Digital signing in the DigiDoc4 application with foreign ID-cards

Did you know that with the DigiDoc4 application, in addition to validating electronic signatures, you can also sign files with foreign ID-cards?

• Digital signing with Latvian and Lithuanian ID-cards

  Show Hide

  Did you know that the DigiDoc4 software allows you to verify digital signatures issued with the Latvian and Lithuanian ID-card as well?

  Verifying Latvian and Lithuanian digital signatures

  DigiDoc4 makes it possible to verify signatures issued with the Latvian and Lithuanian ID-card if they are:

  • in the EDOC or ASiC-E format in Latvia
  • BDOC or ASiC-E format in Lithuania.

  Your DigiDoc4 does not need to be configured additionally – the verification of the digital signatures takes place exactly as for all other documents.

  Digital signing with Latvian and Lithuanian ID-cards in DigiDoc4

  In computers running on Windows, DigiDoc4 can be used for digital signing with Latvian and Lithuanian ID-cards.

  Step 1: install software

  You will first need to download and install the country-specific software on your computer:

  • Latvian ID-software (middleware);
  • Lithuanian ID-software (middleware).

  If you do not yet have DigiDoc4 installed, download and install the ID-software.

  Step 2: signing documents

  Check to make sure that DigiDoc4 reads the ID-card data correctly and you’re ready for signing!

  Good to know:

  • You can only sign ASiC-E format documents (meaning that if you are the first to sign the document, the document is saved with the .asice extension).
  • Use of the Latvian and Lithuanian ID-card in DigiDoc4 works the same way as with the use of the Estonian ID-card. If necessary, read the instructions for digital signing with DigiDoc4.
  • Note: To sign with a Lithuanian ID card in the macOS DigiDoc4 (DD4), you need to run from the command line after installing DD4:

  mkdir ~/Library/Containers/ee.ria.qdigidoc4/Data/.mcard

  ln ~/.mcard/mcard_history.txt ~/Library/Containers/ee.ria.qdigidoc4/Data/.mcard

  • Note: The Lithuanian ID-card does not have a PIN2 code: enter the ID-card’s PIN1 code when prompted for the PIN2 code.

• Digital signing with Finnish ID-cards

  Show Hide

  Did you know that the DigiDoc4 software allows you to conveniently and rapidly verify digital signatures given with the Finnish ID-card and sign documents using the Finnish ID-card?

  Verifying Finnish digital signatures

  DigiDoc4 makes it possible to verify signatures given with the Finnish ID-card if they are in BDOC or ASiC-E format.

  Your DigiDoc4 does not need to be configured additionally – the verification of the digital signatures takes place exactly as for all other documents.

  NOTE: The signature given with the Finnish ID-card is an electronic signature, and not a digital signature considered equal to a handwritten signature, as under Estonian law.

  Electronic signatures given with the Finnish ID-card have AdES/QC signature level and as a result it does not meet the requirements for the highest signature level as defined as eIDAS. Basically, a signature given with the Finnish ID-card is not equal to a handwritten signature, and DigiDoc4 will display the following warning about signature level: kehtiv (piirangutega) - valid (with limitations).

  Read more the electronic signature levels.

  Digital signing with Finnish ID-cards in DigiDoc4

  In computers running Windows, DigiDoc4 can be used to also provide electronic signatures with Finnish ID-cards.

  Step 1: install software

  You will first need to download and install the country-specific software on your computer:

  • download and install Finnish ID-software (middleware); 

  If you do not yet have DigiDoc4 installed, download and install the ID-software.

  Step 2: give signature with the Finnish ID-card

  Signing follows the same procedure as for the ID-card: first, enter the ID-card into the reader and connect it to the computer, then launch the DigiDoc4.

  Open the option “Sign with ID-card“ in DigiDoc4 menu and follow the instructions displayed by DigiDoc4.

  Be aware that signing of BDOC or ASiC-E format documents is supported.

  Read about what to do if you want to give a digital signature.

• Signing: how to check the validity of an electronic signature?

  Show Hide

  The easiest way to check the validity and use limits of an electronic signature is with the help of the DigiDoc4 application. In order to ensure better differentiation, it uses a three-colour system in addition to an explanatory text:

  • green means that everything is OK
  • yellow means that the user must be careful and decide on the suitability of a specific signature themselves
  • red means that the signature cannot be regarded as valid in the given situation

  Signature validity marking:

  1. Signature is valid – marked with green This digital signature is equal to a hand-written signature.
  2. Signature is valid (Restrictions) – marked with green and yellow. This is used if the signature level is AdES/QC, i.e. it is not a signature equal to a hand-written signature, but it may still be suitable for use in a specific situation. More information can be obtained from the signature details.
  3. Signature is valid (Warnings) – marked with green and yellow. The warning is usually displayed if the signature is valid, but the container has a specific characteristic. Usually containers acquire such characteristics by accident in the creation process. The warning is displayed because containers cannot be changed without the signature becoming invalid. More information can be obtained from the signature details.
  4. Signature is unknown – marked with red. This means that the program was not able to check the signature’s validity at the moment. More information can be obtained from the signature details.
  5. Signature is not valid – marked with red. This means that the digital signature has been declared invalid.

  You can read more about this topic from the RIA blog.

• Different levels of electronic signatures

  Show Hide

  In July 2016, a directly applicable implementing provision of the European Union came into effect, which brought into force the eIDAS Regulation. As a result, there are four levels of e-signatures:

  1. Level 1 – QES (Qualified Electronic Signature)
     The highest level of e-signatures, which is equal to handwritten signatures and is also called a digital signature in Estonia. The signature meets the technological requirements established in standards. The backgrounds of both the owner of the signature and the issuer of the certificate are checked. Additionally, the signature is given with a means that is deemed suitable (ID-cards, digital IDs, mobile-IDs and qualified Smart-ID accounts in Estonia. Read more about digital documents).
  2. Level 2 – AdES/QC –  Advanced
     An e-signature with a qualified certificate. The signature meets the technological requirements established in standards. The backgrounds of both the owner of the signature and the issuer of the certificate are checked.
  3. Level 3 – AdES  (Advanced Electronic Signature) – The signature meets the technological requirements established in standards, but the background of the holder of the certificate used to give the signature as well as the background of the issuer of the certificate may be unknown.
  4. Level 4 – Other electronic signatures  – all other electronic signatures that do not meet valid standards.