> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Adobe Acrobat Desktop for digital signing

> Guided steps to set up Adobe Acrobat Desktop for digital signing using keys stored in the Vectera Plus HSM.

This section explains how to create a key on the Vectera Plus that can be used for digital signing in Adobe Acrobat Desktop.

## Create a signing certificate by using FXCLI

Perform the following steps to create a signing certificate on the HSM:

<Steps>
  <Step>
    Open the FXCLI prompt by running the `fxcli-hsm` command in a terminal.
  </Step>

  <Step>
    Connect your laptop to the HSM by using the USB port on the front, and run the following command:

    ```shell title="FXCLI" expandable lines wrap theme={null}
      connect usb
    ```
  </Step>

  <Step>
    Run the following command to log in with both default Admin identities. When prompted for the username and password, enter them. You must run this command twice.

    ```shell title="FXCLI" expandable lines wrap theme={null}
      login user
    ```
  </Step>

  <Step>
    Generate an RSA key pair and store it in a key slot on the HSM. The slot must be within the slot range of the identity you created. Remember this slot because another command in this section refers to it.

    ```shell title="FXCLI" expandable lines wrap theme={null}
      generate --algo RSA --bits 2048 --usage sign,verify --name AdobeKeyPair --slot 10

    ```
  </Step>

  <Step>
    Create a signing certificate and designate a slot to save the certificate within the slot range of the identity you created. Remember this slot because another command in this section refers to it.

    ```shell title="FXCLI" expandable lines wrap theme={null}
      x509 sign --private-slot AdobeKeyPair --key-usage DigitalSignature --dn 'O=FFuturex\CN=Integrations' --save-slot 11

    ```
  </Step>

  <Step>
    Run the following commands to set a PKCS #11 key label and link the private key to the certificate:

    ```shell title="FXCLI" expandable lines wrap theme={null}
      keytable extdata --slot 10 --p11-attr label --p11-value "Integrations Private"
      keytable extdata --slot 10 --p11-attr id --p11-value "IntegrationsPki"
    ```
  </Step>

  <Step>
    Run the following commands to set a PKCS #11 certificate label and link the certificate to the private key:

    ```shell title="FXCLI" expandable lines wrap theme={null}
      keytable extdata --slot 11 --p11-attr label --p11-value "Integrations Cert"
      keytable extdata --slot 11 --p11-attr id --p11-value "IntegrationsPki"
    ```
  </Step>
</Steps>

## Configure the Futurex PKCS #11 library in Adobe Acrobat Desktop

This section provides instructions on attaching the Futurex PKCS #11 library to Adobe Acrobat Desktop.

<Steps>
  <Step>
    Open Adobe Acrobat as Administrator.
  </Step>

  <Step>
    Select **Menu** in the upper-left corner and select **\[ Preferences ]**.
  </Step>

  <Step>
    Inside **Preferences**, select **Signatures** in the left-side menu.
  </Step>

  <Step>
    Under I **dentities & Trusted Certificates**, select **\[ More ]**.
  </Step>

  <Step>
    In the **Digital ID and Trusted Certificate Settings** window, select **PKCS #11 Modules and Tokens** in the left-hand menu. Then, select **\[ Attach Module ]**.
  </Step>

  <Step>
    Browse for the `fxpkcs11.dll` file and select it.
  </Step>

  <Step>
    After you select the `fxpkcs11.dll` file, expand  **PKCS #11 Modules and Tokens** and select **FxPKCS11** underneath it in the left-side menu.
  </Step>

  <Step>
    Select **\[ Login ]** and enter the password for the identity you configured for this integration. Then, select **\[ OK ]**.
  </Step>

  <Step>
    After you log in, you can expand the **FxPKCS11** section in the left-hand menu. Select **Futurex** in that section.

    <Check>
      In the Futurex menu, you should see the Signing Certificate you created earlier by using FXCLI displayed as a Digital ID.
    </Check>
  </Step>

  <Step>
    Close the **Digital ID and Trusted Certificate Settings** window.
  </Step>
</Steps>

## Sign a PDF by using your signing certificate

Perform the following steps to sign a PDF by using your signing certificate:

<Steps>
  <Step>
    Open a PDF document you want to sign.
  </Step>

  <Step>
    In the left-hand **Tools** menu, select **\[ Use a Certificate ]**.
  </Step>

  <Step>
    Select **\[ Digitally Sign ]**.
  </Step>

  <Step>
    Use your mouse to click and drag to draw the area where you want the signature to appear.
  </Step>

  <Step>
    In the **Sign with a Digital ID** window, select your signing certificate and select **\[ Continue ]**.
  </Step>

  <Step>
    Modify the appearance as needed and select **\[ Sign ]**.
  </Step>

  <Step>
    Select where you want to save the signed document and select **\[ Save ]**.

    <Check>
      The document now shows a digital signature and a message stating that Signed and all signatures are valid.
    </Check>
  </Step>

  <Step>
    To view more information about the signature, double-click your digital signature and select **\[ Signature Properties ]**. Here, you can view information about the validity and display the certificate.
  </Step>
</Steps>