Remote Signing Service
Generate Adobe-trusted and eIDAS-qualified digital signatures with signing keys securely hosted in the Entrust cloud – no hardware needed. The service has native integrations with Entrust Signhost and Adobe Acrobat Sign.
Use Cases
Employee signatures (Adobe-trusted or eIDAS-qualified)
Digital signatures that include employee and organization details, using long-lived certificates.
Customer signatures (eIDAS-qualified)
eIDAS-qualified digital signatures for consumers and citizens.
Employee Signatures
The Remote Signing Service acts like a secure cloud-based vault that generates and stores employees' digital certificates and their associated signing keys. The service can be integrated with compatible workflows and applications, such as Entrust Signhost or Adobe Acrobat Sign, but it can also work standalone on Microsoft Windows environments using our Desktop Virtual Card.
Employee signatures with Entrust Remote Signing Service are available with standard digital certificates under the Adobe trust list (AATL) or eIDAS-qualified digital certificates for eIDAS-qualified signatures.
How it works
Overview
Setup Process
- Administrators enroll the employee on the Entrust Certificate Services (ECS) web portal.
- The enrolled employee goes through an Entrust-managed remote video identity verification with post-approval process, and then receives credentials to access the Entrust Remote Signing web portal to generate and manage their certificate.
Signing Process
- Enrolled employees receive or submit a document to sign using Entrust Signhost.*
- The Remote Signing Service is called and prompts the employee to enter their credentials and authorize the use of their certificate for the signature.
- Once authorized, the Remote Signing Service will generate the raw digital signature and send it to Signhost* to be embedded in the final document.
* Or any third-party signing application that supports the remote signing API from the Cloud Signature Consortium (CSC).
Integrations
Employee signatures with Entrust Remote Signing Service are natively supported by the following applications:
You can test the integration of our service with your custom environment, provided it supports the Remote Signing Protocol defined by the Cloud Signature Consortium (CSC).
We are currently working on new integrations. If you'd like to see your signing application listed here, contact us.
Customer Signatures
The Entrust Remote Signing Service can generate very short-lived eIDAS qualified digital certificates for single use, as part of a customer signing process on Entrust Signhost.
The digital certificates are issued after a remote, self-service video verification process managed by Entrust.
Customer signatures with Entrust Remote Signing Service use eIDAS qualified certificates. The video verification requires a valid identity document issued by a European Union member country.
How it works
Overview
Signing Process
- The customer receives an invite from Entrust Signhost to sign a document; they open the link to sign.
- Signhost connects to Entrust Remote Signing Service to trigger an automated remote video verification of the customer.
- The video verification process is reviewed by Entrust Certificate Services.
- Once the video verification is approved, Entrust Remote Signing Service creates a short-lived eIDAS-qualified certificate that includes the verified details of the customer, and generates a raw eIDAS-qualified signature that’s sent back to Signhost.
- Signhost embeds the eIDAS-qualified signature into the final document.
Integrations
Customer signing with Entrust Remote Signing Service is currently available using Entrust Signhost.
If you’d like to enable your customers to generate eIDAS-qualified electronic signatures using Entrust Remote Signing Service and your own application or a third-party application, please contact us.
What Is a Digital Signature?
A digital signature is a special type of electronic signature based on widely recognized PKI technology, which uses digital certificates and signing keys. Digital signing not only authenticates the signature by embedding the identity of the signer but also helps prevent and flag document tampering.
Entrust can provide globally trusted certificates for digital signing, as well as European eIDAS-Qualified Certificates to generate eIDAS-qualified employee signatures via the Entrust Remote Signing Service.
Remote Signing Service Benefits
Convenient and Cost-Effective
Sign from anywhere at any time, avoid travel expenses, and save paper – all while using proven technology and standards.
Workflow- and Application-Agnostic
We provide direct integration with document and signature management solutions.
Higher Assurance Security
Digital signatures provide stronger security and assurance than basic electronic signatures
Trusted by Adobe
Entrust is part of the Adobe Approved Trust List. All our document signing certificates are natively trusted by Adobe Acrobat solutions.
Aligned with EU eIDAS
Entrust is a European Qualified Trust Service Provider and can deliver eIDAS Qualified Certificates for eIDAS qualified signatures.
Remote Signing Service Features
Quick Deployment
The service is deployed in the cloud and accessible via the Remote Signing Protocol defined by the Cloud Signature Consortium (CSC).
Secure Signing Process
Only hash values are required for the signing process – the documents to sign never leave your environment.
Timestamping
Every signature generated can also be timestamped with our RFC 3161- compliant or eIDAS-qualified timestamping service.
Long-Term Validation (LTV)
Leverage our timestamping authority and Online Certificate Status Protocol (OCSP) services to create LTV signatures and extend your signatures’ lifetimes.