OCAP SFG GUI is a graphical user interface for the OCAP Security File Generator, OCAP SFG. The GUI is written in Java and allows the user to operate OCAP SFG from of a set of easy to use screens rather than via the command line.

Features include:

  1. Simple RSA key and certificate request creation.
  2. Easy installation of certificates into the OCAP SFG database.
  3. Extensive on-line help system.
  4. Multiple SFG Resource Directories per execution of SFG. You can use different SFG resource files for different signing purposes, e.g. different signatures for test and production applications.
  5. Greatly simplified mechanism to generate dual signed OCAP applications and code images.
  6. Permission Request File generator including all Monitor Application permissions.
  7. Creation or modification of Credentials which you may need to supply to other OCAP application vendors.
  8. Easier approach to setting up Hardware Security Modules (for storage of your private keys).
  9. Easy to set-up User Profiles consisting of Application Signing, Code Signing and Ceriticated Request Format profiles.

Sample screen shots:

  1. Permission Request File generation

  2. Signing OCAP Applications (including co-signing)

OCAP SFG GUI is currently available for Linux and Windows environments. A Mac OS X version is on the product roadmap.

Getting Started

  1. Run OCAP SFG GUI and enter a suitable resource directory.

  2. Use Keys->New to generate an RSA key which you will use to sign your apps. or code images.

  3. Your key will need to be authenticated by a Certificate Authority authorised by Cablelabs: so generate a certificate request, using the Certificates->Requests->New.

  4. Send certificate request to the certificate authority ("CA"). The CA should provide you with (i) an authenticated certificate, (ii) the CableLabs Code Verification Root CA Certificate and (iii) CableLabs Code Verification CA Certificate or CL Application Code Verification CA Certificate.

  5. Certificates->Install to install the certs. in order of the CL Code Verification Root CA Certificate, then the CL Code Verification CA Certificate and finally your certificate.

  6. Go to Sign Application->New to sign applications. (You may wish to set-up a user profile first using Utilities->Profile->User Profile).
Last Updated: September 11, 2010; Copyright © 2010 UniSoft Corporation.