Skip to main content
Version: 2023 R3

Sign an attachment

Action used to apply digital signatures to the attachments of the workflow instance.

The action configuration window has three tabs: Signature, File, and Result.


The tab allows you to indicate the path to the file that is the certificate (digital signature) and the password for this certificate in case such Signature is executed automatically by the server.

Sign an attachment

Select a digital certificate file with the Load button and provide the password in the PIN field.


The tab is available if the action is triggered outside the Attachment menu and allows you to define which attachments are to be processed.


1. Category

This option allows you to specify a category for the processed files:

  • All – all files that are attached to the workflow instance will be selected,
  • Dynamic – the category can be created dynamically (using Variables editor) or typed in manually. The category should have the following format: ID#Name or ID,
  • None – files not assigned to any category are selected.

2. Convert

The field allows you to specify which attachments are to be processed (signed). These can be all attachments, only the oldest attachment or only the newest attachment.

3. Regular expression

Search for files to process based on a regular expression. When creating such an expression, you can use the Creator tool run with a separate button available below this field. The system will process attachments whose names match the defined RegEx format.

To select right attachments, the regular expression usually needs to follow one of the general formulas presented below:
File1 or File2, example: (criterion1|criterion2) File1 and not File2, example: ^(criterion1|(?!criterion2))

4. SQL query

The field allows for specifying source files based on an SQL query. The query should return a list of attachment IDs from the WFDataAttachmets table.
If a query returns more than one ID, only the first-on-the-list attachment is processed.

5. Variables editor

Dynamically generated tree containing all variables that may be used in the current location of Designer Studio. Information on how to use variables in WEBCON BPS, as well as a list of variables can be found here.


The tab allows you to specify the properties given to the file after it is processed (signed). By default, the signed file will have the same properties (Name, Description, and Category) as the source file.
In practice, when an attachment is processed by the action, a new version of that attachment is created and it replaces the old one. The new signed attachment can have a different name, description and it can be assigned to a different or new, dynamic category.