Cryptomathic Signer
Overview
Cryptomathic Signer is a remote signing server for creating legally binding electronic signatures and seals at scale, with signing keys held in centralised HSM infrastructure. It is Common Criteria EAL4+ certified as a Qualified Signature Creation Device (QSCD) under eIDAS. Unsung is a Cryptomathic Bronze Partner, supplying and implementing Signer for UK banks, government bodies and trust service providers.
Buying Cryptomathic Signer through Unsung
Our independent advice on licensing models and product mix means you get value for money from Cryptomathic.
Buying through Unsung also brings partner pricing through our Cryptomathic relationship and specialist support, with first-line triage from Unsung PKI consultants and escalation to Cryptomathic when required. We also make sure Signer fits your estate, connecting it to your HSMs, CA, identity and authentication services and business applications.
The Challenge
Financial services, government and other regulated sectors increasingly need customers and staff to sign documents and transactions electronically with the strongest legal standing. Under eIDAS, qualified electronic signatures carry the same legal weight as handwritten ones across EU member states, but reaching that level needs specific certified technology. Smart cards and USB tokens held by individual signatories do not scale for remote working, high-volume transactions or customer-facing digital services. Organisations need remote signing that keeps qualified assurance without physical tokens and produces non-repudiation evidence that stands up to legal scrutiny.
What It Does
Signer has three components aligned to eIDAS: a Registration Authority for subscriber and certificate management, a Signature Activation Module providing sole control over key activation, and the QSCD-certified signing engine. It is Common Criteria EAL4+ certified against the eIDAS protection profile for remote qualified signatures. One platform supports qualified, advanced and simple signatures, with the assurance level set by policy. What You See Is What You Sign (WYSIWYS) lets signatories confirm exactly what they are approving. Signer integrates through APIs, SDKs and pre-built connectors, and is used by trust service providers, banks and government departments across Europe.
How Unsung Helps
We help you decide which signature levels your processes actually need, design the signing architecture and implement Signer alongside your PKI, identity and business systems. Where the underlying certificate authority and trust services also need to be built, we cover the whole architecture from HSM through to signing application.
Not every signing requirement needs a qualified remote signing server. For document workflows with user-friendly signing, SigningHub may be a better fit, while ADSS Signing Server suits high-volume server-side signing and sealing. As we supply each of these, our advice reflects your requirements.
Related Unsung Services
- PKI Design & Build: End-to-end design and implementation of signing and trust service architectures.
- Hardware Security Modules: HSM deployment and integration for signing key protection.
- PKI Consultancy: Independent advice on digital signing strategy and eIDAS compliance.
