Page tree

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


acceptContactUrlhttps://host/frigg/login/#/contactsthe url for accepting contact requests (Contact page)X

accept_terms_settingstruetrue or false, if terms and conditions have to be accepted before signing as a guest / in standalone viewerX

activate_hash_dialogtruetrue or false, activates the hash dialog during signing with StepOver PadsX

adhoc_html_signer_onlytruetrue or false, determines if adhoc viewer (QR code scanned) can be signed exclusively with the HTML SignerX

adhoc_length10the character length of the adhoc code (default ist 10)X

adhoc_lifetime_minutes15defines the validity period of the adhoc code or a generated QR Code (default is 5 minutes)X;someoneelse@host.coma list of recipients who are informed when accounts are charged with help of the admin functions or when user bought creditsX

always_mobile_viewer_on_mobile_devicetruetrue or false, determines whether on mobile devices can be signed exclusively with the HTML Signer (no matter if 'desktop browser' is set or not)X

api_id_modeobfuscatedDefines how ID values like the document_id are displayed encrypted. 
Possible values are:
"obfuscated" = IDs are displayed encrypted (this is the config default value, if no other value is set)
"debug" = IDs are displayed encrypted and the corresponding (original) ID is appended at the beginning of the value


app_signature_certificate_filenamed:\frigg\data\app_signature_public.derthe certificate path for the app signature with token authentication
app_signature_certificate_passworddsf433dreE&%the certificate password for the app signature with token authentication


d:\frigg\data\app_signature_certificate.pfxthe certificate private key path for the app signature with token authentication
atmosphere_idle_time2maximum time in minutes that an atmosphere connection can be idle before it is closed (default 5)X

atmosphere_servlethttps:// url for the atmosphere servlet used by the adhoc functionalityX

atmosphere_suspend_time30maximum time that an atmosphere connection is kept alive (default 10)X


9Number of the text field of the template where the page number will be written



8Number of fields in the document template to show audit trails



15Number of the text field of the envelope template where the page number will be written



14Number of fields in the envelope overview template to show the audit trails



the webSignatureOffice system

The name of the signer of the audit report




To show the name of the server which generated the audit report




In the Audit report, there is an image for the signature, give the path of the signature file here




The X location of the 1st page of the report where you want to show the signature image



750The Y location of the 1st page of the report where you want to show the signature image




This template will be used to for envelope audit report's overview page for DE locale




This template will be used to for envelope audit report's overview page for EN locale




This template will be used to generate audit report in DE locale




This template will be used to generate audit report in EN locale



The base path with port where the audit server can be reachedX



https or https, the protocol used for the audit serverX

automatic_role_stopfalseIndicates whether the automatic role stop is executed or not. Automatic role stop means that after signing all fields of a SignatureGroupsignature group (<SignatureGroup> definition), the signature selection window for the next SignatureGroup signature group is displayed again (if automatic_role_stop is true)X

axis_request_timeout240000the braga request timeout in millisecondsX

axis_server_context/bragaThe folder inside which the braga app is deployedX
axis_server_ip192.168.5.56the IP or hostname of the braga serverX
axis_server_port8080the braga server portX
axis_server_protocolhttpshttps or https, the protocol used for the braga serverX
braga_create_copytruecreates a copy of the PDF without biodata (if flag is true)X

braga_render_dpi200the dpi with which pages are rendered (default is 200)XX
cash_account_namestepover_cash_accountthe name of the cash account, matches db name column in accounting_account table (for credit handling)X

conditions_exceptionselection_pad;selection_displayspecifies if a download condition must be fullfilled for a given signature type. The download pop-up won't be shown, if the signature type matches the value. Possible values: selection_display, selection_pad, selection_captureX

context_sign_modetruetrue or false, shows an overview of the context in combination with signing with HTML-signerX

cookie_nameSOSESSIONIDthe cookie name for the session cookieX

cookie_path/the cookie pathX

credit_eur_value0.85the vlaue of one credit in EURX

credit_usd_value0.95the value of one credit in USDX

credit_free3how many free credits are given initially (after registration)X

credit_free_monthly3the amount of free credits per monthX

credit_signature_request1value how many credits one signature request costs ('0' for no credit charge)X

credit_mail_identification10value how many credits a mail identification costsX

credit_sms_identification1value how many credits a sms identification costsX

database_host192.168.5.57the database host (IP or hostname)XXX
database_jndijava:comp/env/jdbc/FriggDbthe jndi database sourceXXX
database_namefriggthe database schema nameXXX
database_passwordkjssdduiwe832//6?!the database passwordXXX
1521the database portXXX
FRIGGthe database service name (for Oracle connection)XXX
xethe database SID (for Oracle connection)XXX
database_typemysqlmysql or oracle, the database typeXXX
database_userdbuserthe database userXXX
deactivate_db_pingtruetrue or false, deactivates validation check for the db connectionXX
deactivate_document_downloadtruetrue or false, deactivates the download button on the viewer (for finished or failed requests)X

deactivate_final_status_popuptruetrue or false, deactivates the final status popup shown after all fields have been signedX

deactivate_geolocationtruetrue or false, deactivates the geolocation query in the browserX

deactivate_optional_fields_popuptruetrue or false, deactivates the appearance of the popup after skipping the last optional field of a signature request which asks for ignoring the field (sign later) or finishing the request (only if there are no mandatory fields!)X

deactivate_reject_buttontruetrue or false, deactivates the reject button during signingX


truedeactivates the "remember sign type" checkbox of the signature type selection popupX

emailFromsystem@webSignatureOffice.comthe from mail header added to emails sent by the systemX

emailPort25the smtp portX

emailRetries5how many times the mailer retries to sent an emailX

emailSmtphostname.domainthe smtp server used to sent mailsX

emailSmtpPasswordpasswordthe smtp server passwordX

emailSmtpUsersmtpuserthe login for the smtp serverX

emailTlsfalsetrue or false, enable or disable TLS (encryption)X

enduser_certificate_duration36the lifetime of user certificates in months
enduser_certificate_key_length2048the length of the create user certificates


truetrue or false, activates an extra password prompt in the iSignatureOffice / aSignatureOffice app (authentication with fingerprint or face ID).
see also flag 'password_interval'

file_upload_max_file_size20480the maximum upload size in bytesX

file_upload_urlhttps://host/fileUpload/fileUploadthe url for the file upload (via tyrservice)X


falsetrue or false, allows other signers to edit formfieldsX

guest_certificate_passwordkkwJk34$ldP%the guest certificate password (for non-registered webSignatureOffice user certificates)XX
guest@websignatureoffice.comthe email pattern for guest email addressesX


falsetrue or false, usage for licence model (valid license file required)X

html_signer_signature_field_width10defines the signature field width for signing with html-signer in cm, default is 14cm.X

intermediate_certificate_filename/frigg/data/cert.pemthe full path to the intermediate certificate for user certificate creation
intermediate_certificate_passwordsduiSUm7$%&hJthe intermediate certificate password
intermediate_certificate_private_key_filename/frigg/data/cert_private.pemthe full path to the internmediate certificate private key
invitationUrlhttps://host/frigg/Registration.htmlthe url for user registration and invitationX;someoneelse@host.coma list of recipients who receive a copy of all invoices created by the system (for credit purchase)X

jms_jndi_factoryatmosphereFactorythe jms broadcaster factory jndi nameX

jms_jndi_namespacejava:comp/env/jms/the namespace used for the jndi lookup of the jms components X

jms_topicatmospherethe name of the topic created on the jms broadcaster for the adhoc code messagingX

mail_passwordoekopostpasswordthe password for the mail verification account (seperate provider)X

mail_useroekopostuserthe user for the mail verification account (seperate provider)X

max_message_size20480the max tyrservice message size (optional value)X

memcached_port11211the memcached portXX
memcached_server192.168.5.57the ip or hostname of the memcached server if memcahe is usedXX
memcached_sessionstruetrue or false, the switch if memcached should be used for session managemeantXX
nebula_activetruetrue or false, defines if "Nebula" is shown as a signing optionX

notaryInfo\n======================( NotaryInfo )====================== \n \nSomebody the notary info added to a biometric signatureX


dshkskdhNSSKhjadsbndskKJHKHSAK \

the public key base64 encoded that is assigned new registered users. This key is used by the web signature office apps.X

notary_public_key_hashdskhdksjhds89s8djdshkjhsd7987987dsdssda md5 hash of the public keyX

org_quartz_propertiesquartz.propertiesthe name of the quartz scheduler configuration file in the classpath (for the automated jobs)X

openssl_run_directoryc:/tempthe path to a folder in which openssl can run

the validity for the One-time password (OTP) for an auto-login via webservice-API


password_intervalALWAYSIf extra_password_prompt is activated, you can use password_interval to specify how often the query should appear. Possible values: ALWAYS, DAILYX

passwordResetUrlhttps://host/frigg/PasswordReset.htmlthe url for the password reset pageX

pdf_render_max_render_threads4the max number of render threads
process_encrypted_urlsfalseIf the value is "true", the adhoc URL (option "SHOW LINK") is displayed encryptedX

process_pool_timeout120000timeout for a process from the process pool in milliseconds
qr_code_hostlocalhost:3000host and port of the qrcode urlX

qr_code_path/qrcodepath/path of the qrcode urlX

rabbitmq_server192.168.4.55the IP or hostname of the rabbittmq server used by the adhoc functionality (message broker)X


AllPagesthe strategy used to render the pdf pages, possible values are OnlyPagesWithSignatures, AllPages, FirstTwoAndPagesWithSignatures. Default is FirstTwoAndPagesWithSignaturesX

request_lifetime7200the request lifetime in seconds.X

rest_api_allowed_hostslocalhost,, allowed hosts for the communication with the REST API (Cross-Origin-Requests)X

rsa_encryptor_urlhttps://host:8444/RsaEncryptor/encodethe url of the RSA encryptor used by the html signer, if no value is set the default RSA encryptor of the frigg module is takenX

session_sync60session sync interval in seconds (memcached)X

session_timeout6000session timout in milleseconds (browser session)XX
show_pages_preview1handles the page preview display in the document viewer (in apps and browser)
0 = deactivated, 1 = activated


trueactivates/deactivates the "SMARTPHONE/TABLET" option of the signature type selection popup (default = true)X


trueactivates/deactivates the "ON THIS DISPLAY" option of the signature type selection popup (default = true)X


trueactivates/deactivates the "SIGNATURE PAD" option of the signature type selection popup (default = true)X

show_toc1handles the table of contents display in the document viewer (in apps and browser)
0 = deactivated, 1 = activated

show_custom_textBitte vorab alle notwendigen Kundeninformationen übermittelnIf the value is set, it will be displayed in the signature type popup (under the selection options)X

signatureRequestUrlhttps://host/frigg/login/#signature_requestthe url for signature requestsX

signature_timeout_ms3000defines the timeout/pause in milliseconds before a pad signature is automatically completed (without pressing confirm button)X

smsPasswordsmspasswordthe sms account password (for the sms delivery feature)X

smsSenderstepoverthe name displayed as sms sender (for the sms delivery feature)X

smsUserId / authToken4327634 / 1ED33261VI0I6659347456Bthe sms account user id or authToken (for the sms delivery feature)X

storage_homeX:/data/the full path for storage of documents and certificates (BRAGA)
support_emailsupport@websignatureoffice.comthe email address for support notifications / inquiriesX

tracking-headerx-idheaderthe name of the http header used for the additional tracking id logging. Default is x-trackingX

tyrservice_debuggingtruetrue or false, enables an extended logging for tyrservice classes (if no value is set the default is false)X

tyrservice_publicfalsetrue or false, wether the public tyrservice services should be available, public services only use the adhoc code for authenticationX

verificationUrlhttps://host/frigg/Verification.htmlthe url for the verification pageX


WebSignatureOffice can be configured to call an URL on certain events. This functionality is activated by setting the URL to be called in the config.ini

Further configuration options are:

webso_events_filter:  a semicolon separated list of events that should be fired, if this option is not set, all events are fired. (e.g. STATUS_CHANGE;USER_FINISH)

webso_events_keys: a semicolon seperated list of HTTP-request property keys for the webso_event execution (e.g. user;pass) 

webso_events_values: a semicolon seperated list with corresponding values for the webso_event_keys (e.g. stepovercallback;strongPassword) event_keys and events_values must be in the same order

webso_events_retry: the time waited in milli seconds untill the event call is repeated. (e.g. 10)

For more information, please check: e) Callback-API