Configure EPKI Profile to RSASSA-PSS Signing Algorithm

Jan 13, 2026

Configure EPKI Profile to RSASSA-PSS Signing Algorithm

For New Customers

For Existing Customers

1. Log in to your GCC account and go to Enterprise PKI tab. 
   
   

2. Under My Profiles, click the Profile Configuration option.
   
   

3. Select the correct Profile that you'd like to configure and then click the Next button.

   

4. In the Profile Configuration window, select the RSASSA-PSS (sha256) in the Signature Algorithm section and click Next.

   IMPORTANT: The default IntermediateCA is set to Non – S/MIME Use Cases, like for authentication access. Email Domain validation must be set to We use S/MIME (see step 6) to activate BR Compliant S/MIME Profile. Another option is to create an additional profile and set Profile applied for to BR Compliant S/MIME Profile (refer to Create New Profile in EPKI, step 4).

   
   

5. Review the updates and click Next to complete the process. 

   

6. You will be redirected to the window confirming the process is successful. Once this has been configured, you can issue certificates that will include RSASSA-PSS as the signing algorithm. You may follow the normal issuance process.