Where can I review the Certificate Policy Statement for DocumentSign Digital IDs?
8. Why does my private key associated with my DocumentSign Digital ID need to be stored on cryptographic hardware? The Adobe CDS Certificate Policy highlights the need to ensure the security of the CDS program by ensuring all digital IDs are created on FIPS compliant Cryptographic Hardware. This maintains the ‘singularity’ of the Digital ID such that it cannot be duplicated, and therefore preserves non repudiation capabilities of the solution. The only exception to this are Test Certificates which have a separate Test OID and therefore can be created outside of a hardware module.
