How to create a policy

Overview

In this tutorial you'll create a policy, an essential part of using a certificate with Redtrust. This tutorial assumes you already understand some basics of Redtrust and want to configure certificate access for specific applications or sites.

Before you start

Before starting, ensure you have the following:

• The Redtrust agent
• A certificate or certificate group
• A user or user group

Step 1: Create an application or site group

1. Go to Policies > Applications and click Add application group.

2. In the dialog, fill in the following fields:

   1. Application group name: Add a descriptive name that helps you identify this app group. For example, Acrobat PDF signing.
   2. Process name (without extension): Add the process name or regex. Following the example, acrobat. For other examples, check the table below.
   3. Click Add and Apply.

Use the following examples to create additional application or site groups. Add a group name that best matches how you use the application or site.

Description	Site group	App group	Process name	Command line
Adobe Acrobat		✅	acrobat
Java applications (incl. locally created apps, Autofirma, etc.)		✅	java and javaw
Escrituração Fiscal Digital das Contribuições		✅		.*javaw.*irpjpva.jar.*
DocuSign		✅		.*dspki.exe.*DocuSignPKI.*
Sped ECF - Sistema público de escrituração digital		✅		.*javaw.*irpjpva.jar.*
Sped Fiscal - Sistema público de escrituração digital		✅		.*javaw.*fiscalpva.jar.*
Sped ECD - Sistema público de escrituração digital		✅		.*javaw.*contabilpva.jar.*
Assinador do Serpro		✅		.*Assinador.*Serpro.*
Assinador PF		✅		.*javaw.*AssinadorPF.exe.*
Lacuna Software		✅		.*Lacuna.*Software.*
eCAC	✅	✅		See How to define access to eCAC.
Processo Judicial Eletrônico	✅	✅		See How to define domain access using application-based authentication.

Step 2: Create a policy

1. Go to Policies > Policies.

2. Click New to access the policy creation wizard.

3. In Name, enter the name of the policy, for example Acrobat signing, and click Next.

4. In the Select certificate box, select the certificate and click Next.

5. Select the user or user group and click Next.

6. If your policy needs to define specific sites, click Add sites. Select the sites added in Step 1.

7. If your policy needs to define specific applications, click Add applications. Select the applications added in Step 1.

8. Click Next.

9. In the final step, make sure Anytime is selected. Click Apply, then Accept.

   info

   For more details on the policy configuration options, see the Policies topic documentation.

Step 3: Verification

To verify the policy, sign in with the configured user and attempt to sign with Adobe Acrobat Reader or use the certificate in the application or site you configured.