The Firefox web browser may experience problems with ID card authentication. If you experience problems, we recommend using other supported browsers.

ID-card testing

When testing services, it should be remembered that ID cards from several different manufacturers are in use in Estonia, and all systems should work equally well with all cards in use. Therefore, we recommend passing all tests with all ID cards in use in Estonia.

NB! Test services can only be tested with test ID-cards.

Testing of the ID-cards issued until 14.11.2025 (IDEMIA)

Please note that for authentication and signing in the test environment with an ID card, the identification and signing certificates of the ID card must be uploaded to the SK test environment ​​https://demo.sk.ee/upload_cert/.

We recommend using the test services offered by SK ID Solutions to test personal identification and digital signing solutions with an ID card. The use of test services is free.

Validity Confirmation Service allows checking the validity of the certificate in real time. Read more here.

A timestamp service proves that certain data existed at a given point in time. Read more here.

  • Ordering test cards

    Test cards issued by SK:

    • test ID-card (2021);
    • test e-residency Digi-ID;

    e-Seal on crypto-stick issued by SK

    • test e-Seal on crypto stick

    NB! Keep in mind that:

    • test ID-cards can only be used in a test environment;
    • test ID-card certificates cannot be updated.

  • Personal identification with an ID-card in the e-services

    In order to test identity identification with an ID card in the e-service, at least the following tests should be performed:

    1. Successful identification with an ID card
    2. Personal identification with an ID card with revoked or suspended certificates
      • To change the status of the IDEMIA ID card certificate, upload the ID card certificate to the OCSP test service database https://demo.sk.ee/upload_cert/ and set the status to “revoked” or “unknown” when uploading the certificate.

    It is recommended to pass the successful identification tests with all web browsers supported by the ID-software on at least one computer with Windows, macOS and Ubuntu operating systems.

    Personal identification with an ID-card in Windows domains and individual machines

    In order to test the performance of logging into the network/computer with an ID-card, at least the following tests should be performed:

    1. Successful login/identification with ID-card
    2. Attempting identification with an ID-card with revoked or suspended certificates
      • To change the status of the IDEMIA ID card certificate, upload the ID card certificate to the OCSP test service database https://demo.sk.ee/upload_cert/ and set the status to “revoked” or “unknown” when uploading the certificate.

    Encryption solutions

    In information systems that use encryption for the-ID card certificate, at least the following test should be performed:

    • Data encryption in the information system for the ID-card holder and data decryption with the ID-card in DigiDoc4 or the RIA DigiDoc mobile application

    Digital signing with an ID-card and checking the validity of digital signatures

    In order to test the digital signature with an ID-card and the validity check of digital signatures, at least the following test should be performed:

    • Creating and signing an ASiC-E container with an ID-card
      • Validation of the created container in DigiDoc4 or RIA DigiDoc mobile application
      • Validation of the created container with the SiVa service

    Customer card solutions

    It is difficult to define more detailed test stories in customer card solutions because the systems are very different. You should definitely go through the main positive use cases with the ID-card and the most common possible error situations.

Testing of the ID-cards issued after 17.11.2025 (Thales)

To order Thales test cards, please contact the Police and Border Guard Board at [email protected]. More information about Thales ID cards can be found here.

  • 1.  Install ID software with Thales test card support

    To successfully use the Thales test card in the ID software, you must install ID software that supports the Thales test card. This software includes the necessary drivers for the Thales test card and the DigiDoc4 test application configured to work with test services.

    If the ID software is already installed on the computer used for testing, it must be uninstalled before installing the ID software with Thales test card support.

    Please note! Please note that actions cannot be performed with personalized ID cards issued by the Police and Border Guard Board (PPA) in the ID software that supports the Thales test card. Therefore, we recommend uninstalling the ID software with test card support after testing is completed.

    Windows

    macOS

    • Download the software. ID software with Thales test card support for macOS 13, macOS 14, and macOS 15 can be downloaded here: https://installer.id.ee/media/id2025/macOS/
    • Install the downloaded DigiDoc4 application and Open eID package.

    Please note! You can authenticate and sign documents online with the test card only in Chrome and Firefox browsers.

    Ubuntu

    If ID software has not been previously installed on the computer used for testing, you must first install OpenSC from the repository before installing the ID software with Thales test card support. This can be done with the command ‘sudo apt install opensc opensc-pkcs11’. After installing OpenSC, the command ‘pkcs11-register’ must be run from the command line.

    To install previously downloaded ID software:

    • Extract the downloaded zip package.
    • Navigate to the appropriate Ubuntu version directory from the command line.
    • To install the software, run the command ‘sudo apt install ./*.deb’

    2. Upload the test card certificates to the Zetes test environment

    To successfully authenticate and sign with a test card in a test environment, upload the test card’s identification and signing certificate to the Zetes OCSP test service database https://ocsp-test.eidpki.ee/ui/ and set the status to “good” when uploading the certificate.

    3. Test authentication and signing with the test card

    After installing the ID software with Thales test card support, you should try authentication and signing with the test card on the test.web-eid.eu page.

    The PIN1 is 1234, PIN2 is 12345 and PUK is 12345678

  • Identity verification with the Thales ID card

    To test identity verification with the ID card in the e-service, at least the following tests should be performed:

    1. Successful identity verification with the ID card

    2. Identity verification with revoked certificates on the ID card

    • To change the status of the Thales ID card certificate, upload the ID card certificate to the OCSP test service database at https://ocsp-test.eidpki.ee/ui/ and set the certificate’s status to „revoked” or „unknown”.

    It is recommended to complete successful identity verification tests on all browsers supported by the ID software, using at least one Windows, macOS, and Ubuntu machine.

    ID card authentication in Windows domains and on individual machines

    To test ID card-based login to the network/computer, the following tests should be performed at a minimum:

    1. Successful login/identity verification with the ID card
    2. Identity verification attempt with revoked certificates on the ID card
      • To change the status of the Thales ID card certificate, upload the ID card certificate to the OCSP test service database at https://ocsp-test.eidpki.ee/ui/ and set the certificate’s status to „revoked” or „unknown”.

    Digital signing with the ID card and signature validity checking

    To test digital signing with the ID card and signature validity checking, at least the following test should be performed:

    • Creation and signing of an ASiC-E container with the ID card
      • Validation of the created container in the DigiDoc4 client or RIA DigiDoc mobile application
      • Validation of the created container with the SiVa service

    Client card solutions

    It is challenging to define more detailed test cases for client card solutions as the systems are highly varied. It is important to perform the main positive use cases with the ID card and the most common possible error scenarios.

Read also:

* ID-card = personalized ID-card issued to the person by PPA; test card = test ID-card with test data, which is intended for testing services.

Contact ID-helpline
Contact ID-helpline