Frequently Asked Questions
- What is Digital Signature PUK code?
PUK code is the code on paper, beneath the sticker.
- What is Digital Signature PIN code?
You have to set it yourself using Digital Signature PUK code, when first receiving the cryptostick.
- What is Administrator password?
Administrator passowrd is the code on paper, beneath the sticker.
- I entered incorrect password and now my cryptostick is locked, what can I do?
If you have a cryptostick Adminstrator password, you can unlock it through the SafeNet Authentication Client (SAC) program. To do this, connect the cryptostick to the computer and open the SAC program. When you click on the gear icon (Advanced View), the third icon on the right is "Set token password". By clicking on it, you will be asked for the adminstator password and then you can generate a new usage PIN.
If the cryptostick Adminstrator password is missing, it is possible to initialize the cryptographic stick (in the case of a FIPS stick), during which all data on the cryptographic stick (including certificates) will be deleted. During initialization, you can generate new passwords and a new private key and order a new certificate.
- How can I generate a CSR?
You can find directions how to create CSR from here: Link to manual
- I want to subscribe to an encryption certificate
You can subscribe to the encryption certificate from here. The order must be signed by the person entitled to sign the agency or by a representative authorized by it. If the order is completed by us, a notification will be sent with a link to download the certificate to the e-mail address indicated under the organization and to the subscriber's e-mail address. If a contact person is marked on the order, the notification will be sent to the contact person.
- I want to subscribe to an authentication certificate
The Certificate of Authentication can be ordered from here. The order must be signed by the person entitled to sign the agency or by a representative authorized by it. If the order is completed by us, a notification will be sent with a link to download the certificate to the e-mail address indicated under the organization and to the subscriber's e-mail address. If a contact person is marked on the order, the notification will be sent to the contact person.
- I want to subscribe to an e-Seal certificate
We can only issue an e-stamp certificate on a secure medium. The secure medium holds one of the following certificates: Federal Information Processing Standards Publication 140-2 Level 2 (FIPS 140-2 Level 2) or higher Common Criteria (CC) (Standard EN 419 211, Secure Signature Creation for Protection Profiles and other related devices). You can order an e-stamp certificate from here. The email address of the notification in the certificate details is where we send the notification when the certificate starts to expire. The order must be signed by the person entitled to sign the agency or by a representative authorized by it. If the order is completed by us, a notification will be sent with a link to download the certificate to the e-mail address indicated under the organization and to the subscriber's e-mail address. If a contact person is marked on the order, the notification will be sent to the contact person.
- I want to subscribe to an e-Seal QCSD
The e-seal for QSCD is a requirement that we issue a certificate only to a device acquired from SK, SK generates the key pair itself and imports the certificate to the cryptostick. You can order an e-seal certificate from here. The email address of the notification in the certificate details is where we send the notification when the certificate starts to expire. The order must be signed by the person entitled to sign the agency or by a representative authorized by it. If the order is completed by us, a notification will be sent with a link to download the certificate to the e-mail address indicated under the organization and to the subscriber's e-mail address. If a contact person is marked on the order, the notification will be sent to the contact person.
- How much does the certificate cost?
The price of the certificate depends on its period of validity and type. If you want a certificate with a cryptographic stick, the cost of the cryptographic stick is added, VAT is added to all prices. Check the price list here.
- We need to join the x-road, what do I have to do with it?
What you need more precisely for x-path depends on whether you are an x-path host or a member. The host has its own security server, the member uses someone else's security server. The X-path member only needs to acquire an e-seal certificate. The certificate can be ordered from here. The X-Road host needs to acquire the entire set: an e-seal and an authentication certificate, a validation service, and a timestamp service. The order can be placed here. In the case of an e-seal certificate, the requirement is that the private key must be located on a secure medium. As a secure medium, we refer to a device that holds a valid FIPS (Federal Information Processing Standards Publication 140-2 level 2 (FIPS 140-2 Level 2) or CC (Common Criteria (CC) (Standard EN 419 211, Protection Profiles for Secure Signature Creation and other related devices) certificate. The name and serial number of the device, firmware and hardware version, the certificate of the uploaded device and its number must also be included in the order form. The order must be signed by the person entitled to sign the agency or by a representative authorized by it.
- My organization certificate is about to be expired, can I renew/update it?
It is not possible to renew/update certificate. If certificate is about to be expired, then new certificate should be ordered.
- I got a message that our organization's e-Seal certificate is about to expire, so what am I supposed to do?
First you need to know, what level s-Seal is your organization using, that info is available in SafeNet Authentication Client. If you have received the information then please follow "I want to subscribe to an e-Seal certificate" or "I want to subscribe to an e-Seal QSCD".
- I got a message that our organization's encryption certificate is about to expire, so what am I supposed to do?
You can subscribe to the encryption certificate from here. The order must be signed by the person entitled to sign the agency or by a representative authorized by it. If the order is completed by us, a notification will be sent with a link to download the certificate to the e-mail address indicated under the organization and to the subscriber's e-mail address. If a contact person is marked on the order, the notification will be sent to the contact person.
- I got a message that our organization's authentication certificate is about to expire, so what am I supposed to do?
The Certificate of Authentication can be ordered from here. The order must be signed by the person entitled to sign the agency or by a representative authorized by it. If the order is completed by us, a notification will be sent with a link to download the certificate to the e-mail address indicated under the organization and to the subscriber's e-mail address. If a contact person is marked on the order, the notification will be sent to the contact person.
- Can I use cloud service for an e-Seal?
Currently QSCD is not allowed to be used in cloud service. FIPS can be used.
- I want to buy a cryptostick
If you want, you can buy a crypt stick from us. To do this, please submit a subscription through the web form on our homepage here.
- I already have a cryptostick, can I use it?
If you received the cryptostick from us and it is still valid then we accept it. If you have received cryptostick elsewhere, then please check that cryptostick is listed here.
- What to do if DigiDoc4 client shows error "Access Certificate has expired"
2 ways how to fix this:
- Update DigiDoc4 software
- Restore the original settings of the application, which can be done by selecting the settings from the top right and then the services from the left menu and pressing restore the original settings located at the bottom right next to the close. If neither of the above options helped, please contact the ID card helpline on +372 666 8888.
- What to do if DigiDoc4 client shows error "10 signature limit is almost full" and/or "Signature limit is full"?
It should be noted here that the signatures are not based on the IP address of the person, ie if you sign in the office network, it is likely that is not your only sign. The solution would be for the company to order all the services needed for signing from us. We offer a package for signing DigiDoc users, information about which can be found here. The subscriber of the package is given IP address-based access to the Mobile-ID service, Smart-ID service, Time-stamping service and Validity confirmation service.
Services can be ordered here.
