---
title: "PDF Settings - Rest PKI Core"
description: "PDF settings of Rest PKI Core on-premises instances: the PDF marking policy (Pdf:MarkingPolicy) used when the organization doesn't set its own."
canonical: "https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/on-premises/settings/pdf"
locale: "en"
product: "Rest PKI Core"
last_updated: "2026-10-20"
---

# PDF Settings - Rest PKI Core

## Marking settings

In the **Pdf** section:

* **MarkingPolicy** (v1.10.0, default: `WhenPossible`): the instance's PDF marking policy, which decides whether a PDF gets [validation marks](https://docs.lacunasoftware.com/en-us/articles/rest-pki/core/integration/pdf-marking) before its first signature. The values are `Never` (the original PDF is signed, without marks), `WhenPossible` (tries to add the marks and, if the submitted PDF already has signatures, silently signs the original) and `Always` (the marks are mandatory: a PDF submitted already signed fails with `PdfAlreadySigned`). It applies to organizations that don't set the **PDF marking policy** in the dashboard (the **Use system default** option). As an environment variable: `Pdf__MarkingPolicy`.