SetaPDF-Signer Add-Ons Are Up To Date!February, 2026
Signing PDFs in PHP isn't a complicated task thanks to our SetaPDF-Signer 🚀.
But handling signing keys or certificates can be... That's why there are several services available that handle this job for you.
Most of them come with their own API and require an individual integration to get them working with the SetaPDF-Signer component.
Over the time we created several add-ons for various solutions, such as key management systems of common cloud providers.
We updated all add-ons and ensured compatiblity with the latest SetaPDF version and PHP 8.5 (except Google Cloud KMS*).
Following add-ons are up to date now:
AWS KMS
A Cloud Key Management System from Amazon that also allows you to manage keys. It also supports the creation of keys on an HSM. A CA may also issue certificates conforming to the AATL for these keys.
Google Cloud KMS
This add-on allows you to use keys stored in the Google Cloud Key Management System. Google KMS allows you to create software keys or keys stored on an HSM, which makes it possible to use such keys for e.g. AATL conforming certificates.
* = Dependencies of this add-on are currently not PHP 8.5 ready! (Issue #12)
Cloud-KMS-CSR
Both Google Cloud KMS and AWS KMS only store keys but no certificates. With this tool we close the gap and allow you to create self-signed certificates for testing purpose or CSRs (certificate signing requests) with keys stored in the key management system.
Azure Key Vault
Key Vault is a service of the Microsoft Azure Platform. It covers the complete key and certificate creation and managing process. It also supports the creation of keys on an HSM.
Certificate authorities need a proof that the key is stored on a secure hardware device - this is commonly known as key attestation. CAs should have implemented their own verification process for this: Some require a screen recoding of the key creation ceremony, others rely on contractual conditions or watch the process through a web-meeting. Google Cloud KMS allows a technical solution or also known as remote key attestation. You should contact your CA if and what process they prefer or support.
CSC API
An add-on that allows you to use the Cloud Signature Consortium API for Remote Electronic Signatures and Remote Electronic Seals with the SetaPDF-Signer component.
PKCS11
If the keys are stored on a PKCS11 compatible device (e.g. HSM or USB Token) you can use this add-on to make them available to the SetaPDF-Signer. This add-on requires the PKCS11 module for PHP.
GlobalSign DSS
An add-on to use the Digital Signing Service from GlobalSign. The Digital Signing Service from GlobalSign offers advanced AATL and qualified seal certificates.
TRUST2GO
This add-on allows you to use the remote signing solution TRUST2GO by GLOBALTRUST with the SetaPDF-Signer component. This service also offers advanced AATL and qualyified seal certificates.
For sure we know that this list can be much longer! So, if you know about a service that you would like to use with the SetaPDF-Signer, do not hesitate to contact us at support@setasign.com.