> For the complete documentation index, see [llms.txt](https://docs.editran.onesait.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.editran.onesait.com/documentacion-editran/connect-3.2-en/firma.md). # Signature The *digital signature* is a mechanism that irrevocably associates certain content with one or more identities. The content is the file being signed and each identity is represented by a digital certificate. This association is carried out using mathematical encryption operations that use the private key (to sign) and public key (to verify) related to the digital certificates used. From the moment a document is digitally signed, the following are guaranteed: * The **document integrity**: any modification made to the file after signing would be detected during verification. * The **authorship** of the signature: each digital certificate used is uniquely associated with the physical or legal entity it represents. * **Non-repudiation of origin**: the private key used to encrypt is only accessible to the individual or legal entity it represents and only they know the mechanism with which it is kept protected (PIN, password, etc.), so once done, the author cannot deny it. Connect includes all operations that require the signing and verification of file signatures before and after they are exchanged between two endpoints. For this functionality, available under specific license, the following elements are essential: * ***Channel***** of Connect with the signing feature** in the corresponding direction of transmission: * On sending, when it is a *channel* through which files (signed or not) will be sent that have previously undergone a signing process in the local installation. * On reception, when they are to be received by the *channel* signature files from other endpoints that must be verified here. * Roles and users: * **User with signer role**: is the one who accesses Connect to sign files. Their configuration profile contains the public key digital certificates that represent them. To perform the signing, the signer must have the **private key certificates** corresponding to the public key ones mentioned in their configuration. * **Remote signer**: associated with a *contact* of Connect, is the author of the signatures generated at another endpoint that are subsequently received and verified here. Their configuration profile contains the public key digital certificates that represent them. * ***File group***: is the set of parameters that define a signing rule. In a *file group* it is specified **which** files must be signed (location, format/banking standard), **how** (PKCS#7 or XAdES signing mode) and **who** and **how many** must do it. Signing rules can be established based exclusively on the criterion of the signers (signatories, groupings of them and required signatures) or also taking into account certain data reported in the files being signed (tax ID, account, transaction amount greater, total file amount, etc.). They can have two purposes: sign files or verify signatures. Below, the module administration tasks are detailed, as well as the use of the product once configured, both for signing files and for verifying signatures. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.editran.onesait.com/documentacion-editran/connect-3.2-en/firma.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.