A user must select a certificate from the secure, private certificate store of the user currently logged in under Windows. This usually means that a user must be logged into his own Windows account when adding a digital signature. When smart cards are used, it is possible to install references to a single certificate on multiple machines, while keeping the private key on the card itself. In this case, multiple users could sign the same file or model using the same machine, each supplying his own smart card.