Digital Signatures

A digital signature is an electronic method of authenticating a document. The authentication is based on an identity certificate. These certificates come in two forms: self-generated and issued by a certificate authority. Validating the signature will provide the identity and authority behind the certificate. Self-generated signatures are more akin to hand written signatures in that, in order to accept a hand written signature, you must trust the person is who they say they are and that they actually signed the document. A certificate authority requires the signer prove who they are before the digital signature is issued.

A valid digital signature issued by a certificate authority:

  • Verifies the signer is who they represent themselves to be, because the signer has had to prove their identity to a certificate authority to obtain the digital signature
  • Confirms the signature was applied to the document and not copied from another document because the signature file is cryptographically bound to the document
  • Ensures the document was not altered after it was signed

In 1997, the State of Washington enacted the Electronic Authentication Act (EAA) "to facilitate commerce by means of reliable electronic messages." This landmark act, one of the first of its kind in the United States, is designed to enhance economic development and trade through the use of digital signatures in electronic commerce. http://www.sos.wa.gov/ea/ea.aspx

Kittitas County began digitally signing documents in September 2010 (Resolution 2010-093).

Washington State Digital signature facts (RCW 19.34)

  • The Secretary of State licenses and monitors certification authorities (CA) who act on behalf of Washington State to issue digital certificates (signatures) (RCW 19.34.030).
  • Digital signatures may only be issued by a CA after sufficient proof of identification is provided (RCW 19.34.210).
  • Digital signatures are encrypted and require password authentication for use.
  • A digital signature is as legal as a written signature (RCW 19.34.300)
  • A document signed with an electronic signature is valid, enforceable, and effective as if it had been written on paper (RCW 19.34.320)
  • A digitally signed document is an original of the document (RCW 19.34.330)

A digital signature of a Kittitas County employee or elected official will appear similar to this:

Digital signature example

Validating a Kittitas County digital signature in Adobe Acrobat Reader

  1. Double click the signature
  2. Click the Signature Properties button
  3. Click the Signer tab
  4. Click the Show Certificate button

The signature is valid if:

  1. The certificate was issued by Washington State CA, State of Washington PKI
  2. The document was signed between the certificate's valid dates

Trusting Kittitas County digital signatures in Adobe Acrobat Reader

Adobe Acrobat Reader maintains a list of your trusted identities. These are the digital signature certificates you have accepted as trustworthy. Washington State certificates are not in your trusted identity by default. If you have not previously added a Washington State certificate, you might see a warning the signature validity is unknown. Whether or not you choose to add Washington State certificates to your trusted identity list, a digital signature issued by Washington State or its licensee is a valid legal signature (RCW 19.34). To add a certificate to your trusted identities in Adobe Acrobat Reader:

  1. Click the signature
  2. Click the Signature Properties button
  3. Click the Signer tab
  4. Click the Show Certificate button
  5. In the left column, click on the Washington State CA (to trust the authority and by extension all signatures issued by the certificate authority; or click the individual to trust only the individual)
  6. Click the Trust tab
  7. Click the Add to Trusted Identities button
  8. Click the OK button in the Acrobat Security window
  9. Click the OK button in the Import Contact Settings window
  10. Click the OK button in the Certificate Viewer window
  11. Click the Close button in the Signature Properties window
  12. Click the signature and the digital signature will be validated

Accepting Digital Signatures

Unless otherwise provided by law, contract, or policy, Kittitas County may accept digital signatures on electronic documents if the signature can be validated as certified by a Washington State licensed certification authority.

References and Resources