Summary

Laserfiche relies on CryptoAPI and cannot sign documents with certificates created using CNG. When you open the Sign Document dialog box and try to select a signing certificate, the Select Certificate dialog box does not display any such certificates.

Cause

Windows Server 2008-based certificate authorities and Windows Server 2012-based certificate authorities include certificate templates which feature cryptographic algorithms that are not supported by Laserfiche 9.0.x.

Workaround

If you are using Active Directory Certificate Services in Windows Server 2008, when creating a certificate template, set the minimum supported CA to Windows 2003 Server

If you are using Active Directory Certificate Services in Windows Server 2012, when creating a certificate template, set the Provider Category to Legacy Cryptographic Service Provider.