emSigner Commercial Proposal
Server Side Digital Signing of Documents
Confidential
About eMudhra
eMudhra is a global organization aimed at empowering secure digital transformation by developing solutions for
cyber security and artificial intelligence. eMudhra is a global trust service provider and largest certifying authority in
India having managed 45mn digital identities. eMudhra boasts a strong marquee client list including 3 out 10 Fortune
10 clients, several Fortune 100 customers and over 600+ large enterprises who use its solutions for digital
authentication, access management and for document processing automation
eMudhra is the Chair of the Asia PKI Consortium and India PKI Forum. eMudhra also is an executive member of the
Cloud Signature Consortium, a root CA member of CA Browser Forum and domain coordinator for eGovernment at
UN/CEFACT
eMudhra has global offices across USA, Netherlands, India, Dubai, Singapore and is present through a strong channel
partner network across 38 countries
Why emSigner Server Side Signing?
emSigner Server Side Signing is a server side signing solution that is ideally suited for bulk document signing without
the need for moving documents through workflows, such as electronic Invoices, Employee Payroll/Tax documents or
electronic Bank Statements or electronic Policy Issuances. In case of usage of emSigner Server Side Signing solution
with HSM’s, the solution supports all HSM’s from manufacturers such as Thales/Gemalto, nCipher or Cavium.
The key features of this solution include
1. Administrator Module
a. Devices Management (for managing connectivity with Hardware Security Modules)
b. User Management
c. Certificates Management and Mapping
d. Document Templates with Signatory and placeholder definition
e. Dashboard for User Certificate Listing
f. Reporting
g. Certificate Expiry alerts and automatic certificate renewal
2. API based Signing
3. Folder based Signing
4. Compliance with global remote signing standards
Commercial Proposal
The license cost for emSigner – Server Side Signing is outlined below
License Cost and Professional Services (in Rs)
Solution usage Single Instance High Availability Professional Services for
with (Two instances) Installation
PFX certificates Rs 2 lakhs Rs 3 lakhs Rs 50,000
USB Crypto Token Rs 3 lakhs Rs 4.5 lakhs Rs 50,000
Certificates
PCI Express Card Rs 5 lakhs Rs 7.5 lakhs Rs 2 lakh
HSM based
Certificates
Net HSM based Rs 7 lakhs Rs 10.5 lakhs Rs 2 lakh
Certificates
For use cases where bulk document signing is frequent and real time in nature (such as Invoice Signing),
eMudhra recommends the usage of high availability solution and database clustering so as to ensure
business continuity
Integration with Third Party Applications
emSigner Server Side Signing supports integration with third party software that include
SAP
eMudhra is a co-innovation partner of SAP working with SAP to bring innovative signing solutions on top of SAP
solutions such as ECC 6.0, S/4 HANA, Business One etc
emSigner can be easily plugged in as a signing solution to SAP’s solutions through plug-ins that can be installed on
to allow easy bulk signing of documents
Sage
eMudhra is a Sage partner and has developed plugs for Sage integration that allows bulk/individual signing of
documents from Sage ERP
Tally
Through a tally extension, emSigner can be invoked for signing of documents right from Tally
Oracle
emSigner can be integrated into Oracle eBusiness Suite for easy signing of documents such as Invoices, Purchase
Orders etc.
Types of Certificates and Usage
The types of certificates, their characteristics, recommended usage and risks associated is outlined in the table
below
Types of Certificate and their Usage
Type of Issued To Usage Storage Throughpu Level of Risks
Certificate t Risk
PFX Organizations Document As a software High High Risk of file
certificates (no individual Signing on file on the getting copied
information is behalf of computer or results in ability
allowed to be organization server for unauthorized
embedded in signing of
the certificate) 1 documents on
organizations
behalf making
organization
liable
USB Crypto Individuals, Individual In a FIPS 140- Low Low No risk of file
Token Individuals Signing 2 Level 2+ getting copied
Certificates along with Individual and compliant
Organization Organizational device
signing
PCI Express Individuals, Individual In a FIPS 140- Medium Low No risk of file
Card HSM Individuals Signing 2 Level 2+ getting copied
based along with Individual and compliant
Certificates Organization2 Organizational device
signing
Net HSM Individuals, Individual In a FIPS 140- High Low No risk of file
based Individuals Signing 2 Level 2+ getting copied
Certificates along with Individual and compliant
Organization Organizational device
signing accessible
over a
network
1
Please refer http://cca.gov.in/sites/files/pdf/guidelines/CCA-IOG.pdf Pg 88 which indicates that in a document signer certificate
only organization name may be embedded in the digital signature certificate
2
Please refer http://cca.gov.in/faq.html - section on DSC for Organizational Person for guidelines on storage of keys on HSM where
it is indicated that in case of Individual Certificates, only one certificate may be stored on an HSM
Delivery, Payment Terms and Support
Delivery
emSigner Server Side Signing is a plug and play software that can be installed easily on physical servers or virtual
machines (not applicable in case of token certificate or PCI Express HSM based certificates). Unless explicitly agreed
with the client, all installation of software shall be done remotely.
Payment Terms
Solutions
50% Advance at the time of Purchase Order
50% Balance Payment upon delivery of software in UAT environment
Hardware
100% Advance at the time of Purchase Order
Support
The above licenses charges are exclusive of a 20% AMC charge that will be applicable for support of solution. The
support that is provided as part of the AMC is Basic Support that includes 9x5 support on email.
eMudhra also offers premium support packages that which cover enhanced SLA’s, dedicated personnel, and even
full-time on-site personnel to manage the application.
Professional Services
eMudhra provides professional services around its offerings to facilitate customization, configuration of workflows
and integration of its software with third party systems.
General Terms and Conditions
1. The software licenses proposed and delivered as part of this quotation are given for the sole use of a single
client/legal entity and for the applications specified.
2. Clients shall NOT engage in providing/selling of emSigner application as a cloud based offering either through
emSigner or any other brand name.
3. The Intellectual Property Rights of the software owned and provided by eMudhra will reside with eMudhra
only.
4. The delivery time for software products including customization and implementation will be as per what is
agreed with the client.
5. Changes to client business systems, if any, for implementation/ installation of the solution will be handled by
client. eMudhra can provide necessary help to integrate its solution with client business systems if agreed to
as per the scope document determined in each case.
6. All support services including scope of support and AMC shall be as per the support services and maintenance
document provided to the client and shall commence from date of installation. Unless explicitly agreed to and
paid for, all AMC shall include basic support
7. Any support or development activity that requires eMudhra staff to be present at client premise will be subject
to cost of travel, accommodation, and visa (if applicable) being borne by the client.
8. eMudhra does not warrant the merchantability of its products and all products are subject to user acceptance
testing by the client
9. The software product is licensed and not sold to client. Any attempt to decompile, reverse engineer,
disassemble, modify, translate, decipher or otherwise determine the source code or create derivative works
of the Software Product by client is not acceptable and client agrees to indemnify eMudhra for any loss or
damage suffered by eMudhra on account of such act of the Client. However, neither Party be liable to the
other for any indirect, special, exemplary, punitive or consequential damages, whether arising from
negligence, breach of contract or tort under this Agreement. Indemnity of eMudhra is restricted to the cost of
license of Software Product.
