Signing a PDF on a Mac with a digital certificate used to be a headache. Not anymore. With AutoFirma, the tool developed by the FNMT (Fábrica Nacional de Moneda y Timbre), you can sign any PDF in seconds, legally and without printing a single page. This guide is based on real experience and official sources, not recycled filler.
First things first: get your digital certificate into the macOS Keychain
AutoFirma won’t detect your certificate if it’s only living inside Chrome or Firefox. That’s the #1 mistake people make. You need to export it as a .p12 file and import it into the Keychain Access app on your Mac.
If you got your certificate from the FNMT, you already downloaded a .p12 file at some point. That file is protected by a password you set. Don’t lose it. You’ll need it every time you sign. Import it into the System keychain, not the Login keychain. This matters, and I’ll explain why later.
How do you import it? Open Keychain Access (Cmd + Space, type «Keychain»), drag the .p12 file into the System keychain, and enter the password. Done. If you skip this step, you’ll waste an hour wondering why AutoFirma says «no certificate found.»
Downloading AutoFirma on macOS without triggering Gatekeeper
Only download AutoFirma from the official Electronic Signature Portal of the Government of Spain (sede.administracion.gob.es). Any other source is a gamble with malware.
Grab the .dmg for macOS, open it, and drag AutoFirma to your Applications folder. When you try to open it the first time, macOS will block it with the classic «developer cannot be verified» warning. Don’t panic. Right-click (or Ctrl + click) the app and select Open. Then click «Open» again in the dialog. From then on, it launches normally.
Configuring AutoFirma to talk to the Keychain
When AutoFirma starts, it may ask for accessibility permissions. Grant them. Without these, the app can’t communicate with the Keychain, and your certificate stays invisible.
Inside AutoFirma’s preferences, make sure the certificate store is set to the System Keychain. If your certificate is in the Login keychain, AutoFirma often won’t see it. This is a known quirk. Move it or re-import it into System.
Another tip: if the certificate doesn’t appear, restart AutoFirma or reboot your Mac. macOS sometimes caches permissions and a fresh start clears the blockage.
Signing a PDF with AutoFirma: the actual process
Open AutoFirma and click «Sign a File». Select your PDF. The app will analyze it and offer signature formats. Choose PAdES, which is the standard for advanced electronic signatures on PDFs in Europe. It’s the one public administrations accept.
Next, pick your certificate from the dropdown. Enter the password for your certificate’s private key (the same one from the .p12 export). Click Sign. In a few seconds, AutoFirma generates a new file, usually named original_signed.pdf.
Open that signed PDF in Preview or Adobe Acrobat Reader. You should see a stamp or a message confirming a valid digital signature. If you don’t, something went wrong.
Common errors and how to fix them fast
Error: certificate not found. Restart AutoFirma. If that fails, reboot. Also verify the certificate is in the System keychain, not Login.
Error: wrong password. If you enter it incorrectly too many times, the certificate locks. Make sure you’re using the .p12 password, not your Mac login password or your FNMT portal password. They’re different.
Error: signature not valid. This usually means the certificate expired or the PDF was modified after signing. Check the certificate’s validity dates in Keychain Access.
Why AutoFirma on Mac is worth it (and where it falls short)
AutoFirma is free, official, and works. It signs PDFs with legal validity for Spanish administrative procedures. That’s a big deal if you deal with tax agencies, social security, or public contracts.
But let’s be honest: the interface looks like it was designed in 2013. It’s not pretty. And on Mac, the accessibility permissions and keychain quirks make it clunkier than on Windows. Still, it’s the only officially supported option from the Spanish government for macOS.
Alternatives? You could use Adobe Acrobat’s certificate signing, but it’s paid. Or you could sign through the FNMT’s web portal directly, though that’s slower for batch signing.
Pro tips for signing multiple PDFs without losing your mind
If you sign often, keep your certificate in the System keychain and set AutoFirma to remember the certificate store. You’ll still need to enter the password each time, but that’s a security feature, not a bug.
For batch signing, AutoFirma has a command-line interface. It’s not user-friendly, but if you’re technical, you can automate it. Just don’t expect a GUI for that.
And always verify the signed PDF opens correctly. A corrupted signature is worse than no signature.
Final word: don’t overcomplicate it
Signing a PDF with a digital certificate on Mac using AutoFirma is a five-minute job once your certificate is in the Keychain. The tricky part is the setup. Get that right, and you’ll never look back.
If something breaks, the FNMT help site and Apple support forums have real answers. Don’t trust random YouTube tutorials from 2019. The process has changed slightly with macOS updates.
