---
title: "Signing PDFs with PAdES levels | Nutrient Java SDK"
canonical_url: "https://www.nutrient.io/guides/java/editor/sign-pdf-with-pades-level/"
md_url: "https://www.nutrient.io/guides/java/editor/sign-pdf-with-pades-level.md"
last_updated: "2026-08-21T00:00:00.000Z"
description: "How to sign PDF documents with PAdES baseline levels using Nutrient Java SDK."
---

# Signing PDFs with PAdES levels

A PAdES (PDF Advanced Electronic Signatures) baseline level determines how much validation material a signature carries, which in turn determines how long it stays verifiable. Higher levels embed timestamps and, eventually, revocation data so the signature can be validated long after the signing certificate expires. This guide shows how to select a baseline level and how to choose the signature container format.

Common use cases include:

- Producing PAdES B-T signatures with a trusted timestamp for legal documents

- Meeting regulatory requirements for long-term validation and archival

- Choosing between the PAdES and classic CMS container formats

[Download sample](https://www.nutrient.io/downloads/samples/java/sign-pdf-with-pades-level.zip)

## How Nutrient helps

Nutrient Java SDK handles the PAdES baseline levels and container formats behind a single property each. The SDK handles:

- Building the CMS/PKCS#7 signature container to the selected baseline profile

- Requesting and embedding RFC 3161 timestamps for B-T and above

- Embedding validation material for the long-term levels

- Writing the signature into the PDF using an incremental update

## Baseline levels

The `SignatureLevel` enumeration selects the target profile:

- `PadesBaselineB` — A basic signature. This is the default.

- `PadesBaselineT` — Adds a trusted timestamp. Requires a configured timestamp.

- `PadesBaselineLT` — Adds long-term validation material (certificates and revocation data). Requires the PAdES format and network access to revocation services.

- `PadesBaselineLTA` — Adds a document timestamp on top of B-LT for archival.

## Complete implementation

This example produces a PAdES B-T signature and a classic CMS signature:

```java

package io.nutrient.Sample;

import io.nutrient.sdk.*;
import io.nutrient.sdk.enums.*;
import io.nutrient.sdk.signing.*;

public class DigitalSignatures {

```

Create the `main` method as the sample entry point:

```java

    public static void main(String[] args) {

```

## Producing a PAdES B-T signature

Set `setLevel(SignatureLevel.PadesBaselineT)` and configure a timestamp to produce a B-T signature.

In this sample:

- `Document.open("input.pdf")` opens the PDF before signing.

- `setLevel(SignatureLevel.PadesBaselineT)` selects the B-T baseline profile.

- `TimestampConfiguration` sets the timestamp authority (TSA) endpoint, which B-T requires.

- `sign(document, outputPath, options)` applies the timestamped signature.

The timestamp proves the signature existed at a specific point in time, even after the certificate expires:

```java

        try (Signature signer = new Signature();
             Document document = Document.open("input.pdf")) {
            DigitalSignatureOptions options = new DigitalSignatureOptions();
            options.setCertificatePath("certificate.pfx");
            options.setCertificatePassword("Nutrient answers all your document needs");
            options.setSignerName("Legal Department");
            options.setReason("Contract Execution");
            options.setLevel(SignatureLevel.PadesBaselineT);

            TimestampConfiguration timestamp = new TimestampConfiguration();
            timestamp.setServerUrl("http://timestamp.digicert.com");
            options.setTimestamp(timestamp);

            signer.sign(document, "output_pades_t.pdf", options);
        } catch (Exception e) {
            System.err.println("Error creating PAdES B-T signature: " + e.getMessage());
        }

```

## Choosing the container format

The `SignatureFormat` enumeration selects the signature container:

- `Pades` — The PAdES profile (`ETSI.CAdES.detached`). This is the default and the one the baseline levels build on.

- `Cms` — The classic CMS container (`adbe.pkcs7.detached`) for compatibility with tools that expect the legacy format.

Set `setFormat(SignatureFormat.Cms)` to produce a classic CMS signature.

In this sample:

- `Document.open("input.pdf")` opens the PDF before signing.

- `setFormat(SignatureFormat.Cms)` selects the classic CMS container.

- `sign(document, outputPath, options)` applies the signature.

```java

        try (Signature signer = new Signature();
             Document document = Document.open("input.pdf")) {
            DigitalSignatureOptions options = new DigitalSignatureOptions();
            options.setCertificatePath("certificate.pfx");
            options.setCertificatePassword("Nutrient answers all your document needs");
            options.setSignerName("Legal Department");
            options.setReason("Contract Execution");
            options.setFormat(SignatureFormat.Cms);

            signer.sign(document, "output_signed_cms.pdf", options);
        } catch (Exception e) {
            System.err.println("Error creating CMS signature: " + e.getMessage());
        }
    }
}

```

## Conclusion

Use this workflow to control the baseline level and format of a signature:

1. Open the document using try-with-resources for automatic resource cleanup.

2. Configure `DigitalSignatureOptions` with certificate credentials and signing metadata.

3. Select the baseline profile with `setLevel()` and the `SignatureLevel` enumeration.

4. Configure a `TimestampConfiguration` for B-T and above — these levels require a trusted timestamp.

5. Use `PadesBaselineLT` or `PadesBaselineLTA` when you need long-term validation, keeping in mind these levels require the PAdES format and network access to revocation services.

6. Select the container format with `setFormat()` and the `SignatureFormat` enumeration.

7. Use `SignatureFormat.Cms` only for compatibility with tools that expect the legacy `adbe.pkcs7.detached` container; otherwise, keep the default PAdES format.

For related signing workflows, refer to the [Java SDK guides](https://www.nutrient.io/guides/java.md).
---

## Related pages

- [Nutrient Java SDK editor guides](/guides/java/editor.md)
- [Adding annotations to a PDF document](/guides/java/editor/add-annotations-to-pdf.md)
- [Adding a custom page to a PDF document](/guides/java/editor/add-custom-page-to-pdf.md)
- [Adding interactive form fields to a PDF document](/guides/java/editor/add-form-fields-to-pdf.md)
- [Adding free text annotations to a PDF document](/guides/java/editor/add-freetext-annotations-to-pdf.md)
- [Adding invisible digital signatures to a PDF document](/guides/java/editor/add-invisible-signature-to-pdf.md)
- [Adding link annotations to a PDF document](/guides/java/editor/add-link-annotations-to-pdf.md)
- [Adding redaction annotations to a PDF document](/guides/java/editor/add-redaction-annotations-to-pdf.md)
- [Adding shape annotations to a PDF document](/guides/java/editor/add-shape-annotations-to-pdf.md)
- [Adding stamp annotations to a PDF document](/guides/java/editor/add-stamp-annotations-to-pdf.md)
- [Adding sticky note annotations to a PDF document](/guides/java/editor/add-sticky-note-annotations-to-pdf.md)
- [Adding text markup annotations to a PDF document](/guides/java/editor/add-text-markup-annotations-to-pdf.md)
- [Adding visible digital signatures to a PDF document](/guides/java/editor/add-visible-signature-to-pdf.md)
- [Advanced digital signature workflows](/guides/java/editor/advanced-digital-signatures.md)
- [Certifying PDF documents](/guides/java/editor/certify-a-pdf-document.md)
- [Deskewing PDF pages](/guides/java/editor/deskew-pdf-page.md)
- [Detecting and adding form fields to a PDF document](/guides/java/editor/detect-and-add-form-fields.md)
- [Editing PDF form fields](/guides/java/editor/editing-pdf-form-fields.md)
- [Editing PDF metadata with Nutrient Java SDK](/guides/java/editor/editing-pdf-metadata.md)
- [Filling PDF form fields](/guides/java/editor/fill-pdf-form.md)
- [Managing PDF page order](/guides/java/editor/manage-pdf-page-order.md)
- [Merging PDFs](/guides/java/editor/merge-pdf-into-other-pdf.md)