- Identity and digital signature
- Integration
Signator migration to the Amazon Web Services cloud
The Signador service that the AOC makes available to Catalan public administrations for the creation of electronic signatures is finalizing preparations to move entirely to the Amazon Web Services (AWS) cloud.
This migration is part of the strategic plan for cloud transformation of AOC services initiated in 2022 and through which the migration to the cloud of different AOC services has been carried out; such as PSIS, VÀLid, ERES and DESA'L. This process aims to promote the digital transformation of the AOC to guarantee the quality of the services it offers. With this migration, the Signador service is incorporated into a global infrastructure that provides as its main benefit improvements in service quality and security, as well as operational efficiency.
The transfer to AWS of the Signatory's different environments will take place on the following dates:
- Pre-production environment: Thursday, May 8th in the morning
- Production environment: Wednesday, June 11 at 15:00 p.m.
In both cases, the service outage will be less than 5 minutes.
How can it affect me?
The migration is transparent for integrators, but the following points will need to be reviewed:
- Keep in mind that domains in AWS do not respond to a single IP address, and that IP address is constantly changing randomly. Therefore, you need to remove any restrictions at the IP level in relation to the Signatory's domains (signador-pre.aoc.cat i signador.aoc.cat). Similarly, it will also be necessary remove any geolocation restrictions, as the service will initially be offered from the Ireland area, but this will change in the future.
- Those clients you use callbacks in your integration with the Signatory, You need to check your firewalls to ensure that the following IPs are not restricted. (used in sending callbacks):
- Pre-production:
63.34.38.187
34.251.91.75
34.254.144.227 - Production:
18.200.107.87
52.19.83.31
99.81.75.214
- Pre-production:
- The server certificate in the Preproduction environment becomes a certificate issued by the AWS hierarchy. We attach the roots:
AWS-hierarchy.zip
The Production environment certificate will continue to be from Sectigo, as before.
We remain at your disposal to resolve any doubts, through the AOC support center.