Mobile-ID

Mobile-ID is a SIM card-based electronic personal identification service that allows end-users to access e-services, give digital signatures, and otherwise authenticate themselves through electronic channels. Demo Environment and test numbers help in developing services.

Last updated articles

Digital signing

Digital signing in web applications

In order to make it easier to add signing support to web applications, we recommend using a JavaScript library with a unified API that allows different plugins to be used in a similar way (independently of the operating system and the browser).

Verifying signatures given with test certificates in the DigiDoc4 client

In order to verify signatures given with test certificates in the DigiDoc4 client, you need to configure the test certificates manually. Otherwise the signature validation check will return the status “Unknown”.

BDOC, CDOC and ASICE DigiDoc file formats

An overview of DigiDoc container formats supported by different versions and components of the ID-software can be found on the DigiDoc container format life cycle page. There is also a sample file for each format.

Recommended data file formats for digital signing

Nowadays, nearly all file formats are suitable for digital signing. There are no restrictions on digitally signed documents exchanged between information systems, but if a signed document is sent to an end-user, the most common and standard file formats should be preferred.

What is the difference between digitally signed documents with .bdoc and .asice extensions?

In Estonia, the BDOC format and its two subformats are used for digital signatures, which can be recognised by .bdoc and .asice file extensions.

Testing

Verifying signatures given with test certificates in the DigiDoc4 client

In order to verify signatures given with test certificates in the DigiDoc4 client, you need to configure the test certificates manually. Otherwise the signature validation check will return the status “Unknown”.

Service testing

You should purchase a test ID-card for testing created services and applications. There are test numbers available for the developers of mobile-ID applications. Information and links to test environments.

Mobile-ID testing

Additional information necessary for developing and testing mobile-ID (mID) services

Certificates

Certificates required for verifying digital signatures

In order to verify files that are digitally signed with an ID-card or a mobile-ID and/or digitally stamped, all of the root certificates, certifiers and OCSP-responder certificates used to date must be configured in the information system.

Using certificate Trust Service Status Lists (TSLs) in software libraries

Trust Service Status Lists (TSLs) are used in Libdigidocpp (v3.9 and later) and DigiDoc4j libraries. More information on TSLs can be found in the documentation.

Suspending mobile-ID certificates

​If the phone connected to your mobile-ID is lost or stolen, you should immediately suspend the mobile-ID certificates in order to be protected from identity theft.

Mobile-ID certificates: general information

Mobile-ID certificates can be suspended, but not updated: in order to use the mobile-ID with expired or suspended certificates you have to replace the SIM card.

Identification

Mobile-ID interfacing: authentication and signing

In order to use the mobile-ID identification and signing option in your information system, you need to use mobile-ID rest API.

Identification with mobile-IDs and ID-cards

Advantages of electronic identification over regular authentication solutions that use usernames and passwords.

Error messages

Handling signature validation warnings in DigiDoc libraries

Valideerimisvead ning hoiatustega dokumendid ja nende käsitlemine DigiDoc tarkvarateekides, lõppkasutaja rakenduses.