Skip to main content
High-volume document sealing service

Cloud-based certificates for automated sealing

The Entrust Signing Automation Service issues and hosts your digital certificate’s private keys for document signing, allowing you to automate document sealing workflows without managing keys and secure hardware. eIDAS Qualified Certificates for Advanced Seals are available.

The service is designed for integrating into applications and platforms compatible with PKCS#11.

What is a digital seal?

While a digital signature represents a natural person (an individual), a digital seal represents a legal person (an organization). Digital seals ensure that a document is tamper-proof and carries your verified organization's name.

Entrust can provide trusted certificates for document sealing, as well as European eIDAS Qualified Certificates to generate eIDAS Advanced Seals via the Entrust Signing Automation Service.


rocket icon white
Keep ownership and control of your content

Trusted digital seals on documents provide real guarantees of ownership and integrity, as well as non-repudiation when combined with timestamping.

gears icon white
Built for integration

The signing service is accessed via our Entrust Signing Automation Client, which is supported by major PDF tools and any PKCS#11-compatible environment.

robot icon white
A full service without hardware management

We provide and maintain everything for you: the HSM, the sealing software, the publicly-trusted certificates, and public timestamping and OCSP services.

EU Trust Mark
Aligned with EU eIDAS

Entrust is a European Qualified Trust Service Provider and can deliver eIDAS Qualified Certificates for Advanced Seals via the Signing Automation Service. Find Entrust in the EU Trust List.


The Entrust Signing Automation Service can be called to generate a digital seal from a hash value that is sent by your document application. This seal is then embedded back into your document by your application.

A hash value is a fixed-length series of digits representing the content of your document. The Entrust Signing Automation Service never receives any sensitive information or intellectual property.

The following diagram illustrates a typical integration of the Signing Automation Service. It does not include the optional timestamping and OCSP flows.

Signing automation service architecture illustration