VET Improve process to make an Electronic Signature Key expire

Description:

The functionality needs to be split into several parts:

• Add functionality to allow developers to programatically expire the Electronic Signature Key by making a call to a method on the MBO. This would allow a developer to immediately expire a key rather than wait for an automatic timeout

• Add functionality to automatically expire Keys after a predefined time. The time should be configurable.

• Add functionality to allow administrators to mark a key so it is not automatically expired.

• Add functionality to allow developers to programatically renew the Key by making a call to a method on the MBO. This would be used where a task is expected to take a long time and the

• Store the estimated expiry date/time in the database

Use case:

There are situations where a developer/administrator will want to expire the key.

• Administrators may want to automatically expire the key after a set period.

• • Administrators may want to mark a key so that it doesn’t expire e.g. System Admin users for turning on admin mode, interfaces which E-sig keys, possibly for mobile users.

• • In a secure environment the administrator may be happy for the key to be in use for long periods of time particularly if there are lengthly change control processes required to change the key.

• Add functionality to allow developers to programatically expire the Electronic Signature Key by making a call to a method on the MBO. This would allow a developer to immediately expire a key rather than wait for an automatic timeout

• • Add functionality to automatically warn users of key expiry after a predefined time. The time should be configurable. The message should be configurable so administrators can provide helpful advice so the users know what action to take to renew the key.

• Store the estimated expiry date/time in the database.

  • This allows administrators to create escalations to allow them to automatically take action if a key is due to expire. Administrators may decide to implement an escalation to automatically renew the token for particular accounts e.g. interfaces