Support for ICP-Brasil cloud digital certificates (remote signing / non-Windows Certificate Store)

Any response ?

Have you try signer held :https://support.docusign.com/s/document-item?language=en_US&bundleId=yca1573855023892&topicId=tir1687888983224.html&_LANG=enus

I don't know whether it support remote HSM.

FreeLink/甫连信息

🌍 DocuSign Partner | Partner Profile
🌟The only DocuSign Partner globally with two Certified eSignature Technical Consultants

🏆 DocuSign 2025 APAC Growth  Engine Partner of the Year
💡 Ranked #1 in the OG All Star category in DocuSign Community Wrapped 2024
📊 DocuSign Community Leaderboard Top 5 contributor
🚀 Expertise in DocuSign integrations with on-premises systems for leading enterprises across various industries
🔗 Connect with me on LinkedIn: https://www.linkedin.com/in/gehengfeng

📬 For business inquiries, feel free to connect via :

WeChat/微信: +86 1381880287

WhatsApp: +65 97796938

Based on the evidence and tests already performed, this scenario does not work as suggested.

Certificates such as VIDAAS are cloud-based certificates where the private key is never stored or exposed in the Windows Certificate Store, nor made available via CSP/KSP or local tokens. Instead, the signing operation is performed remotely through a cloud HSM, and each signature is authorized by the signer using a separate authentication flow (e.g., mobile app, QR code, OTP, or push approval).

DocuSign’s digital signature (PKI / Signer Held) model requires the signing certificate to be locally accessible by the DocuSign PKI agent, either from the operating system certificate store or from a physical token/smart card. There is no documented support for delegating the signing operation to an external remote HSM or consuming third-party signing APIs.

The certificate is not present in the Windows store

There is no integration between DocuSign and VIDAAS for example and as far as I know

The private key cannot be accessed or triggered by DocuSign

As a result, the signature cannot be completed.

Could you please confirm whether DocuSign supports any signing scenario where the certificate is not available in the OS certificate store and where there is no direct integration with the cloud certificate provider (remote HSM / cloud signing service)? If such a scenario exists, could you also clarify the expected technical flow and supported providers?

At this moment, all available documentation and community references indicate that remote cloud certificates such as VIDAAS are not supported for digital signatures in DocuSign.

Hello, ​@vkaicde 

This article talks about best practices using ICP Brasil and ITI validator. Perhaps you can find some useful information.

https://support.docusign.com/s/articles/Best-practices-for-signing-documents-with-ICP-Brasil-digital-signatures-when-using-the-ITI-validator-VALIDAR-is-required?language=pt_BR&langSet=1

About your very specific questions, I would suggest to you contact our support team then ask to talk with a security specialist.

How to open a support case?

https://support.docusign.com/s/articles/How-Do-I-Open-a-Case-in-the-DocuSign-Support-Center?language=en_US&langSet=1

Best,

Alexandre

The referenced article focuses on ICP-Brasil validation requirements (ITI / VALIDAR) after the signature is completed. It does not address nor enable signing scenarios using cloud-based certificates or remote HSM solutions such as VIDAAS. At this time, there is no documented or supported mechanism for DocuSign to perform digital signatures when the certificate is not available in the operating system certificate store.

Hi there ​@vkaicde,

It looks like you have already reached out to Customer Support, as ​@Alexandre.Augusto suggested. Is that right? If you still have questions or require additional assistance, please don't hesitate to let us know—we’re happy to help.

If the previous response helped clarify things or pointed you in the right direction, we’d appreciate it if you could mark it as the Best Answer ✅

If you discovered a solution, feel free to share it here and mark your reply as the Best Answer— so others can easily find it too.

Hope you’re having a great day!

Regards,

Melanie | Docusign Community Moderator