PDF signing with a remote certificate

[osanchez1]

Is there any way to sign a PDF with a certificate that is not stored in a .pfx file or Microsoft store?,

The use case, is a certificate that is stored on a cloud HSM, Amazon for example.

The HSM API and SDK has an option to GetCertificate, that allows to obtain the certificate (without the private key), and an option to SignHash(dataTobeSigned) to sign the hash with the certificate private key remotely.

The process should be :

Give the developer an Interface to be implemented to Get the Certificate from somewhere
Give the developer a "dataToSign" byte array, that is the data that the developer has to "hash" and then "sign" remotely
With the result from the GetCertificate Implementation and the Sign(dataToSign) Implementation then GDPicture could sign the PDF

The question is if there is something like this right now on GDPicture 14, and if not, if there is any plan to develop something like this, I understand that implementing shouldn't be very complicated with all the functionality that GDPicture 14 PDF plugin already has.

Thanks a lot for your answer,

[Gabriela]

Hello,

This request is already on our roadmap, but unfortunately, we cannot provide any specific time frame here. The feature has not been analysed yet and no considerable priority is defined here.