Loading Singpass Root Signing Certificate
Last updated
Was this helpful?
Last updated
Was this helpful?
In order to verify if a Sign with Singpass signature is valid, see here.
Before that, the Singpass root signing certificate must be installed on your device. If you do not have the Singpass root signing certificate on your device, please follow the steps below.
For government agencies, this should already be automatically available on your GSIB. If it is not, please raise a ticket to AFM to push “GSSP_Acrobat Reader Digital Signature Fix_2.0” to the agency's GSIBs.
For the rest of the agencies, you may follow the steps below or approach your IT department to push the certificates so that it applies across your agency.
Go to GovTech CA Repository and download Singapore National Root CA - B1 Certificate.
In your folder that you have chosen, you should find the file RCA-B1.crt
Open Adobe PDF reader.
If you do not have this, you may download and install here.
Click "Acrobat Reader" on the top left.
Navigate to "Preferences"
Under Categories, find and click "Signatures".
Click "more" under Identities and Trusted Certificates.
Click on "Trusted Certificates"
Click Import
Under Contacts, click "Browse" and choose the certificate you have downloaded earlier. Click on "Singapore National Root CA - B1" that is loaded.
Under Certificates, click on Singapore National Root CA - B1 and then click Trust
Check "Use this certificate as a trusted root" with a tick and press OK
Click on Import
You should now be able to see Singapore National Root CA - B1 under your Trusted Certificates.
Enable certification revocation checking
This can be found under Preferences > Signatures > Verification
Still can't seem to verify after completing the steps?
From 13 Feb 2025, all new Singpass signing certificates are issued by the GovTech CA. Prior to this, Singpass App users would have been issued signing certificates by Assurity Trusted Solution Pte Ltd (ATS), GovTech's wholly-owned subsidiary and an Accredited CA under the Electronic Transactions Act (2010).
If you are unable to verify the document signature, the document may have been signed with the legacy ATS certificates. Please follow the same steps above and load the ATS root cert here.