Trust
Configure signing certificates and trust
Upload signing certificates and trust roots, select a default certificate, and configure RFC 3161 timestamps.
Security administrators15 minutes
Before you begin
- Authorized P12/PFX, PEM, or CRT material
- Private-key password where applicable
- Timestamp server details when timestamps are required
What you will complete
- A tested certificate and trust configuration
Configure signing certificates
- Upload the certificate and private key using the format expected by the settings form.
- Name certificates so operators can identify owner, environment, and expiry.
- Select the intended default certificate.
- Protect certificate files and passwords outside Signa according to your key-management policy.
Configure timestamps
Add the RFC 3161 timestamp server URL and credentials if required. Complete a test document and verify that the timestamp token appears in the result.
Manage trust roots
Upload approved root certificates used to classify external signatures as trusted. Remove roots only after evaluating existing verification and retention requirements.
Uploading a root certificate changes trust classification; it does not prove that every document signed by a chained certificate is authorized for your business process.