform the step and sign the section.

  • If the Workflow Step is assigned to an Email address, when the anonymous user clicks to sign they will be prompted to enter the correct email address along with their first and last name to authenticate.

    Note
    Email Authentication does not work in workflows embedded in Confluence. This is because the user must login to Confluence to complete the task.

    
    

...

If a user clicks the Sign this section button and there are invalid or empty required controls in the section, they will see this error "An error has occurred. Your signature could not be saved because the Section you are signing contains invalid controls. Please enter valid information in all such controls and click the Sign button again."

Signature Control

You can use the signature control to place a signature anywhere in your form. The Signature control allows the user to enter their signature using either a track pad/mouse, stylus or a touch screen during form completion. Authentication to the server frevvo server is not required. If the Printable property is checked, the Signature image will be displayed on the PDF Snapshot of the form. Your browser must support HTML5 canvas technology for proper signature entry functionality.

When designing a form with an a Signature control, the captured signature is attached to the form submission as a PNG image attachment. This PNG image is included in your form data and will be sent in any Document Actions that handle form data. For example, should you choose to post the data to your web application, then the signature PNG is part of that posted data. Should you choose to email the data, the signature PNG will be attached to the email. The captured signature PNG is available for downloading by browsing your submissions within frevvo. See Submissions Stored Inside of frevvo for the details.

...

If you have a Wet signature control in your forms/workflows, you may prefer to  use a device to capture a hand-written signature instead of the mouse or a touch screen. The Topaz Electronic Signature Pad is one such device that is now supported in frevvo. 

Topaz devices are only supported for desktop workstations/laptops running the Windows Operating system. It is not supported for on frevvo on mobile devices.

Forms and workflows can be made accessible to help individuals with visual and motor impairment. The Topaz Signature Pad works well when used in a form/workflow designed for accessibility.

...

The Topaz Electronic Signature pad works with a standalone frevvo Wet Signature control and when the Wet Signature control is configured in a signed section.

You can still use the mouse or touch screen to sign if a Topaz Signature pad is installed on your system.

In order to use a Topaz signature pad with a particular laptop or workstation, driver and web api software modules must be installed before connecting the device to your computer. Refer to the instructions below InstallingtheTopazElectronicSignaturePad.

Installing the Topaz Electronic Signature Pad

...

It is up to the designer frevvo designer to specify the forms and steps in a workflow, that will be using the Topaz signature tablet. Simply click the cog icon in the forms designer to display the form property panel. You will notice the Allow Sign Pad property is not checked (default). Check this property to change the runtime behavior of the signature dialog and allow users to sign with the external signature pad.

Image RemovedImage Added

The Allow Sign Pad property is also available in Workflow Step Properties. This allows the designer to specify the steps in a workflow that will be using the external signature pad. Click on the steps that you want to use the signature pad with and check the Allow Sign Pad checkbox. Leave the property unchecked on the steps that will not be using the signature pad.

...