> For the complete documentation index, see [llms.txt](https://docs.ascertia.com/signinghub-web/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ascertia.com/signinghub-web/configurations/enterprise-configurations/manage-your-enterprise-users/manage-signing-certificates.md).

# Manage signing certificates

## Add Custom Signing Certificate <a href="#add_custom_signing_certificate" id="add_custom_signing_certificate"></a>

An Enterprise Administrator with the permissions to manage enterprise users in his role, can import a custom certificate for signing. Furthermore, the signing certificates appear at the time of signing. The signing capacities appear on the signing dialog as per the capacities available in a user's role. Enterprise Roles are described in detail [here](/signinghub-web/configurations/enterprise-configurations/manage-your-user-roles/signature-appearance-preferences.md).

1. Login with your enterprise admin credentials.
2. Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
3. Select the desired user and click "User preferences" in right panel.<br>

   <figure><img src="/files/SqscWBJW3mBODN49x2aq" alt=""><figcaption></figcaption></figure>
4. Expand "Add a Signing Certificate" tab and click "Add a Signing Certificate" button.<br>

   <figure><img src="/files/7gzqNgJR5LWDuE1pNKW9" alt=""><figcaption></figcaption></figure>
5. Provide the Capacity Name , Certificate Alias and Certificate (CER) for your certificate. Enable the "Mark as default" option if you want to display your certificate as selected by default in the signing dialog. Additionally, you can select Level of Assurance and Protect Keys Using Option too. Default selected value for Level of Assurance will be Advanced Electronic Signature and for Protect Keys Using it will be User Password.<br>

   <figure><img src="/files/eAWEilBcusrQfUhOAKW8" alt=""><figcaption></figcaption></figure>
6. Click "Save changes".

{% hint style="info" %}
Only one capacity can be set as default at a time. If a capacity is already set as default, then setting a new capacity will revoke the previous as the default signing capacity.
{% endhint %}

{% hint style="info" %}

1. Certificate Alias is a Unique Identifier for the signing certificate key and must be the same as provided in ADSS.
2. The Capacity Name should be unique, user-friendly (consisting of letters and digits) and must not exceed 100 characters.    &#x20;
   {% endhint %}

***

## Edit Signing Certificate <a href="#edit_signing_certificate" id="edit_signing_certificate"></a>

1. Login with your enterprise admin credentials.
2. Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
3. Select the desired user and click "User preferences" in right panel.
4. Under "Add a Signing Certificate" tab, click on the desired certificate and click "Edit" in the right panel.\
   &#x20;

   <figure><img src="/files/vP8Ys6e4yuljFklBhIC2" alt=""><figcaption></figcaption></figure>
5. You can update Capacity Name, Certificate Alias, Certificate (CER) and Level of Assurance for your certificate. Click on the Set as default option if you want to display your certificate as selected by default in the signing dialog.<br>

   <figure><img src="/files/JW1QJ2R9ERhLdyPepSCQ" alt=""><figcaption></figcaption></figure>
6. Click "Save changes" button.

***

## Delete Signing Certificate

1. Login with your enterprise admin credentials.
2. Click "Configurations" from left-menu and click "Users" under "People" options in "Enterprise Configurations" section.
3. Select the desired user and click "User preferences" in right panel.
4. Under "Add a Signing Certificate" tab, click on the desired certificate and click "Remove" in the right panel.<br>

   <figure><img src="/files/srfaLj0Xu9TR9Zi3Wtn1" alt=""><figcaption></figcaption></figure>
5. Click "Delete" in the confirmation dialogue.<br>

   <figure><img src="/files/hIdm4TLHwguLv5aPULWx" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ascertia.com/signinghub-web/configurations/enterprise-configurations/manage-your-enterprise-users/manage-signing-certificates.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.