Page History

...

1. The signature is generated using SHA1 and the PSK on the payload, expires and postURL
2. management server and SSVM Agent should be in time sync for the verification to work. 
3. on the SSVM Agent, it first checks if the expires has crossed. 
4. it computes hash on payload, expires and postURL using SHA1 and PSK and rejects the request if they do not match.
   
5. the postURL, expires and payload returned from getUploadParams shouldn't be tampered by the user. Else, signature validation would fail.

...