Instructions for the online renewal of qualified digital certificates Version 1.2 The online renewal procedure is done in 3 steps: 1. Installing the DigiSigner software 2. Preparing the needed documentation for the renewal process 3. Downloading and updating the certificate on etoken device Mandatory requirements for the renewal process: Up-to-date Operating System Install or reinstall the Aladdin e-token driver (x32 or x64) Install or reinstall the DigiSign Trust Chain Aladdin e-token device that contains a valid digital qualified certificate issued by the DIGISIGN S.A. certification authority and which has at least 5 days remaining until expiration. This requirement is important because an expired certificate can not be updated through the online renewal procedure. A digital copy after the identity card of the holder (supported file formats:.pdf.jpeg.jpg.png.bmp.tif ) Compatible Operating Systems: Windows Xp, Windows Vista, Windows 7, Windows 8, Windows8.1, Windows 10 Supported browsers: Internet Explorer (version 7 or newer), Mozilla Firefox (version 5 or newer), Google Chrome (version 14 or newer) DigiSigner software. Go to the next page to see installing instructions.
WARNING!: You can not replace the certificate holder s data with another person s data. 1. Installing the DigiSigner driver and utility software a) Click here to download the DigiSigner utility software b) Open the saved file, select the place where you want to install it and click Next. c) In the next window press the Install button. d) After you receive the message Installation complete, the software will be successfully installed. Press the Close button and then OK to close the window.
2. Preparing the needed documentation for the renewal process a) Insert the Aladdin e-token device in the USB slot b) Open an Internet browser, go to http://portal.digisign.ro/ and select one of the options for filling in the digital certificate form of application cerere Certificat Digital (Factura emisă pe Persoană Fizică, pe baza CNP)= Digital certificate application (individual) cerere Certificat Digital (Factura emisă pe Persoană Juridică/Societate/PFA, pe baza CUI)= Digital certificate application (legal person) c) Make sure that your e-token device is pluged in and select the option Reînnoire online (Online Renewal) d) Press the Validare (Validation) button
e) Select the certificate you want to renew and then click OK f) Enter the device password and click OK
g) The form of application will be automatically filled with information used from the issued certificate. IMPORTANT: Please make sure that the date of issue/expiration of the identity card has the following format DD-MM-YYYY! After you have checked the information in the form of application, you will need to enter the validation code at the bottom of the page and to press the Trimite (Send) button.
h) The order made will be added when the following confirmation message is shown. If you did not received the message above, you should review the form of application. The fields wrongly filled are marked with red. i) Save the documents: Declaratia (Declaration) and Contractul (Contract) you have received in the e-mail specified in the form of application. If you want to save the documents as.pdf, click File>Save a Copy>Save a blank Copy. Obs. If you completed The form of application for digital qualified certificate legal person, you will also receive on your e-mail address a delegacy (Imputernicire) which you can save on your computer. WARNING: You don t have to print out those documents or send them to our office or Banca Transilvania. The documents will be digitaly sent as specified in the following stages.
j) Insert the e-token device in the computer and open the DigiSigner utility in order to renew your digital certificate by accesing the menu Start > All programs > Digisigner > Reinnoire certificat. k) You will have to upload the documents Declaratia and Contract from your computer using the Trimite Declaratie and Trimite Contract buttons.
l) By using the Trimite Act de Identitate button you can upload the digital copy of the holder s identity card. The type of the image can be selected from the list: Files of type: Obs. 1: The digital copy of the holder s identity card must have one of the extensions:.pdf.jpeg.jpg.png.bmp.tif or.tiff and the size should not exceed 2 MegaBytes. Obs. 2: If you completed The form of application for a digital qualified certificate legal person, you will also receive by email a Delegacy (Imputernicire), which has to be signed by the administrator or by the legal representative of the company. Send these Delegacy (Imputernicire) by email at imputernicire@digisign.ro Obs. 3: If you are CECCAR/CAFR member, please send a copy of your CECCAR/CAFR certificate in e-mail to ceccar@digisign.ro. The e-mail subject should contain "CECCAR SURNAME NAME" where surname is your family name and name is your given name.
m) The documents will be successfully sent after the 3 fields will by marked with a green symbol. WARNING: After your documents will be processed by our operators (in maximum 5 working days) and the payment proof of the invoice is received, you will be notified by e- mail regarding the issuing of your new certificate. 3. Downloading and updating the new certificate on the e-token device a) After you receive our notification, you will have to connect your e-token device to the computer, open the DigiSigner - Reinnoire Certificat utility software and press the Descarca certificat (Download certificate) button.
b) Insert you're token password. c) In order to finish the renewal of the certificate you have to click the Actualizeaza certificat (Update certificate) button. If you want to save on you computer the public key of the certificate, you have to press the Salveaza (Save) button.
d) After you enter your e-token password, the certificate will pe updated and you will receive the message below: Certificatul a fost actualizat cu succes = The certificate has been successfully updated. Disconnect your e-token device and plug it back in order for the renewal process of the certificate to be completed. The status of the certificate can be verified using the public registry which can be accessed at http://registru.digisign.ro/. If the information contained in this document does not suffice, please contact our DigiSign Support department, non-stop at your disposal - 031.620.1289 or helpdesk@digisign.ro. After the renewal of the certificate, you will have to update the certficate at the institution portals where the initial certificate was registered: ANAF, CNAS, SEAP, etc. using their procedures and instructions.
Possible error messages and solutions: 1. If you select the Reinnoire ONline (Online renewal) option from the form of application and press the Validare button, you can receive the following message: Certificatul nu a putut fi validat din punct de vedere criptografic = The certificate could not be verified in cryptographic terms. Solution: Please make sure that your e-token device which contains a valid DigiSign certificate is properly pluged in. If the problem persists, close your Internet browser, disconnect/reconnect the e-token device in the computer and open the Internet browser again or try filling out the form of application with a different browser (Mozilla Firefox, Google Chrome, Internet Explorer).
2. When you upload your documents, the following message pops up: Dispozitivul criptografic nu este instalat = The cryptographic device is not installed Solution: You have to make sure that the dll etpkcs11.dll is contained in the following path: C:\WINDOWS\system32\. If not, search the etpkcs11.dll file in the system, on the C: partition create a folder named WINDOWS and then inside create another folder named System32. Copy the etpkcs11.dll file inside the newly created System32 folder. 3. After you press the Descarca certificat (Download certificate) button, you get the message: Certificatul nu este disponibil = The certificate is not available
Solution: The certificate hasn t been issued yet. Try to download and update the certificate on the e-token device after you receive our notification by email. Reviews No. Version No. Date 1 1.0 13.03.2012 2 1.1 14.03.2012 3 1.2 23.05.2012 3 1.2 29.05.2012 3 1.2 06.06.2012