Create Content Credentials.
Use local test certificates for learning and prototypes, or import organization-controlled signing material for a managed workflow.
- A successful test signature proves the workflow functions. It does not create public ecosystem trust.
- Generated test certificateFor demos, education and internal validation.
- Imported signing materialFor controlled tests with supported P12 or PFX files.
- Managed production designFor enterprise key, policy and audit requirements.
Prepare, describe, sign and verify
Keep the declaration, certificate and resulting report together as one reviewable workflow.
- Choose mediaSelect a supported image or document.
- Select identity materialGenerate a test certificate or import supported material.
- Declare and signAdd the available provenance information and create the credential.
- Verify the outputInspect integrity, signature and trust-chain results.
Testing and production are different trust models
The cryptographic operation may be similar; governance and recognition are not.
Test signing
- Fast setup for demonstrations
- Useful for development and training
- Expected to appear as untrusted publicly
- Not evidence of a recognized organization
Production signing
- Organization-controlled identity process
- Protected private keys
- Certificate lifecycle and revocation
- Trust policy and operational auditability
Treat signing keys as production credentials
Do not copy a test workflow into production without an explicit key-management and certificate policy.
- Access
Limit who can sign
Use least privilege and separate human, service and administrative roles.
- Storage
Protect private keys
Prefer managed or hardware-backed storage for production material.
- Lifecycle
Plan rotation and revocation
Document expiry, compromise response and certificate replacement.
Verify how external validators will present the result
Always test the signed output in the intended distribution environment. A valid signature, a recognized certificate chain and a trusted organizational identity are related but distinct results.
Certificates, trust and enterprise controls
Move from local experimentation to a documented organizational signing model.
Sign a test file, then verify it.
Start locally with a test certificate, then plan production with ProvSeal Enterprise.