All ID-card, digital ID and/or mobile-ID, and Smart-ID holders have been granted a specific number of free digital signatures per month for personal use. This complies with actual use and limits are usually not exceeded among the so-called regular users. The limit includes only digital signatures given via the DigiDoc4 Client and RIA DigiDoc mobile application, i.e. signatures given to documents. Signatures given in e-services (Internet banks, eesti.ee, etc.) are not included in the limit.
The limit is applied on the basis of the IP address of the user’s computer. Every IP address has been granted a specific number of digital signatures per month. When this limit has been exceeded, you need to wait until the next month, when the number of signatures is reset, or conclude a contract for creating digital signatures with a service provider (see the available options below).
In order to use the DigiDoc4 Client and RIA DigiDoc for business purposes, you need to do the following:
1. TIMESTAMP
When installing the software, access to the timestamp service via RIA-s proxy service, designed only for regular use, is automatically configured. For business purposes:
- you need to use timestamps of timestamp service providers compliant with the eIDAS requirements (you can find an overview of service providers here). One of the service providers in Estonia is, for example, SK ID Solutions AS;
- RIA mediates the timestamp service to government sector institutions (EE) and to use it, you need to conclude a cooperation agreement with the Information System Authority. To do so, send your request by e-mail to [email protected]
You can find a manual for configuring DigiDoc4 here.
You can find a manual for configuring RIA DigiDoc here.
What is a timestamp?
- Timestamps are used in many areas, including digital signatures, to prove the existence of a document and signature at a specific moment. Without access to the timestamp service, giving digital signatures via the ID-software is not possible.
- A timestamp is like an envelope that contains data and on which is a ‘seal’ showing the time when the data was put into the envelope. For changing the data, you need to break the seal, which enables making sure whether the data has been changed. The timestamp is used for digital signatures in the same way.
2. VALIDITY CONFIRMATION SERVICE
When installing the software, Information System Authority’s access certificate is automatically configured for only regular use. In the RIA DigiDoc mobile application it is not possible to change the validity confirmation service. For business purposes in DigiDoc4 Client:
- You need to conclude a contract with SK ID Solutions AS, who issues your company an access certificate or grants you access based on your IP address. The DigiDoc4 Client can also be used on the basis of an existing contract.
You can find a manual for configuring DigiDoc4 here.
What is the validity confirmation service?
- The validity confirmation service is used to verify the validity of a certificate in real time, which ensures using the most secure certificate for personal identification or digital signing.
- An access certificate provides access to the validity confirmation service of SK ID Solutions AS (SK). You do not need an access certificate if the network from which the validity confirmation inquiry is made has an IP address-based access to the SK validity confirmation service.
- The validity confirmation service automatically adds an electronic note to the digital signature which defines the time the signature was given and shows that the certificate used for giving the signature was valid at the time.
3. MOBILE-ID
When installing the software, access to the mobile-ID service is configured automatically via the Information System Authority’s mediation service, which is only intended for regular use. For business purposes:
- You need to conclude a direct contract for using the mobile-ID service with the service provider SK ID Solutions AS, who will issue an access identifier for you and enable access to the mobile-ID service for your company’s IP address. ID-software can also be used on the basis of an existing contract.
You can find a manual for configuring DigiDoc4 here.
You can find a manual for configuring RIA DigiDoc here.
NB! Be sure to review “Additional information”.
What is mobile-ID?
- Mobile-ID is your digital personal identification document – it is located in your phone and is always with you.
- With mobile-ID, you can enter e-environments, make payments, conclude transactions, give digital signatures, and vote in the elections. In addition, you can enter different applications – for example, you can make bank transactions conveniently from your smart device wherever you are. Mobile-ID helps you take care of private as well as business matters.
4. SMART-ID
When installing the software, access to the Smart-ID service is configured automatically via the Information System Authority’s mediation service, which is only intended for regular use for people with an Estonian personal identification code. For business purposes or with a Latvian and Lithuanian personal identification code in ID-software using Smart-ID, you need to:
- conclude a contract for using the Smart-ID service with the service provider SK ID Solutions AS, who will issue an access identifier for you and enable access to the Smart-ID service for your company’s IP address. ID-software can also be used on the basis of an existing contract.
You can find a manual for configuring DigiDoc4 here.
You can find a manual for configuring RIA DigiDoc here.
NB! Be sure to review “Additional information”.
What is Smart-ID?
- Smart-ID is an identification solution. Using the Smart-ID application is a simple and secure.
- With Smart-ID, you can enter e-services and your Internet bank, sign documents, and confirm transactions.
Additional information
For signing with an ID-card via the DigiDoc4 Client and RIA DigiDoc mobile application, you always need both a timestamp and a validity confirmation service. For signing with mobile-ID and Smart-ID, you also need the mobile-ID and Smart-ID service.
Regarding the validity confirmation service, you should remember that:
- in the case of a new ID-card (issued after 3 December 2018) and Smart-ID, ID-software makes an automatic inquiry to the certificate validity information service (aia.sk.ee) and you do not need an access certificate or IP address-based access to the validity confirmation service
- in the case of older ID-cards (issued before 2 December 2018) and mobile-ID, the ID-software makes a default inquiry to the paid validity conformation service (ocsp.sk.ee) and in such a case, an access certificate or IP-based access to the validity conformation service is required.
