A Digital ID consists of the public key used to lock or encrypt documents, and the private key used to unlock or decrypt data. The public key is in a certificate which can be transferred and used to encrypt documents to prevent unauthorized access. When you sign, you use the private key to apply your digital signature.

You can get digital ID certificates from signature validation process as well as certificate-based security workflows to build a list of trusted identities. During the signature validation process, you verify the identity and add it as a trusted root. For certificate-based security workflows, you need to get certificates in advance for document encryption. Once you receive public key certificates from others, add them to your list of trusted identities so that you can encrypt documents for them. You also need the certificates to validate any PDF file they have digitally signed.

Add trusted contacts

You can import certificates to the list of trusted identities so that they can be used to implement certificate-based security and signature validation workflows.

  1. In Right PDF Editor, choose Security > Digital IDs and Certificates > Trusted Identities.

  2. In the Manage Trusted Identities dialog box, click Browse…

  3. In the Open dialog box, locate and select the certificate file you already obtained from a trusted person and then click Open.

Note: you can click Details to view detailed information of a selected certificate, such as its serial number, the expiration date, fingerprints, and more.

Export a certificate 

You can export a selected certificate and contact data via email or save as a certificate file so that other users can add the data to their list of trusted identities.

  1. In Right PDF Editor, choose Security > Digital IDs and Certificates > Trusted Identities.

  2. In the Manage Trusted Identities dialog box, select a trusted identity from the list and then click Export.

  3. In the Export Data dialog box, determine whether you want to save the contact data to a file or share it via email and then click Next:

    • Email the data to someone. Select to send the Personal X.509 Certification File exported from the selected trusted identity to your email address. The certification file attached contains a copy of a certificate that you can use to verify signature and encrypt documents for the selected identity.

    • Save the data to a file. Select to save the exported certificate to a specified location as a PKCS #7 Certificate File (*.p7b).

  1. Your options vary depending on the export option you choose:

    • If you choose to email the exported certificate, in the Email Certificate dialog box, enter an email address for the recipient of the certificate, review the message, and then click Email. Then, an email client, such as Outlook or Windows Live Mail, appears with the public key certificate ready as an attachment. Click Send.

    • If you choose to Save the data to a file, name the Certificate file, specify a location, and then click

Note: to delete a certificate, select a trusted identity from the list and click Delete to remove it from the list of trusted identities.

More Resources...