Choosing a product
Start from what your application has to do. Each product links to its quick reference: install, configuration, core operations, errors and samples on one page.
Main products
| If your application needs to… | Use |
|---|---|
| Work with the user's certificates in the browser: list them, read them, sign with them on a web page | Web PKI |
| Sign, validate and timestamp documents through a REST API, as a cloud service or on its own instance | Rest PKI Core |
| Sign on its own Windows or Linux servers, from a language other than .NET (Java, PHP, Python, Node.js, Ruby…) | PKI Express |
| Sign, validate and handle certificates inside a .NET application | PKI SDK |
| Send documents to people and collect their signatures, with a workflow | Signer |
| Issue certificates: run its own certification authorities or a whole PKI | Amplia |
Already integrated with Rest PKI at pki.rest? It is a legacy product that still receives bug and security fixes; see its quick reference (legacy). For a new cloud integration, use Rest PKI Core.
Common combinations
- Signatures on a web page with the user's certificate: Web PKI does the part that must run in the browser, and a server-side product (Rest PKI Core, PKI SDK or PKI Express) does the rest. The web signatures article in the PKI guide explains the approaches.
- Signatures with a key kept on the server: no browser step. In .NET, the PKI guide recommends PKI SDK; see server signatures.
- Certificate login: Web PKI in the browser and a server-side product to check the certificate; see certificate authentication.
Other products
| Product | What it does |
|---|---|
| Amplia Reg | Registration authority for Amplia: confirms who the holder is before a certificate is issued |
| PSC | Stores and manages cloud certificates, together with Amplia |
| TSA | Timestamp server (RFC 3161) |
| GrantID | Single sign-on and multiple authentication factors for your applications |
| Bulk Signer | On-premises service that signs files in bulk |
| Scanner | Adds document scanning to a web application |
| Digiploma | Issues, registers and publishes digital diplomas following Portaria MEC 554/2019 |
| TrustBridge | Remote signatures with ICP-Brasil certificates held by people, on smart cards or USB tokens |
To hand these docs to an AI coding agent, see Using these docs with AI agents.