By using an Alias Selector it is possible to control how the key used for signing are selected at run-time based the signing request. For example, it is possible to have keys selected based on the authenticated user for a signing request.

The default, if no alias selector is explicitly configured, is to use a default selector behaving in a backwards-compatible way, using the DEFAULTKEY property of the crypto worker being used.

To configure an alternative alias selector, set the ALIASSELECTOR worker property of the worker pointing to the class name of an implementation for an alias selector to use.