---
title: "Signing with cloud digital certificates"
description: "Signing with cloud digital certificates in PKI SDK, from providers that follow the ITI specifications, accessed through the BrazilTrustServices package."
canonical: "https://docs.lacunasoftware.com/en-us/articles/pki-sdk/cloud-certificates"
locale: "en"
product: "PKI SDK"
last_updated: "2026-10-12"
---

# Signing with cloud digital certificates

PKI SDK supports signatures with cloud digital certificates, held by cloud service providers that follow the specifications of the ITI
(the Brazilian National Institute of Information Technology). The main providers are BirdId (Vault ID), ViDaaS (VALID), NeoId (Serpro),
RemoteId (Certisign) and SafeId (Safeweb).

PKI SDK itself does not access the digital certificate used in the signature, though: the `BrazilTrustServices` package does.

## See also
* [BrazilTrustServices](https://docs.lacunasoftware.com/en-us/articles/pki-sdk/cloud-certificates/brazil-trust-services)
* [CloudHub](https://docs.lacunasoftware.com/en-us/articles/cloudhub): one API key for every provider, without registering your application with each of them

**Demos and samples**

- Live demo: [Sign a PDF with your cloud certificate](https://try.lacunasoftware.com/en/pki-suite/sign-with-cloud-certificate)
- Sign a PDF with a cloud certificate (OAuth flow) using PKI SDK: [.NET](https://github.com/LacunaSoftware/PkiSuiteSamples/blob/master/dotnet/mvc/PkiSuiteAspNetMvcSample/Controllers/PadesCloudOauthSdkController.cs)
- Sign a PDF with a cloud certificate (password flow) using PKI SDK: [.NET](https://github.com/LacunaSoftware/PkiSuiteSamples/blob/master/dotnet/mvc/PkiSuiteAspNetMvcSample/Controllers/PadesCloudPwdSdkController.cs)