Die geschäftliche Commercial use of SecSigner is generally subject to a charge and requires a valid contract with SecCommerce. It may only be used free of charge for private use.

If you would like personal advice, please feel free to contact us

Unfortunately this is no longer possible.

A valid user contract with us is required for the commercial use of SecSigner. This includes access to the customer centre as well as access to all necessary updates.

If you would like personal advice, please feel free to contact us

SecSigner can be integrated into other programmes via API calls (for example in JAVA, SOAP, etc.).
The document being signed (or a batch of documents) can be transferred as well as the type of signature which needs to be created (integrated PDF signature, external signature file) and, the position in the document where the visible signature stamp needs to be placed can be determined via parameters.

With a current SecSigner, you do not need external access to be able to sign.
This is only necessary for signature verification in order to check the validity of the certificates via OCSP.

External access is optional and serves one of these purposes:

• Access to the OCSP responders of the relevant trust centers is necessary.
• Updating information about approved trust centers and issuer certificates: Optional access to our website to download certificate stamps. Instead of this update, you can also simply install the latest SecSigner version. Then the information will be available locally.
• Updates of the information via approved algorithms:
  Optional access to our website to download the algorithm catalogue.
  Instead of this update, you can also simply install the latest SecSigner version. Then the information is available locally.

Yes.

Yes.

Here your use usage for encryption is important and would have to be described to us. The encryption, the exchange of the encryption certificate with the intended recipient and the decryption at the recipient contains several, not that simple steps. These lead to increased support requests and therefore this function can only be used with a license file, which requires a contract with us. Often the encryption can be achieved more easily e.g. in the e-mail client with an S/MIME certificate, which can be purchased from Allgeier or other providers.

When creating a signature, please click on Timestamp. Then you will receive one from Baltstamp. However, it is also possible to use the time stamps from D-TRUST or dgnService for a fee.

Some card readers can establish the connection to the signature card both via the contact surfaces of the card and via radio (RFID). However, the SecSigner can only use the signature card via the contact surfaces. Access to the card via radio is severely restricted, so that not even its type can be detected.
So if the SecSigner indicates that the type of the card is unknown, check whether the blue LED for the RFID connection is lit on the card reader. If so, you will need to insert the card again. When SecSigner accesses the card, the green LED for the connection via the contact surfaces must light up.
It is also possible to completely switch off the RFID interface in the card reader to avoid this source of error. However, an RFID connection is required if the card reader also needs to be used for logging in to websites with the ID card.

In addition, the message that the type of card is unknown may also mean that the SecSigner being used is too old. An update will then provide support for newer card types.

After installing SecSigner, documents of any type can be provided with a digital signature. Right-clicking a document in Windows Explorer displays the options.

As mentioned above, PDF signatures (PAdES) can also be generated for PDF documents. To do this, select the menu item Sign, Signature in PDF:

Please drag the document you want to sign into the drag-and-drop dialogue.
The default setting there is PAdES. As soon as a file is dragged in that is not a PDF, the signature jumps to CAdES detached accordingly.

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.

Here, you can set whether a signature annotation appears visibly in the PDF.

Visible Annotation:

seccommerce.secsigner.addpdfannotation=on

UInvisible Annotation:

seccommerce.secsigner.addpdfannotation=off

After signing the document you have two files: The original and the document -signed.xml.
The file with -signed.xml is the document with a signature. You then have to sign this document, which then results in two signatures in the document.

If the original document is signed instead, SecSigner overwrites the first signed.xml file so that you still have only one signature.

Yes. This is a PAdES signature. The signature is thus inserted into the PDF file.

That would be the alternative: A detached CAdES-signature.

Then you would have to sign the PDF document twice, first PAdES, and then CAdES-detached.

Yes. To do this, you would need to turn off automatic signature verification. Please look for the line in the secsigner.properties with a text editor, where the following is written:

seccommerce.secsigner.checkoldsignatures=on

You need to change that to:

seccommerce.secsigner.checkoldsignatures=off

You can then select the signature format PDF in the above-mentioned dialogue and insert the second signature in the same way as the first, after you have entered all the settings here about position and accompanying details.

You can also preset the signature format to PDF via the property:

seccommerce.secsigner.exe.preselectedformat=2

Check out our illustrated process:

After placing the signature, you can see the signed PDF file:

Im SecSigner stehen die Signaturformate zur Auswahl. Bei p7m und p7s handelt es sich jedoch um Endungen von Dateinamen.

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.

seccommerce.secsigner.exe.preselectedformat=0

The possible values are:

0=PKCS#7
1=PKCS#7 embedded
2=PDF signature
3=PKCS#7 encrypted
4=XAdES

Adobe usually can’t check Telesec ECC signatures.
You could either buy a brand new Telesec card that uses a different elliptical curve and recognises Adobe or use a card from D-Trust.

If you often have to check/validate signatures in your company, it might be worthwhile taking a look at our signature portal, as you can also conveniently complete signatures via your signature portal and decide which signatures you trust and which you do not. For example, you can configure that there should only be a green verification result for qualified signatures.

With the SecSigner, a license and mass signature card / batch signature card is required to sign larger batches (e.g. several PDFs) with one pin entry. This also specifies how many PDFs can be signed with one pin entry. The number of PDFs that can be signed simultaneously depends on the signature card.

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.

Basically, the positioning of the signature annotation can be set as follows:

seccommerce.secsigner.pdfannotationposition=6

This determines the position of the signature annotation within the document. Default: 6 Possible values are:

1 : 1. page, top left 
2 : 1. page, top center 
3 : 1. page, top right 
4 : 1. page, bottom left 
5 : 1. page, bottom center 
6 : 1. page, bottom right 
7 : last page, top left 
8 : last page, top center 
9 : last page, top right 
10 : last page, bottom left 
11 : last page, bottom center 
12 : last page, bottom right 
13 : new page, top left 
14 : new page, top center 
15 : new page, top right 
16 : new page, bottom left 
17 : new page, bottom center 
18 : new page, bottom right 


When using form fields:

seccommerce.secsigner.pdfannotationformfieldname=Formfeldname

This determines the position of the signature annotation within the document based on a form field already present in the document. The name of the form field must be given as the value.

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.

seccommerce.secsigner.pdfannotationcontactinfo=4

With the value 4, you explicitly specify that the name should consist of the full name (first name and surname) and the company, provided that these values are entered in the certificate of your signature card.

If you are interested in making the signature visible in a PDF document, there are setting options for this in the properties file of SecSigner. There you can specify that no first name is to be displayed. You can find the options in the Secsigner manual at seccommerce.secsigner.pdfannotationcontactinfo. However, there is no option to make differences within the first names.

Yes, that’s possible. At this point you can enter a file name that will then be loaded as an icon. To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.

seccommerce.secsigner.pdfannotationsignericon=

The icon will then be displayed at the bottom right of the signature notation.

seccommerce.secsigner.pdfannotationshowsignericon=on

This means that the image set in seccommerce.secsigner.pdfannotationsignericon is actually displayed.

If you specify an image in seccommerce.secsigner.pdfannotationsignericon but set
seccommerce.secsigner.pdfannotationshowsignericon=off, then the icon will not be displayed.

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.
You can change this under

seccommerce.secsigner.defaultfontsize=12

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.

You can switch this off:

seccommerce.secsigner.pdfannotationshowsignedimage=off

However, the image no longer appears in the current SecSigner version anyway. Therefore, in principle, an update to the current version is advisable.

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.
.
Please use the following setting:

seccommerce.secsigner.pdfannotationshowlabels=on

To switch it off:

seccommerce.secsigner.pdfannotationshowlabels=off

To do this, you must change the value of the setting in the secsigner.properties configuration file as follows. The file can be found in the directory in which SecSigner was installed. If a line with these attributes does not already exist here, simply add them to the end of the file.

seccommerce.secsigner.pdfannotationtransparentbg=on

For a solid background:

seccommerce.secsigner.pdfannotationtransparentbg=off

If you click on the button “Read image from file” in the signature, you can insert your own logo.

Yes, that’s possible. It depends on how you call up the SecSigner. For example, if you call up the SecSigner from an application via its API, you can submit the properties file as a parameter.

Yes, you can perform advanced signatures with a software certificate.

You can obtain a software certificate (required for the advanced signature) from D-Trust or Allgeier.
A signature card (required for the qualified signature) can only be obtained from one of the validated trust centres, e.g. Bundesdruckerei, DGN, Telesec, the Federal Chamber of Notaries, etc.
In addition to the signature card, you also need a card reader for the qualified signature, which you can purchase from one of the manufacturers such as Reiner SCT or Cherry.

Please contact the producer of your software certificate. Only they know the password.

After uploading the document you want to sign, select the option Softwarezertifikat.

You will then be asked to upload your software certificate, which can be filtered according to the usual file formats for software certificates. Then you only have to upload the desired software certificate and enter the password to be able to sign.

Besides the software certificate, there are other ways to sign digitally. If you have many users, it is worth taking a look at our signature portal. It is a very important and useful product when it comes to the different eIDAS signature levels or workflows. Many of our customers use the signature portal in combination with SAP and numerous DMS systems. More about this under Signature portal.

You can use the signature portal in many different scenarios and complex scenarios, e.g. if several signatures are needed on one or more documents, these can be processed in a workflow. It is ideal for technically transmitting and electronically signing invoice documents. Furthermore, it is possible to carry out signature/seal checks to ensure integrity. External users (perhaps customers) can also be integrated without the need for a login. The signature portal can be configured in many ways and has many useful functions. With the on-premise version, you can operate the servers yourself for data protection purpose. Of course, we also offer a secure managed cloud solution.
If you would like a personal consultation, please do not hesitate to contact us.