Set up two-factor authentication (2FA)

Two-factor authentication (2FA) is required to sign a document using DigiCert® Document Trust Manager.

Once your identity verification is approved, you will receive an email with a QR code that is required to configure 2FA using a mobile authenticator application.

In some cases, you may use PIN, SMS or a combination of PIN and a mobile authenticator application as a 2FA method for signing documents.

Your location determines which mobile authenticator you can use.

Example 1. Switzerland and European Union (EU)

In Switzerland and the EU, DigiCert® Document Trust Manager is compatible with Ascertia Go>Sign Mobile.

Go>Sign Mobile

To use Go>Sign Mobile:

Download Ascertia Go>Sign Mobile app on your mobile device.
Select the Settings icon.
Select Scan QR Code to scan the QR code in your email or manually change the default server to http://www.signingportal.com/adss/service/ras.
Select Save.
Return to the main screen and add user ID in your email.
You will receive two one-time passwords (OTP) via email and text.
Enter the OTPs in the Go>Sign Mobile device registration screen.
Select Verify.

When you sign a document, you will be prompted to confirm your identity, in Go>Sign.

To verify your identity and authorize the request:

Navigate to Go>Sign Mobile app > Authorization request.
Select Authorize to confirm your identity.

Example 2. United States of America (USA)

In the USA, DigiCert® Document Trust Manager is primarily compatible with Google Authenticator, Microsoft Authenticator, and Okta. You may use other time-based one-time password authenticators, but these are the three most common and confirmed authenticators.

Follow the instructions to set up one of the following authenticators:

Google Authenticator

To use Google Authenticator:

Download Google Authenticator application on your mobile device.
Open the Google Authenticator application.
Select the Add icon.
Select Scan a QR code.
Use your device to scan the QR code in your email.

When you sign a document, you will be prompted for the six-digit code provided in Google Authenticator.

Microsoft Authenticator

To use Microsoft Authenticator:

Download Microsoft Authenticator application on your mobile device.
Open the Microsoft Authenticator application.
Select Add account.
Select Other account.
Manually enter the authentication code in the email with the QR code.
Enter an account name.
Select Finish.

When you sign a document, you will be prompted for the six-digit code provided in Microsoft Authenticator.

Okta

To use Okta:

Download Okta application on your mobile device.
Open the Okta application.
Select the Add icon.
Use your device to scan the QR code in your email.

When you sign a document, you will be prompted for the six-digit code provided in Okta.

Additional information for credentials

Users and administrators can create credentials, which prove that the user is actually the one signing the documents. The process is similar to using authenticators for validations, except users and administrators can create credentials.

Reset PIN

If your account configuration allows using PIN as a 2FA method for signing documents, you can choose to reset it.

Update account details or generate new QR code for 2FA

If you want to update your mobile number, email address or generate a new QR code to set up a mobile authenticator, see Update mobile number, email and/or generate QR code for 2FA.