EGKits ETA Signing Agent
On-premises ETA e-signature companion
Securely connect EGKits E-Invoices with local USB security tokens (Egypt Trust / SafeNet) for ETA CAdES-BES signing when the SaaS backend cannot access the token.
At a glance
Publisher: IDSYSEG / EGKits
Windows 10 / Windows 11 / Windows Server 2016+
MSI
.NET runtime included (self-contained; x86 recommended for USB tokens)
What this tool does
Securely connect EGKits E-Invoices with local USB security tokens (Egypt Trust / SafeNet) for ETA CAdES-BES signing when the SaaS backend cannot access the token.
Compatibility
.NET runtime included (self-contained; x86 recommended for USB tokens)
Key features
Polls EGKits for invoices awaiting signature and completes ETA submission
Local loopback signer bridge for client-side signature mode
Client workstation (tray) and server (Windows service) install modes
PKCS#11 silent PIN login to avoid repeated token dialogs
Several companies' tokens on one computer or USB hub: each invoice is signed on its issuer's own token
Daily rolling logs under ProgramData
System requirements
Windows 10, Windows 11, or Windows Server 2016 or later
USB tax token plugged in with vendor middleware installed (Egypt Trust / SafeNet / ePass2003)
Signing certificate visible in certmgr (Personal store)
EGKits service account with Sign Invoices permission (no MFA)
Network access to the EGKits API base URL
Local Administrator rights to install the MSI (per-machine)
Installation
Before you install
Install the token middleware so the certificate appears in Personal Certificates.
Create or confirm a dedicated EGKits service account with Sign Invoices permission.
Decide client (workstation tray) vs server (Windows service) deployment.
Install
Download the official MSI. Prefer x86 when the token CSP is 32-bit (ePass2003). Use x64 or ARM64 only when the middleware ships a matching provider.
Client: run the MSI (or msiexec /i EGKits.EtaSigningAgent-{version}-win-x86.msi).
Server: msiexec /i ... INSTALLMODE=server
Silent: append /qn /norestart. Accept the installation terms in the wizard when installing interactively.
After install
Edit appsettings.json under Program Files\EGKits\EtaSigningAgent (or Program Files (x86) for the x86 package) as administrator.
Set BackendBaseUrl, Tenant, credentials, certificate thumbprint, and optional TokenPin.
Restart the agent (tray) or Windows service after saving settings.
Configuration
Prefer Agent:CertificateThumbprint to select the token certificate.
For ePass2003-style tokens, set Agent:TokenPin and optional Pkcs11ModulePath.
Client-side signing: keep LocalBridgeEnabled true; farm hosts should disable the bridge.
Troubleshooting
Check %ProgramData%\EGKits\EtaSigningAgent\logs\agent-YYYYMMDD.log for startup and signing errors.
If the PIN dialog still appears, verify PKCS#11 module path (32-bit DLL for the x86 agent).
Confirm the web app SigningAgentDownloadUrl / ETA configuration points at this official MSI.
Upgrade
Download the newer MSI. Installing a different architecture replaces the previous one (they share an UpgradeCode).
Run the new MSI. Operator-edited appsettings.json is not overwritten.
Restart the tray agent or Windows service after the upgrade if it does not restart by itself.
Uninstallation
Open Windows Settings → Apps and uninstall EGKits ETA Signing Agent, or msiexec /x the MSI /qn /norestart.
The installer stops the tray process and removes the Windows service and Start Menu shortcut.
appsettings.json is removed with the program folder; token certificates in Windows remain. Logs under %ProgramData%\EGKits\EtaSigningAgent are kept.
Related downloads
EGKits Migration Platform
Migration & Synchronization Platform
Migrate and continuously synchronize item codes, sent invoices, received invoices, and receipts from a legacy EGEInvoicing SQL Server database into an EGKits tenant (direct database or Secure Migration API). Includes manual sync, scheduled jobs, checkpoints, and a background Windows service.
Download
v1.0.3
EGKits.EtaSigningAgent-1.0.3-win-x86.msi
42 MB
Unsigned in this build — signed when the production certificate is available.
Release history
v1.0.3 · ARM64
2026-10-25 UTCv1.0.3 · x64
2026-10-25 UTCv1.0.3 · x86
2026-10-25 UTCHelp & docs