Seven Products, One Platform

SuTan Sign Products

Desktop signing, server-side signing with a PFX or an HSM on Windows and Linux, on-premises Aadhaar eSign and ERP Connect. Pick the one that matches who signs and where your certificate is kept.

COMPARE

Which Product Fits You?

Choose by who signs and where the signing key is kept

ProductWho SignsWhere the Key IsRuns OnBest For
Desktop & client-side
SuTan Sign DesktopA person, at their PCDSC USB token or PFX fileWindows 10 / 11Teams signing their own documents, one at a time or in folders
ERP ConnectA person, from the ERP screenTheir own DSC USB tokenWindows PC + your web ERPApprovals that must carry a named person's signature
Server-side · PFX
Server-Side PFX for WindowsYour ERP, automaticallyClass 2 Document Signer Certificate (PFX) on your serverWindows 64-bitInvoices, statements and letters in volume
Server-Side PFX for LinuxYour ERP, automaticallyClass 2 Document Signer Certificate (PFX) on your serverUbuntu 20.04+ / Debian, 64-bitThe same, on Linux servers
Server-side · HSM
Server-Side HSM for WindowsYour ERP, automaticallyInside your Utimaco or PKCS#11 HSMWindows 64-bitCompanies whose policy requires keys in an HSM
Server-Side HSM for LinuxYour ERP, automaticallyInside your Utimaco or PKCS#11 HSMLinux 64-bitThe same, on Linux servers
Aadhaar eSign
On-Premises Aadhaar eSignCustomers, vendors or staffIssued per signature by a CCA-licensed eSign provider after Aadhaar OTPYour serverAgreements and forms signed by people without a DSC
Microsoft Store
Key: DSC USB token or PFX on the signer's PC

SuTan Sign Desktop

A Windows app from the Microsoft Store for signing PDFs on your own computer: one document at a time, by template, or whole folders at once.

What You Get

  • Quick Sign, Template Sign and Bulk Folder Signing
  • Dynamic Bulk Signing that places the signature next to each page's content
  • Automated Bulk Signing of a watched folder with a PFX
  • ERP Connect (USB Token) for documents sent from your ERP
  • Signs offline once activated; auto-updates via the Microsoft Store

What You Need

  • Windows 10 or 11, 64-bit
  • A DSC USB token or a PFX certificate
  • A SuTan Sign licence with the signing modes you need
NEW · Client-Side
Key: the signer's own DSC USB token

ERP Connect

Client-side signing for documents that must carry a named person's signature. Your ERP creates the PDF, the signer clicks Sign in the ERP, and SuTan Sign Desktop opens on their PC to sign it with their USB token.

ERP creates the PDF User clicks Sign Desktop app opens Token PIN Signed PDF back in ERP

What You Get

  • Works from your ERP's web page, with no browser plug-in
  • If the app isn't installed, the user is sent to the Microsoft Store
  • Signature placed automatically, at a marker text, or at fixed positions
  • The licence sits with your ERP, so signer PCs need no activation
  • Licensed per signed document

What You Need

  • SuTan Sign Desktop on each signer's Windows PC
  • Each signer's DSC USB token
  • A small connector in your ERP; we give your developers the integration guide

ERP Connect is new. Talk to us about a pilot with your ERP.

On-Premises
Key: Class 2 Document Signer Certificate (PFX) on your server

Server-Side PFX for Windows

A signing engine that runs as a local service on your Windows server. Your ERP sends each PDF and gets the signed PDF back, signed with your company's Document Signer Certificate.

ERP SuTan engine on your server Signed PDF back to ERP

What You Get

  • Signs on behalf of the company, with no one at the keyboard
  • Several company certificates on one engine, chosen per document
  • Visible signature boxes on any page, one or many
  • Documents and the PFX never leave your server
  • Postman kit and integration guide for your developers
  • From Postman testing to live in 2 days

What You Need

  • A Windows 64-bit machine; the engine itself needs 1 vCPU and 1 GB RAM
  • A Class 2 Document Signer Certificate (PFX) from a CCA-licensed Certifying Authority
  • Internet access from the server to activate the licence

Earlier called the OP Signing Utility.

On-Premises
Key: Class 2 Document Signer Certificate (PFX) on your server

Server-Side PFX for Linux

The same signing engine as a native Linux binary. Run it as a systemd service next to your ERP and connect it exactly as you would the Windows engine.

ERP SuTan engine on your Linux server Signed PDF back to ERP

What You Get

  • Native binary, with no Java or other runtime to install
  • Runs as a systemd service
  • Several company certificates on one engine, chosen per document
  • Documents and the PFX never leave your server
  • Same Postman kit and integration guide as Windows

What You Need

  • Ubuntu 20.04+ or Debian, 64-bit; 1 vCPU and 1 GB RAM minimum
  • A Class 2 Document Signer Certificate (PFX) from a CCA-licensed Certifying Authority
  • Internet access from the server to activate the licence
Utimaco · PKCS#11
Key: inside your HSM, and it never leaves the device

Server-Side HSM for Windows

For companies that keep signing keys in a Hardware Security Module. The SuTan engine builds each signature and sends only the document's hash to your HSM, which performs the signing step.

ERP SuTan engine Your HSM signs the hash Signed PDF back to ERP

What You Get

  • Utimaco HSMs and other PKCS#11 HSMs
  • Several certificates in one HSM; the ERP picks one per document
  • Your administrator types the HSM PIN during setup; we never receive it
  • Guided setup that adds one signing profile at a time and tests it
  • Runs as a Windows service with its own Java runtime, nothing else to install
  • PFX and HSM signing on the same engine

What You Need

  • Your HSM, installed and configured by your team or your HSM vendor
  • The HSM vendor's PKCS#11 library, or the Utimaco JCE files
  • The public certificate chain for each signing key
  • A Windows 64-bit server that can reach the HSM

We confirm your HSM model in an acceptance test before go-live. Setting up the HSM itself stays with your team or HSM vendor.

Utimaco · PKCS#11
Key: inside your HSM, and it never leaves the device

Server-Side HSM for Linux

HSM signing for Linux servers. The engine and the HSM helper install as systemd services, and only the document's hash goes to your HSM.

ERP SuTan engine Your HSM signs the hash Signed PDF back to ERP

What You Get

  • Utimaco HSMs and other PKCS#11 HSMs
  • Several certificates in one HSM; the ERP picks one per document
  • HSM PIN kept in a file only the service account can read
  • Java runtime included in the setup package
  • PFX and HSM signing on the same engine

What You Need

  • Your HSM, installed and configured by your team or your HSM vendor
  • The HSM vendor's PKCS#11 library for Linux, or the Utimaco JCE files
  • The public certificate chain for each signing key
  • A Linux 64-bit server with systemd that can reach the HSM

We confirm your HSM model in an acceptance test before go-live.

On-Premises
Key: issued per signature by a CCA-licensed eSign provider

On-Premises Aadhaar eSign

Let customers, vendors and employees sign with an Aadhaar OTP, with no DSC token needed. The eSign app runs on your server, next to your ERP, and works through a CCA-licensed eSign Service Provider.

ERP SuTan eSign app on your server Signer enters Aadhaar OTP Signed PDF back to ERP

What You Get

  • The signer verifies with an OTP on their Aadhaar-linked mobile and gives consent on the eSign provider's page
  • Only the document hash and required details leave your server
  • Recognised under the Second Schedule of the IT Act, 2000
  • Test in UAT, then go live with the same app
  • Runs alongside the PFX or HSM engine
  • Billed per eSign document

What You Need

  • A server for the eSign app, with internet access
  • Signers with an Aadhaar number linked to a mobile number

Documents listed in the First Schedule of the IT Act, such as wills and powers of attorney, can't be signed electronically.

Not Sure Which One Fits?

Tell us who signs and where your certificate is kept. We'll recommend a product and set up a test.