> For the complete documentation index, see [llms.txt](https://docs.emsigner.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.emsigner.com/administrator-settings/admin-settings/certificate-settings.md).

# Certificate Settings

Can I use the certificate that is hosted on an external server to counter-sign the document?

Yes. Certificate Settings allows you to configure signing certificate credentials so that the certificate that is hosted in the external server can be fetched and used to counter-sign the document.

**Step 1:** Login to emSigner Super Admin account. Click on ‘Settings’ tab to open the Admin Settings. Click on “***Certificate Settings***” under Admin settings

<figure><img src="https://1693119202-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKpOPGIHdEkmaF2RQso%2Fuploads%2FzTI2xLoiT16mXuzAvFjB%2F1.png?alt=media&amp;token=cfa96d87-3122-445d-b29a-a09bd74414a7" alt=""><figcaption><p>Certificate Settings tile under Admin Settings</p></figcaption></figure>

**Step 2:** You will be navigated to the Certificate settings page, click on the ‘***Create New***‘ button.

<figure><img src="https://1693119202-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKpOPGIHdEkmaF2RQso%2Fuploads%2FEuwMSlsVvdUjYEBGDg05%2Fimage.png?alt=media&amp;token=c0aa9250-84ec-4adb-95c2-a4f83c234f50" alt=""><figcaption><p>Certificate Settings Page</p></figcaption></figure>

**Step 3:** There are three types of Signing service available: Emudhra Signing, Azure Key Vault and Remote Signing.&#x20;

For **Emudhra Signing** you need to configure the following fields to enable certificate settings

* Certificate Serial Number – Enter the Serial Number of the Certificate that will be used for signing
* Certificate Password – Enter the password of the certificate that will be used for signing
* Signing API URL – Enter the URL from where the certificate needs to be fetched

<figure><img src="https://1693119202-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKpOPGIHdEkmaF2RQso%2Fuploads%2F9J0AhBiILf4AhHPX62EO%2Fimage.png?alt=media&amp;token=2a9bc381-fa17-4bee-81c9-2da5e1c3becb" alt=""><figcaption><p>Certificate Settings for Emudhra Signing</p></figcaption></figure>

For **Azure Key Vault** you need to configure the following fields to enable certificate settings

* Application(Client) ID – Enter the Client ID of the certificate setup in the Microsoft AKV
* Client Secret – Enter the Client Secret that is generated in the Microsoft AKV account for the certificate
* Key Identify – Enter the Key that is generated in the Microsoft AKV account for the certificate
* Certificate Type - Select the option of either 'Organization' or 'Individual'
  * Organization - If this option is selected, the configured certificate will be used to counter sign all the documents originated by all the internal users
  * Individual - If this option is selected, the configured certificate will be available to be mapped against each individual user
* Enable for Internal Users - If this checkbox is enabled, the configured certificate will be used to counter sign documents originated to all external users

<figure><img src="https://1693119202-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKpOPGIHdEkmaF2RQso%2Fuploads%2F42QxDHBqK50b453LWYYz%2Fimage.png?alt=media&amp;token=20dda518-cabe-46d2-9a25-078563b0a88c" alt=""><figcaption><p>Certificate settings for Azure Key Vault Certificate</p></figcaption></figure>

For **Remote Signing** you need to configure the following fields to enable certificate settings

* Application(Client) ID – Enter the Client ID of the certificate setup for using it in Remote Signing
* Client Secret – Enter the Client Secret of the certificate
* Key Identify – Enter the Key of the certificate setup
* Certificate Type - Select the option of either 'Organization' or 'Individual'
  * Organization - If this option is selected, the configured certificate will be used to counter sign all the documents originated by all the internal users
  * Individual - If this option is selected, the configured certificate will be available to be mapped against each individual user
* PIN Protection - If this checkbox is enabled, for the users to access the certificate, they will be forced to create a PIN for the first time and use the same next time onwards
* Enable for Internal Users - If this checkbox is enabled, the configured certificate will be used to counter sign documents originated to all external users

<figure><img src="https://1693119202-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKpOPGIHdEkmaF2RQso%2Fuploads%2F0ntfcqGocfoFjb0xmZdb%2Fimage.png?alt=media&amp;token=b5098c94-bd2e-4d60-823f-12adbee489c4" alt=""><figcaption><p>Certificate Settings for Remote Signing Certificate</p></figcaption></figure>

**Step 6:** The configured fields will be listed on the page. It can also be edited using the edit icon under the ***Actions*** column

<figure><img src="https://1693119202-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXNKpOPGIHdEkmaF2RQso%2Fuploads%2FJz9CpXqX98V16Yp7YwIJ%2Fimage.png?alt=media&amp;token=a98d5857-fde2-4e73-9974-b80b2159ae8e" alt=""><figcaption><p>Edit and Delete under Actions of Certificate Settings</p></figcaption></figure>