Set up digital signs on Windows 10

Applies to

• WindowsВ 10 Pro, Enterprise, and Education

Digital signage can be a useful and exciting business tool. Use digital signs to showcase your products and services, to display testimonials, or to advertise promotions and campaigns. A digital sign can be a static display, such as a building directory or menu, or it can be dynamic, such as repeating videos or a social media feed.

For digital signage, simply select a digital sign player as your kiosk app. You can also use Microsoft Edge in kiosk mode or the Kiosk Browser app (a new Microsoft app for Windows 10, version 1803) and configure it to show your online content.

Kiosk Browser can also be used in single-app kiosks and multi-app kiosk as a web browser. For more information, see Guidelines for web browsers.

Kiosk Browser must be downloaded for offline licensing using Microsoft Store for Business. You can deploy Kiosk Browser to devices running Windows 10, version 1803.

If you haven’t set up your Microsoft Store for Business yet, check out the prerequisites and then sign up.

This procedure explains how to configure digital signage using Kiosk Browser on a device running Windows 10, version 1803, that has already been set up (completed the first-run experience).

Open Windows Configuration Designer and select Provision kiosk devices.

Enter a friendly name for the project, and select Finish.

On Set up device, select Disabled, and select Next.

On Set up network, enable network setup.

• Toggle On wireless network connectivity.
• Enter the SSID, the network type (Open or WPA2-Personal), and (if WPA2-Personal) the password for the wireless network.

On Account management, select Disabled, and select Next.

On Add applications, select Add an application.

• For Application name, enter Kiosk Browser .
• For Installer path, browse to and select the AppxBundle that you downloaded from Microsoft Store for Business. After you select the package, additional fields are displayed.
• For License file path, browse to and select the XML license file that you downloaded from Microsoft Store for Business.
• The Package family name is populated automatically.
• Select Next.

On Add certificates, select Next.

On Configure kiosk account and app, toggle Yes to create a local user account for your digital signage.

• Enter a user name and password, and toggle Auto sign-in to Yes.
• Under Configure the kiosk mode app, enter the user name for the account that you’re creating.
• For App type, select Universal Windows App.
• In Enter the AUMID for the app, enter Microsoft.KioskBrowser_8wekyb3d8bbwe!App .

In the bottom left corner of Windows Configuration Designer, select Switch to advanced editor.

Go to Runtime settings > Policies > KioskBrowser. Let’s assume that the URL for your digital signage content is contoso.com/menu.

• In BlockedUrlExceptions, enter https://www.contoso.com/menu .
• In BlockedUrl, enter * .
• In DefaultUrl, enter https://www.contoso.com/menu .
• Set EnableEndSessionButton, EnableHomeButton, and EnableNavigationButtons to No.

For more information on kiosk browser settings, see Guidelines for web browsers.

On the File menu, select Save, and select OK in the Keep your info secure dialog box.

On the Export menu, select Provisioning package.

Change the Owner to IT Admin, and select Next.

On Select security details for the provisioning package, select Next.

On Select where to save the provisioning package, select Next.

On Build the provisioning package, select Build.

On the All done! screen, click the Output location.

Copy the .ppkg file to a USB drive.

Attach the USB drive to the device that you want to use for your digital sign.

Go to Settings > Accounts > Access work or school > Add or remove a provisioning package > Add a package, and select the package on the USB drive.

Digital Signatures

Digital signatures are based on Microsoft public key infrastructure technology, which is based on Microsoft Authenticode combined with an infrastructure of trusted certification authorities (CAs). Authenticode, which is based on industry standards, allows vendors, or software publishers, to sign either a file or a collection of files (such as a driver package) by using a code-signing digital certificate that is issued by a CA.

Windows uses a valid digital signature to verify the following:

The file, or the collection of files, is signed.

The signer is trusted.

The certification authority that authenticated the signer is trusted.

The collection of files was not altered after it was published.

For example, this signing process for a driver package involves the following:

A publisher obtains an X.509 digital certificate from a CA. An Authenticode certificate is also referred to as a signing certificate. A signing certificate is a set of data that identifies a publisher, and is issued by a CA only after the CA has verified the identity of the publisher. A CA can be a Microsoft CA, a third-party commercial CA, or an Enterprise CA.

The signing certificate is used to sign the catalog file of a driver package or to embed a signature in a driver file. Certificates that identify trusted publishers and trusted CAs are installed in certificate stores that are maintained by Windows.

The signing certificate includes a private key and a public key, which is known as the key pair. The private key is used to sign the catalog file of a driver package or to embed a signature in a driver file. The public key is used to verify the signature of a driver package’s catalog file or a signature that is embedded in a driver file.

To sign a catalog file or to embed a signature in a file, the signing process first generates a cryptographic hash, or thumbprint, of the file. The signing process then encrypts the file thumbprint with a private key and adds the thumbprint to the file.

The signing process also adds information about the publisher and the CA that issued the signing certificate. The digital signature is added to the file in a section of the file that is not processed when the file thumbprint is generated.

To verify the digital signature of a file, Windows extracts the information about the publisher and the CA and uses the public key to decrypt the encrypted file thumbprint.

Windows accepts the integrity of the file and the authenticity of the publisher only if the following are true:

• The decrypted thumbprint matches the thumbprint of the file.
• The certificate of the publisher is installed in the Trusted Publishers certificate store.
• The root certificate of the CA that issued the publisher’s certificate is installed in the Trusted Root Certification Authorities certificate store.

For more information about how the Plug and Play (PnP) device installation uses the digital signature of a driver package’sВ catalog file, see Digital Signatures and PnP Device Installation.

For more information about Microsoft public key infrastructure technology, code signing, and digital signatures, see Introduction to Code Signing and Code Signing Best Practices.

8 Best Free Digital Signature Software for Windows

Here is the list of best free digital signature software for Windows. You can use these software to digitally sign your documents as a proof of authenticity. By the time you reach end of this article, you will be familiar with various software and processes to digitally sign PDF and ODT documents.

You will find dedicated digital signature software, PDF readers, and Office suites in the following list helping you out with digital signature. These digital signature software follow various approaches to carry out the process. Some of these software (such as Adobe’s digital signature tool) let you simply draw your sign, use an image to sign, or add text in fonts that look like handwriting. Some follow a completely different approach by using Digital Certificates for signature authentication. Digital Certificates may be Windows Keystores, JKS files, or PFX files. You can also add self signed certificate for digital signature using one of the listed software.

In the following list that I have compiled, most of the digital signature software are PDF signature software. Go through the list to know more about these software, digital signature, and digital certificates. You will also know how to digitally sign PDF using these software.

My Favorite Digital Signature Software:

I like Adobe Acrobar Reader DC the most for digital signature. It lets you quickly create your own sign and add it to your document. You can also sign PDF with your signature’s photo. I also like JSignPdf as it provides various certificate based digital signature options.

Adobe Acrobat Reader DC

If you are looking for an Adobe digital signature software to sign PDF, use Adobe Acrobat Reader DC. Its a free PDF reader from Adobe that lets you read documents and also annotate them. One of the options available in this software is Fill & Sign that lets you digitally sign PDF.

There are 3 ways in which you can digitally sign a document:

• Type text from keyboard, which will be rendered as hand written text. You can choose from 4 different text fonts.
• Draw a signature manually. Its preferable if you have a touch sensitive device or a digital drawing pad, else you can use your mouse too.
• Upload an image of your signature and use it to sign PDF digitally.

It lets you save up to 2 digital signatures to apply on documents instantly. Once you select a signature, this software lets you place it anywhere on the document. Moreover, you can also increase or decrease the signature size.

Apart from digital signature, if you are looking to annotate PDF, you can do that as well.

JSignPdf

JSignPdf is an advanced free digital signature software for Windows. To digitally sign PDF with this, you will need Digital Certificate and of course, a PDF file. Digital certificates are digital seal of approval for authenticity. These certificates are Private Keys, and are usually stored in Windows Keystore or as files in JKS or PKCS#12 formats. These certificates come with passwords which you need to enter as well. To get an idea about Windows’ keystore, click here.

With the PDF sign, you can add Signature Name or an image with description, Customizable signature text, Background image, Location, and Contact info. Some of these are optional to fill. You can also set a position to place the signature on your document if you choose to keep the signature visible.

After selecting a PDF to sign, you can either choose to create a new digitally signed copy of PDF or replace the original PDF with the signed one. You need not worry if your PDF is encrypted; simply select encryption type and enter the password. After setting up the signature position, fill other required fields and hit the Sign It button.

You can read complete details of using JSingPDF here.

PDF Digital Signer

PDF Digital Signer is a very simple software to sign documents digitally. To digitally sign PDF using this software, you will need to keep a certificate file handy in PFX format, along with its password (if any).

Before applying a signature, there are various parameters and contents that you can add. You can set signature position to define where your signature will be placed on the document. Enter Signature MetaData if required where you can enter Author, Title, Subject, Keyword, Creator, and Producer. Additional info can also be added, such as Reason, Contact, Location, etc.

This software to sign PDF also lets you choose if you want to keep your signature visible or hidden.

After signing a document, the resultant document is saved as a new document. You can name the new document according to your choice.

Perfect PDF Reader

Perfect PDF Reader is a free PDF reader software which lets you digitally sign PDF. To certify your signature, you will find various ways here, namely: Self-Signed Certificate, Certify using PFX or PVK file, Certify with Personal Storage of Windows User, or Smart Card or eToken certificate.

Signing a document here is a 4 step procedure. Let me show how to digitally sign PDF using Perfect PDF Reader.

• Step 1: In the first step, you need to set Signature Properties. You just have to enter the reason for signature, Location, and Contact Info.
• Step 2: Select the Signature Certificate type for the signature. If you want to use Smart Card/eToken or Personal Storage of Windows User, you must have valid certificates on your PC. If you have a PFX or PVK keystore file, you can also use it to certify your signature. You can also create a self signed certificate if you have none of the above options available. For self signed certificate, you will have to give it a name, enter email address, and validity duration.
• Step 3: Time Stamp your digital signature if required. Note that the timestamp will only be visible when opened in Perfect PDF Reader.
• Step 4: Set signature appearance here. You can choose either you want to display signature text or use an Image as signature. You can browse and select an image from your PC or use the default PNG file available in this reader. Signature position can also be set from here.

The signed PDF will be saved as a new document on your PC.

You can also use this PDF reader software to annotate your documents.

PDF Shaper

PDF Shaper is a PDF utility that can be used to digitally sign PDF files using PFX certificate files. Before you read more about this software, I’d like you to know that this software is only free for personal use; you will have to buy a license if you want it to use commercially.

You can digitally sign PDF files in bulk here. After adding the PDF files to sign, you will have to select a PFX certificate file from your PC, then enter PDF password and PFX password if any. You will be asked to set an output folder to save the digitally signed documents.

PDF SHaper is multipurpose PDF utility and can be used to convert PDF, encrypt PDF, extract data from PDF, and much more.

Foxit Reader

Foxit Reader provides similar options to sign PDF as Adobe Acrobat Reader DC. Before you sign document digitally, you will have to create one. You can draw a signature, type a signature, or import an image with signature to create digital signature. If you choose to type a signature, you will have to type a text and then you can choose from various fonts that look like handwriting. Additional features let you convert a signature to black and white, set password for a signature, and delete a signature when the program closes. You can create multiple signatures here.

After a digital signature is added, it appears in the list of signatures. Simply select your signature and place it on your document wherever required.

Foxit reader provides various other options that you may like. Annotate PDF, attach a file, modify document security settings, and do much more.

OpenOffice Writer

OpenOffice Writer is a word processor tool which is a part of OpenOffice Suite. It can be used to digitally sign documents, but has certain limitation with the digital signature feature. Unlike other digital signature software mentioned above, you can only digitally sign ODT (OpenDocument Text) files here. If you have a PDF or DOC/DOCX file that you want to digitally sign, you will have to save it as ODT, then digitally sign it. The OpenOffice Writer’s digital signature is best suited only if you share documents in OpenOffice formats.

How To Digitally Sign Documents in OpenOffice Writer:

When you have your ODT document ready to be signed, go to the File menu and select the Digital Signature option. A window opens which automatically detects and displays the digital certificates available on your PC. You can view a certificate’s details before selecting it. Simply select the signature you want to apply on your document. Once you add a sign, a small digital sign icon appears on the bottom of the document. Save the document.

LibreOffice Writer

LibreOffice Writer is another word processor tool available in the famous open source office suite, LibreOffice. LibreOffice Writer is almost same as OpenOffice Writer, so is the digital signature tool.

You can only digitally sign ODT files here, and if you want to digitally sign another document, you will have to convert it to ODT format first.

The procedure to sign a document with digital certificate is exactly the same as discussed above for OpenOffice Writer.