Publisher Key Management

On the Publisher Key Management tab, you manage the public keys of action publishers. SysTrack needs the public key of a publisher to approve the signed actions of that publisher. For example, to import and approve signed actions from another SysTrack tenant, you need the public key for those actions. The tab is in Configure > Tools > Automations and Collection Extensions > Publisher Key Management.

In SysTrack Cloud, actions that you build with Create Action on the Action Governance tab are signed with the publisher key of your tenant. SysTrack creates this key when your tenant is built and adds its public key to the Public Keys table, with a publisher name that starts with Tenant-. Actions that you build with LSActionBuilder are signed only when you sign them with your own private key. See Build Actions with LSActionBuilder.

Publishers give their public keys to SysTrack users themselves. Lakeside Software does not distribute them. A publisher sends its public key through a different channel from the actions, so that users know who created the actions.

Prerequisites

• The Action Governance - Management permission. Without it, the Publisher Key Management tab does not show. See Configure Action Governance Permissions.

• Edit mode. To make changes on the Publisher Key Management tab, click the lock in the upper-right corner of the page. While the page is locked, all buttons on the tab are unavailable.

Public Keys Table

The Public Keys table on the Publisher Key Management tab lists the publisher keys in SysTrack. A search box over the table, on its right, searches the list of publisher keys.

The toolbar of the Public Keys table has two icons:

• Import: Imports the public key of a new publisher.

• Delete: Deletes the selected key.

Under the Public Keys table are three buttons: Update Key, Compare Key With Key In File, and Compare Key In File To All. Delete, Update Key, and Compare Key With Key In File need a selected key in the table.

Import a Public Key

Import a public key from another SysTrack tenant, or from a key pair that you use to sign actions with LSActionBuilder. The public key file must be a .pem file that starts with -----BEGIN PUBLIC KEY-----.

1. In Configure, go to Tools > Automations and Collection Extensions > Publisher Key Management, and click the lock to unlock the page.

2. Click the Import icon.

   

3. In Publisher, enter the publisher name. It must exactly match the publisher name of the actions that the key signs. The name cannot contain \ / : * ? " < > |. For example, the action ACTION123, exported from the tenant MyTenant with the publisher name Tenant-MyTenant, needs a public key imported with the publisher Tenant-MyTenant.

4. In Key File, click Choose File, select the key file, and click Open.

5. Click OK.

If the publisher already has a key, SysTrack does not import the new key. Use Update Key instead.

To check the result, find the publisher in the Public Keys table.

Update Key

Replace the public key of a publisher that is already in the Public Keys table. The publisher name in the table must exactly match the publisher name of the action on the Action Governance tab for the key to match.

1. On the unlocked Publisher Key Management tab, select the key in the Public Keys table.

2. Click Update Key.

   

3. Click Choose File, select the key file, and click Open.

4. Click OK.

Compare Key With Key In File

Check that SysTrack has the correct public key for a publisher by comparing the key in the Public Keys table with a key file.

1. On the unlocked Publisher Key Management tab, select the key in the Public Keys table.

2. Click Compare Key With Key In File.

   

3. Click Choose File, select the key file, and click Open.

4. Click OK.

Compare Key In File To All

Find the publisher of a public key by comparing a key file with all keys in the Public Keys table. You do not need to select a key.

1. On the unlocked Publisher Key Management tab, click Compare Key In File To All.

   

2. Click Choose File, select the key file, and click Open.

3. Click OK.

The result names the publisher whose key matches the key in the file, or says that the key does not match any public key on record.

Delete a Public Key

Delete the public key of a publisher from the Public Keys table.

WARNING: Deleting a publisher key disables every action from that publisher and moves it back to Pending Approval, including actions built with Create Action when you delete the key of your tenant. Their automations do not run until the actions are approved again.

1. On the unlocked Publisher Key Management tab, select the key in the Public Keys table.

2. Click the Delete icon.

3. Confirm the deletion.

To check the result, check that the publisher is no longer in the Public Keys table.