Support for ICP-Brasil cloud digital certificates (remote signing / non-Windows Certificate Store)

Hello DocuSign Community,

I am looking for clarification regarding supported digital certificates for Brazil (ICP-Brasil), specifically cloud-based certificates where the private key is not stored locally on the signer’s machine.

• I use an ICP-Brasil e-CPF cloud certificate, managed by a certified Trust Service Provider (TSP).

• The certificate is not installed in the Windows Certificate Store and is not exposed via PKCS#11 or CSP locally.

• The signing process works as follows:

  • The user selects “cloud certificate”

  • A local application is launched

  • The signer authenticates using QR Code + 2FA (mobile approval)

  • The cryptographic signing operation occurs remotely (HSM / remote key signing)

This certificate works correctly on:

• Government portals

• Other Brazilian signing platforms

• Websites that require client certificate authentication

However, when attempting to sign documents in DocuSign eSignature, the signing process cannot be completed, which suggests that DocuSign expects the certificate to be locally accessible via the Windows Certificate Store or a local token.