System Requirements
Apr 5, 2026 · 482 views
OneSigner is a native Windows application with two parts: a background Windows service (REST API, folder watch, eSign web portal) and a desktop configuration app. Both are shipped as a self-contained build — no separate .NET installation is required.
Minimum Requirements
- Operating System: Windows 10 / Windows Server 2016 or later (64-bit). Windows 11 and Server 2022/2025 fully supported.
- Runtime: .NET 8.0 — bundled in the self-contained build, nothing to install.
- RAM: 512 MB minimum, 2 GB recommended for parallel signing workloads.
- Disk: ~200 MB for the application, plus space for your documents and the eSign portal database.
- Network: one TCP port for the REST API and web portal (default
9440, configurable). - USB port: for your hardware token (not required for the machine running OneSignTool or calling the API remotely).
Supported USB Tokens
| Token | Driver | Status |
|---|---|---|
| SafeNet eToken 5110/5300 | SafeNet Authentication Client | Fully supported |
| YubiKey 4/5 Series (PIV) | YubiKey Smart Card Minidriver | Fully supported, incl. direct PIV signing (RSA 2048, ECDSA P-256/P-384) |
| ePass2003 | Vendor CSP driver | Fully supported |
| Any PKCS#11 / Windows CSP or KSP token | Vendor minidriver | Compatible |
If your certificate appears in certmgr.msc → Personal → Certificates with a private-key icon, OneSigner can use it.
Supported Certificate Authorities
- GlobalSign, DigiCert, Sectigo, Entrust, SSL.com
- Regional and national CAs that issue certificates on USB hardware tokens
- Both document-signing and code-signing certificates (standard and EV)
Network Requirements
- Outbound HTTPS to
onesign.sgfor license activation and the daily license revocation (CRL) check. A 7-day grace period covers temporary outages. - Timestamp servers (e.g.
http://timestamp.digicert.com,http://ts.ssl.com) for code signing and long-term PDF validation. - SMTP (optional) if you use the eSign portal to email signing links to recipients.
- Cloudflare Tunnel (optional) to publish your API or eSign portal on a public HTTPS URL without opening firewall ports.
Browser Requirements (eSign portal & visual signing)
The web portal works in any modern browser (Chrome, Edge, Firefox, Safari). Signing with a personal USB token in the browser additionally requires the free OneSignerBridge helper installed on the signer's Windows machine — see Visual Signing with OneSignerBridge.
Next step: the Installation Guide.