Sunday, May 27, 2018

Obtain a digital certificate and create a digital signature

Obtain a digital certificate and create a digital signature

This article explains why you need a digital signature (or digital ID) to digitally sign a Microsoft Office document and how you can get or create one. To learn more about digital signatures and how to use them in Office documents, see Add or remove a digital signature in Office files.

What is a digital signature?

A digital signature or ID is more commonly known as a digital certificate. To digitally sign an Office document, you must have a current (not expired) digital certificate. Digital certificates are typically issued by a certificate authority (CA), which is a trusted third-party entity that issues digital certificates for use by other parties. There are many commercial third-party certificate authorities from which you can either purchase a digital certificate or obtain a free digital certificate. Many institutions, governments, and corporations can also issue their own certificates.

A digital certificate is necessary for a digital signature because it provides the public key that can be used to validate the private key that is associated with a digital signature. Digital certificates make it possible for digital signatures to be used as a way to authenticate digital information.

Get a digital signature from a certificate authority or a Microsoft partner

If you plan to exchange digitally-signed documents together with other people, and you want the recipients of your documents to be able to verify the authenticity of your digital signature, you can obtain a digital certificate from a reputable third-party certificate authority (CA). For more information, see Find digital ID or digital signature services.

Create a digital certificate to digitally sign a document immediately

If you do not want to purchase a digital certificate from a third-party certificate authority (CA), or if you want to digitally sign your document immediately, you can create your own digital certificate.

  1. Go to C:\Program Files (x86)\Microsoft Office\root\.

  2. Click SelfCert.exe. The Create Digital Certificate box appears.

    Create Digital Signature dialog

  3. In the Your certificate's name box, type a descriptive name for the certificate.

  4. Click OK.

  5. When the SelfCert Success message appears, click OK.

  1. Go to C:\Program Files\Microsoft Office\<Office version>\.

  2. Click SelfCert.exe. The Create Digital Certificate box appears.

    Create Digital Signature dialog

  3. In the Your certificate's name box, type a descriptive name for the certificate.

  4. Click OK.

  5. When the SelfCert Success message appears, click OK.

  1. Click Start, point to All Programs, click Microsoft Office, click Microsoft Office Tools, and then click Digital Certificate for VBA Projects. The Create Digital Certificate box appears.

    Create Digital Signature dialog

  2. In the Your certificate's name box, type a descriptive name for the certificate.

  3. Click OK.

  4. When the SelfCert Success message appears, click OK.

To view the certificate in the Personal Certificates store, do the following:

  1. Open Internet Explorer.

  2. On the Tools menu, click Internet Options, and then click the Content tab.

  3. Click Certificates, and then click the Personal tab.

Important: If you digitally sign a document by using a digital certificate that you created, and then you share the digitally-signed file, other people cannot verify the authenticity of your digital signature without manually deciding to trust your self-signed certificate.

Top of page

How can I get my own digital signature?

If you try to digitally sign an Office 2007 document without a digital certificate, the Get a Digital ID dialog box appears, and you are asked to select how you want to get your own digital signature.

You have two options for getting a digital signature:

To learn more about each option, see the following sections.

Get a digital signature from a Microsoft partner

If you select the option Get a digital ID from a Microsoft partner in the Get a Digital ID dialog box, you are redirected to the Microsoft Office website, where you can purchase a digital certificate from one of the third-party certificate authorities (CAs).

If you plan to exchange digitally signed documents with other people, and you want the recipients of your documents to be able to verify the authenticity of your digital signature, it is a good idea to obtain a digital certificate from a reputable third-party certificate authority (CA).

Create your own digital signature

If you do not want to purchase a digital certificate from a third-party certificate authority, or if you want to digitally sign your document immediately, you can create your own digital certificate by selecting the Create your own digital ID option in the Get a Digital ID dialog box.

To create your own digital certificate

  1. In the Get a Digital ID dialog box, select Create your own digital ID.

    Important: The Get a Digital ID dialog box appears only if you attempt to digitally sign a document without a digital certificate.

  2. In the Create a Digital ID dialog box, type the following information to include in your digital signature:

    • In the Name box, type your name.

    • In the E-mail address box, type your e-mail address.

    • In the Organization box, type the name of your organization or company.

    • In the Location box, type your geographic location.

  3. Click Create.

    Note: If you digitally sign a document by using a digital certificate that you created, and then you share the digitally signed file, other people cannot verify the authenticity of your digital signature. Your digital signature can be authenticated only on the computer on which you created the digital signature.

Top of page

See also

Add or remove a digital signature in Office files

Get a digital ID

Find digital ID or digital signature services

1 comment: