storage for whitelist pkcs7 signature in manifest ensemble
recognize pkcs7 whitelist signature in manifest ensemble