Skip to main content

Issue Adobe AATL certificates via CertCentral

Use DigiCert​​®​​ Trust Lifecycle Manager to issue certificates trusted by Adobe products like Acrobat for document signing by individuals and organizations.

The certificates get issued from public root CAs in DigiCert® CertCentral that are recognized by the Adobe Approved Trust List (AATL).

Before you begin

  • You need an active CertCentral CA connector in Trust Lifecycle Manager.

  • The connected CertCentral account must have one or both of the following certificate products enabled.

    • Document Signing for Business - Employee for document signing by individuals.

    • Document Signing for Business - Group for document signing by organizations.

  • Your Trust Lifecycle Manager account must have one or both of the following "limited" certificate templates assigned to it. If these templates do not appear on your Policies > Base templates page, contact your DigiCert account representative to assign them.

    • Adobe Individual (via CertCentral) for document signing by individuals.

    • Adobe Organization (via CertCentral) for document signing by organizations.

Chain of trust

Adobe AATL certificates chain to the following root/intermediate CAs, depending on the region of the connected CertCentral account.

CertCentral region

Trust anchors

Europe

Root CA: DigiCert Assured G2 Multi Doc Sign EUR RSA4096 SHA384 2023 CA1

USA

Root CA: DigiCert Assured ID G2 Multi Doc Signing RSA4096 SHA384 2023

Intermediate CA: DigiCert Test SHA2 Intermediate CA-1

Document signing for individuals

Available certificate templates

Use the following base template to create certificate profiles in Trust Lifecycle Manager for issuing Adobe AATL certificates for document signing by individuals.

Template name

Seat type

Enrollment method

Authentication methods

Adobe Individual (via CertCentral)

User

DigiCert Trust Assistant

  • Manual Approval

  • Enrollment Code

  • SAML IdP

Issue Adobe AATL certificates

Document signing for organizations

Available certificate templates

Use the following base template to create certificate profiles in Trust Lifecycle Manager for issuing Adobe AATL certificates for document signing by an organization.

Template name

Seat type

Enrollment methods

Authentication methods

Adobe Organization (via CertCentral)

Organization

CSR

  • Manual Approval

  • Enrollment Code

  • SAML IdP

REST API

  • 3rd Party app

  • Enrollment Code

Issue Adobe AATL certificates

  • Create one or more certificate profiles from the above base template to define the allowed options for issuing Adobe AATL certificates for your organization.

  • Select one of the allowed enrollment methods for how to request new certificates, and one of the corresponding authentication methods for how to validate the requests.

  • Use the selected enrollment method to request new Adobe AATL certificates for your organization. You can monitor and manage the certificates from the Trust Lifecycle Manager web console.