Install AssinaJá Certificados

To sign in AssinaJá with the digital certificate you already have on your computer — the Portuguese Bar Association’s, for example — you need AssinaJá Certificados, which has two pieces: an app on your computer and an extension in your browser. This page explains what they are, why they are needed and how to install them.

What it is

Two pieces that work together:

Piece	What it does
The app	A small program installed on your computer. It finds your certificates, shows you a confirmation window before every signature, and signs.
The extension	An extension for Chrome, Edge or Firefox. It is the bridge between the AssinaJá signing page and the app.

On Windows, the app appears in the list of installed apps as AssinaJá Certificados. The extension has the same name in the browser’s store.

What it is for

One thing only: signing AssinaJá documents with a Local Digital Certificate — the digital certificate that is yours, installed in Windows or in the macOS Keychain, kept in a .p12 or .pfx file, or on a card connected to the computer.

You only need it if someone sends you a document to sign with Local Digital Certificate. To sign with Chave Móvel Digital or a drawn signature, you do not need to install anything.

Why it is needed

A browser on its own cannot use the certificates installed on your computer. This is a security decision by the browsers themselves: a web page has no access to the system’s certificates. That is why people who sign PDFs with the Bar Association certificate use Acrobat, not the browser.

The app solves this without opening the door to anything else:

• Your certificate’s key never leaves the computer. AssinaJá sends the app only the document’s digest (hash); the app signs that digest and returns the signature.
• The app never sees the document, nor addresses, nor your AssinaJá sign-in details — only the digest, the document name and the address of the site asking for the signature.
• The file password or card PIN is only asked for in a window of the app, never on the page.
• It only signs for AssinaJá. The app and the extension refuse requests from any other site.
• Nothing is signed without your confirmation. Before every signature a window of the app opens — Sign with your certificate — showing the address asking for the signature, the document name, the certificate and the issuer. The button selected by default is Cancel.

Read the window before pressing Sign

The confirmation window ends with:

Only sign if you asked for this signature on AssinaJá.

If the window appears when you did not ask for a signature, or shows a document you do not recognise, press Cancel.

What you need

• Google Chrome, Microsoft Edge or Mozilla Firefox.
• One of these systems:

System	Version	Certificates the app finds	Installation
Windows	10 or later, 64-bit	Those installed in Windows, those on cards, and .p12/.pfx files	For your user only, without an administrator password
macOS	14 (Sonoma) or later, Apple Silicon or Intel	Those in the Keychain, and .p12/.pfx files	For all users, with the administrator password
Linux	64-bit: Ubuntu 22.04, Debian 12, Fedora, RHEL 9 or later	.p12/.pfx files only	For all users, with sudo

Install on Windows

1. Download the installer

Open the Software page on the AssinaJá website and download the Windows installer. The file is called assinaja-webid-win-x64.msi.

2. Run the installer

1. Open your Downloads folder and double-click the .msi file.
2. Follow the installer through to the end.

You are not asked for an administrator password. The app is installed in your user folder, in %LOCALAPPDATA%\Programs\AssinaJa\WebId\, and registered with all three browsers — Chrome, Edge and Firefox — at once.

If a blue Windows screen appears

When you open the installer, Windows may show a blue screen titled Windows protected your PC. It is not an error, and it does not mean something is wrong with the file. It is Microsoft Defender SmartScreen saying it has not seen this file many times yet.

The AssinaJá installer is digitally signed in the name of the company that publishes it. Even so, SmartScreen warns until an installer has been downloaded by many people — it is a Microsoft rule for any program, signed or not, and the warning goes away over time.

To continue:

1. Press More info.
2. Check the Publisher line. It must read RMB - SISTEMAS DE INFORMAÇÃO LDA.
3. Press Run anyway. The installer opens normally.

If the Publisher reads «Unknown publisher», stop

If the Publisher line does not read RMB - SISTEMAS DE INFORMAÇÃO LDA, press Don’t run and delete the file. Download the installer again, only from the Software page on the AssinaJá website.

You can also check the signature before opening the file: right-click the .msi, choose Properties and open the Digital Signatures tab. The signer’s name is RMB - SISTEMAS DE INFORMAÇÃO LDA.

In a company, the IT department can allow the installer by the publisher of its digital signature, instead of allowing it file by file.

Install on macOS

1. Download the installer

On the Software page of the AssinaJá website, download the macOS installer. The file is called assinaja-webid-macos-universal.pkg and works on Macs with Apple Silicon and with Intel.

2. Open the installer

1. Open your Downloads folder and double-click the .pkg file.
2. macOS refuses to open it the first time: the installer is not registered with Apple yet. Close the warning.
3. Open System Settings, then Privacy & Security. Further down there is a line about assinaja-webid-macos-universal.pkg: press Open Anyway and confirm.
4. Follow the installer through to the end. You are asked for the Mac’s administrator password.

The app is installed in /Library/Application Support/AssinaJa/WebId/, for all users of the Mac, and registered with Chrome, Edge and Firefox.

Install on Linux

1. Download the package

On the Software page of the AssinaJá website, download the package for your distribution:

Distribution	File
Ubuntu, Debian	assinaja-webid-linux-x64.deb
Fedora, RHEL	assinaja-webid-linux-x64.rpm

2. Install the package

Open a terminal in the folder with the file and type the command for your distribution:

# Ubuntu, Debian
sudo apt install ./assinaja-webid-linux-x64.deb

# Fedora, RHEL
sudo dnf install ./assinaja-webid-linux-x64.rpm

The package manager also installs what the app needs: OpenSSL and zenity, which draws the confirmation and password windows. The app is installed in /opt/assinaja/webid/, for all users, and registered with Chrome, Edge and Firefox.

File certificates only

On Linux, the app only uses certificates kept in a .p12 or .pfx file. Cards — the Citizen Card, tokens — do not work on Linux.

Browsers installed as Snap or Flatpak

Use Chrome, Edge or Firefox installed from each one’s official packages. The Snap or Flatpak versions — the Firefox that comes with Ubuntu is a Snap — may not find the app.

Connect the extension, on any system

1. Install the extension in your browser

Install the AssinaJá Certificados extension from your browser’s store:

Browser	Where
Google Chrome	Chrome Web Store
Microsoft Edge	Microsoft Edge Add-ons
Mozilla Firefox	Firefox Add-ons

In Firefox, make sure the extension is allowed to run on the AssinaJá sites. If it is not, the extension icon says:

The extension is not allowed to run on the AssinaJá sites.

Press Allow on the AssinaJá sites.

2. Check that everything is connected

Click the AssinaJá Certificados extension icon in the browser toolbar. You should see:

AssinaJá application connected

with the app’s Version below it. If you see “The AssinaJá application is not installed”, go back to installing the app for your system and then press Check connection.

3. Go back to the document

If you were in the middle of signing, go back to the document page and press Search again. The Certificate step now lists the certificates installed on your computer — see Sign with a Local Digital Certificate.

Update

When a new version comes out, download the new installer and install it over the old one, the same way: it replaces the installed version.

If the installed version is too old, the signing wizard tells you:

The AssinaJá app needs to be updated

Uninstall

• Windows: open Settings, then Apps, find AssinaJá Certificados and choose Uninstall.
• macOS: in a terminal, sudo "/Library/Application Support/AssinaJa/WebId/uninstall.sh".
• Linux: sudo apt remove assinaja-certificados (Ubuntu, Debian) or sudo dnf remove assinaja-certificados (Fedora, RHEL).

This removes the app and its registration with the browsers. The extension is removed separately, in the browser itself.

If it does not work

The signing wizard always says what is missing. The messages you may see in the Certificate step:

Message	What to do
The AssinaJá extension is missing from this browser	Install the extension (Connect the extension) and press Search again. In Firefox, also check the permission on the AssinaJá sites.
The AssinaJá app is missing from this computer	The extension is installed but the app is not. Install the app for your system and press Search again.
The AssinaJá app needs to be updated	Install the latest version and press Search again.
Could not talk to the AssinaJá app	Close and reopen the browser, then press Search again. If it keeps happening, reinstall the app.
The AssinaJá app does not recognise this address	The app only signs for AssinaJá addresses. Open the document from the link in the invitation email.
This page is not on a secure connection	The same: open the document from the invitation link.
Signing with a digital certificate is not possible on this device	You are on a phone or tablet. Open the document on the computer where your certificate is.

Related

• Sign with a Local Digital Certificate
• Signature levels