Page tree

Do you want an overview on Nexus' solutions, customer cases, contact information and more?

__

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

News

2019-04-09

Added description on how to Sign document via Word add-in. Also added how to use an identity provider with the SAML attribute userId, see for example Connect identity provider to PDF Signing.

See more news...

What is Nexus GO PDF Signing?

Nexus GO PDF Signing is a cloud service that enables all your users to make secure electronic signatures on PDF documents. The documents are uploaded to and signed in the Nexus GO PDF Signing Portal

If you choose to use the signing portal as a stand-alone service, your users will log in to the portal and sign with either Nexus Personal Mobile or Swedish BankID. Simply sign up for a subscription, and your users can start making digital signatures straight away. 


Nexus GO PDF Signing

How does Nexus GO PDF Signing work? 

A PDF document is signed in the Nexus GO PDF Signing Portal in the following way: 

  1. An administrator logs in with Nexus Personal Mobile to the Nexus GO PDF Signing Portal, uploads a pdf document, and invites persons to sign, either with Nexus Personal Mobile or Swedish BankID. An email is sent to each person. 
  2. Each signer follows the link in the email to the Nexus GO PDF Signing Portal, and signs the document with either Nexus Personal Mobile or Swedish BankID. 
    For each signer, the following steps take place in Nexus GO:
    1. A one-time RSA key pair is created in the secure environment of a Hardware Security Module (HSM).
    2. The signer is associated to the key pair with two-factor authentication.
    3. A hash of the PDF document is generated and signed with the private key of the key pair. The private key is then discarded.
    4. The identity of the signer is securely bound to the key pair in a certificate, issued by the CA of the service, through the use of an HSM.
    5. The signed document hash, the newly generated certificate, and a time stamp is built into the PDF file. 
    The PDF document is now securely signed and cannot be modified without detection. The signed PDF document can be verified for example in Adobe Acrobat Reader.


Expand/Collapse All

FAQ

 How do I order the Nexus GO PDF Signing service?
To order Nexus GO PDF Signing:
  1. Sign up and log in to Nexus GO.
  2. Click Services > Signing
  3. Click Add signing method, and then select PDF Signing.
  4. Enter a Name. Read and Accept the terms. Confirm the method. 
    An administrator account is now created for you in the Nexus GO PDF Signing Portal. This portal is where documents will be uploaded and signed.
  5. When you are happy with the testing and want to buy the service for unlimited number of documents, you can upgrade to a Business subscription: 
    In Services > Signing, select the added PDF Signing service, click Manage subscriptions, and enter your invoice address. You will be contacted by Nexus with a confirmation. 

    The signing service is now ready to use in your production environment.
 How do I upload a document for signing?

To upload a PDF document for signing, you need to be an administrator in the Nexus GO PDF Signing Portal:

  1. Log in to the Nexus GO PDF Signing Portal with Nexus Personal Mobile.
  2. Click New Signing Request. Add one or more PDF documents to the request, by drag-and-drop or browsing. 
  3. Select which Signing method that shall be required, either Personal Mobile or Swedish BankID
  4. Enter Request name, Description, and Sign before date. 
  5. Add one or more recipients with name and email address.
    The recipients get a notification email to sign the document. If they are new users and if Personal Mobile was chosen as Signing Method, the email includes instructions how to download and activate Nexus Personal Mobile.
 How do I download a signed document?

As an administrator, you can download the signed PDF document in the following way:

  1. Log in to the Nexus GO PDF Signing Portal with Nexus Personal Mobile.
  2. Go to Requests, and select the request in the list.
  3. Click Download: and save the document.
    The signed document can then be distributed to other persons.
 How do I validate a document?

To see the visual signature of the PDF document:

  1. Open the PDF document in a web browser or Adobe Acrobat Reader.
  2. Scroll to the last page.
    A visual signature is added for each signer: the name of each signer, date, and time.

To validate the digital signature of the PDF document and see all the signature details:

  1. The first time, you must first set the Nexus GO root certificate as trusted. See the next question below: How do I set the certificate to trusted in Adobe Acrobat Reader?
  2. Open the document in Adobe Acrobat Reader.
  3. See the signature validation in the top bar. If the signature was successful, the following message should be displayed:
    Signed and all signatures are valid.
  4. To see the details of the signature, click on the visual signature on the last page or click Signature panel in the top bar.
 How do I set the certificate to trusted in Adobe Acrobat Reader?

To add the Nexus GO root certificate to the list of trusted certificates in Adobe Acrobat Reader:

  1. Download this Nexus GO certificate exchange file: CertExchangeNexus Go PDF Signing.fdf.
  2. Open the file.
    The Import Contact window opens in Adobe Acrobat Reader.
  3. Click Set Contact Trust...
  4. In Import Contact Settings, check Use this certificate as a trusted root and Certified documents.
  5. Click OK.
 How do I add another administrator in the PDF Signing Portal?

The person who ordered Nexus GO PDF Signing service in Nexus GO automatically gets an administrator account.

To add add another administrator:

  1. Log in to the Nexus GO PDF Signing Portal with Nexus Personal Mobile.
  2. Click the user icon on the top right: , select Settings, and then Admin.
  3. Enter Name and Email address. Click Add.
    The added persons get an invitation email to the portal. If they are new users, the email includes instructions how to download and activate Nexus Personal Mobile.
 Is the Nexus GO PDF signature an Advanced Electronic Signature according to eIDAS?

Yes. The following features of the solution makes Nexus GO PDF signatures compliant to the level of Advanced Electronic Signature in the EU regulation eIDAS (electronic IDentification, Authentication and trust Services)

  • The identity of the signatory is ensured using a two-factor authentication to a properly issued identity
  • The one-time RSA key pair can only be used by the signatory who has authenticated, as the private key is discarded after use
  • Subsequent change of the contents of the PDF file can be detected. This is a standard feature in Adobe Reader and is done by validating the signed hash of the document towards the current contents of the document. If the document has been changed, the signature is invalid 
  • No labels