Admin rights are required for the installation of the Pad Connector. As soon as the installation is done, these admin rights are no longer required for the further signature processes.
The setup tries to set an entry in the hosts file (%windir%\system32\drivers\etc), this can be blocked by antivirus scanners.
If no entry can be placed in the hosts file, the setup will still complete successfully. However, connection problems between the signature pad and the browser may occur afterwards (see Troubleshooting).
The communication between Browser and Pad Connector is done by using secure web sockets (wss). The SSL certificate and the keystore are stored locally in the installation directory and are used to overcome the browsers mixed content barrier. It has no security relevance as the data does not leave the local realm of the users computer. The SSL certificate is issued for a host name that has a localhost DNS adress (signsocket.stepover.com). The Pad Connector web socket only excepts connections from localhost.
Please consider: For using webSignatureOffice your browser has to allow the use of session cookies.