RFC 3161 compatible Timestamping

Digital certificates expire after some period of time, such as one year, and a document signed with an expired key should not be accepted. However, there are many cases where it is necessary for signed documents to be regarded as legally valid for much longer than the certificate validity; long-term leases and contracts are examples. By registering the contract with a digital time-stamping authority (TSA) at the time it is signed, the signature can be validated even after the key expires.

If all parties to the contract keep a copy of the time-stamp, each can prove that the contract was signed with valid keys. Very important is the fact that the time-stamp can prove the validity of a contract even if a signer's key gets compromised at some point after the contract was signed.

Aloaha signed documents can be validated with the free Adobe Reader. It shows right away if the signature time of the document has been validated by a time-stamping authority. 

Aloaha PDF Tools and Timestamps

All digital Signature capable Aloaha PDF tools are able to timestamp any digital signature. To connect Aloaha to any Time Stamping Authority please use the "clock button" in the signature settings dialog or the following registry keys:

• enableTSA - defines if time stamping should be enabled or disabled
• TSAURL - contains the URL and some TSA Settings (encrypted)
• TSACert – contains the name of the Certificate to be used for authentication (optional)
• TSAUserName – Server Username (optional)
• TSAPassword – Server Password (optional) 

These keys are located in HKCU\Software\Aloaha\TSA or HKLM\Software\Aloaha\TSA - depending if the settings to me made are global or user based.

Aloaha local Timestamper

Every Aloaha PDF Tool includes a local Timestamping Authority for evaluation purposes. This allows the user to evaluate Timestamping without actually having to connect Aloaha to a remote TSA.

To enable Aloaha to use its own internal TSA please enter the signature settings and press the "clock icon" as shown in the screenshot below.



The first time you press that button Aloaha will download the TSA List from http://www.aloaha.com/downloader/tsa.txt.

Once the list has been loaded you will see the screen below.



Several differnt TSA Services can be choosen now. For evaluation purpuses we suggest to use the AloahaTimestamper or https://tsa.aloaha.com.

No username/password is required for https://tsa.aloaha.com.

Aloaha Timestamping Server

One of our products is the AloahaTSA. With our AloahaTSA it is possible to add Timestamping capabilities to any Windows based Webserver. 

Please contact our sales department if you need further information regarding the AloahaTSA.

Aloaha PKI/TSA

Aloaha Software offers free Class 1 Certifikates on pki.aloaha.com. To obtain such a free Certifikate requires only a registration at http://pki.aloaha.com

After a successful registration the user will be sent an email with a randomly generated Username/Password and further instructions.
Please note that it is only possible to register once with the same Surname/Name combination!

Once the free Class 1 Certificate and the Root Certificate have been installed it is possible to use our Aloaha Timestamping Server to stamp your PDF documents.

The Token Archive is published at http://tsa.aloaha.com/token and http://tsa.aloaha.com/archive 




Aloaha Time Stamping (105,09 KB)
Registering at Aloaha TSA (84,75 KB)


Aloaha Software / Support / Timestamping (RFC 3161)