Frequently asked questions

Common questions

What is QES (Qualified electronic signature)?

QES is an electronic file, which contain information that identifies a person or a company. Certificates issued by InfoNotary, can be used for:

1. establishing authorship (authentication);
2. encryption and decryption of data (confidentiality);
3. ensuring the integrity and fixity of the signed data (integrity);
4. non-repudiation of signature (irrevocability);

What can I do with QES?

QES can be used as a means of personal or corporate e-identification making statements and from state bodies and bodies of local self-government within the meaning of the law for electronic document and electronic signature , e-trade, financial transactions, e-mails, electronic signature of documents etc.

What types of certificates does Infonotary issues?

• i-Notary Personal Q Sign Certificate CP - Qualified electronic signature for individuals.

it is issued on a person – Holder and Author of the certificate - and containing infonormation, verifying the identity of the individual and the connections with his public key.

• i-Notary Personal Q Sign - Privacy Enforced CP - Qualified electronic signature for individuals.

it is issued on a person – Holder and Author of the certificate - and containing infonormation, verifying the identity of the individual and the connections with his public key.

• i-Notary Company Q Sign Certificate CP - Qualified electronic signature for companies.

it is issued on a company – Holder, with included data for the individual - Author of the certificate and containing infonormation, erifying the identity of the company and the connections with his public key.

• i-Notary Company Q Sign - Privacy Enforced CP - Qualified electronic signature for companies.

it is issued on a company – Holder, with included data for the individual - Author of the certificate and containing infonormation, erifying the identity of the company and the connections with his public key.

What should I do to receive QES?

If you want issue QES you must do the following:

1. Fill the blank "Request for issuing Qualified electronic signature";
2. Prepare the documents that are needed for the issue;
3. Go to the nearest office of an Certification Authority;
4. Choose what kind of devices you want;
5. Present a document for paid certification services;

From where can I get QES from Infonotary?

Full list of the Infonotary Certification Authorities, their adress and work time you can find here.

What documents are need to issue an Qualified electronic signature?

• Qualified electronic signature for individuals (i-Notary Personal Q Sign certificate):
  • A copy of the identity of the individual, which will be entered in the certificate as Holder / Author;
• Qualified electronic signature for company (i-Notary Company Q Sign certificate):
  • A copy of the identity of the individual, which will be entered in the certificate as Author;
  • A copy of the court registration;
  • Copy of the document certifying the state;
  • A copy of the tax registration;
  • A copy of the identity document of the legal representative of the company to be registered as holder of the certificate;
  • Power of attorney empowering the Author;

What is the validity of electronic signatures?

The validity of the electronic signature certificate is one year - 365 days from the date of issue of the certificate. After this period the validity of the certificate may be extended once for another year.

How to revoke certificate for electronic signature?

To revoke a certificate you must inform Infonotary. You need to fill Request for revokation, in which to describe the reason for the revokation. The request shall be signed by the holder of the certificate. Onsite in nearest office and upon presentation of the certificate request for revokation will be revoked.

How do I suspend/resume certificate?

To suspend your certificate, you must inform InfoNotary. Suspension / resumption can be done by phone, e-mail or the presentation of Request to suspend / resume in the nearest office.

How to renew the certificate for electronic signature?

Certificates for qualified electronic signature of a natural or legal person renewal can be done once for a valid certificate of neprekrateno action, even for a period of validity - 1 year (365 days). Renewal can be done only if all the data in the certificate are the same and the content of the new certificate is identical to the existing certificate, with the exception of the period of validity as the new certificate fits the new deadline. Request for renewal be requested by the Holder or the Author, included in the existing certificate, at least ten (10) days before the validity period of the certificate.

What are the root certificates of InfoNotary

The root certificate of for public key of the Certified Authority Infonotary: InfoNotary CSP Root CA, is selfissued and selfsigned certificate for qualified electronic signature, under Article 33, Paragraph 1, Item 2 of the law for electronic document and electronic signature.

The certificate is signed with the basic private key of the Provider.

The basic private key of Infonotary, authenticated by the certificate of the public key InfoNotary CPS Root used to sign the certificates of intermediate certification authorities of InfoNotary and other data related to the management of the certificates issued by InfoNotary, including the list of suspended and revoked certificates issued by it (root-ca.crl)

What is a public register of certificates?

As a registered certification services InfoNotary keep an electronic record of the certificates in the certificate which publishes its own electronic signature, and all certificates issued by him. Infonotari leads and publish a List of suspended and revoked certificates, not limited in any way and any form of access to the register of certificates. At the express request of the author InfoNotary limits access to read and download his certificate of electronic signature. The electronic register of certificates of InfoNotary publicly accessible through LDAP based access at: ldap://ldap.infonotary.com/dc=infonotary,dc=com

How to store my certificate?

The private key generated by InfoNotary used to create qualified electronic signature is written on a technical tool smart card. Only the author / holder have access to the private key, therefore fully responsible for the preservation and enjoyment of it, and to prevent the compromise, loss, disclosure, modification, or otherwise unauthorized use of their private key. АAuthors who uses a smart card to store your private key is required to store and protect personal data from being compromised to enable its smart card (PIN).

What is the public key?

The public key is a key pair used in the asymmetric encryption. The public key is accessible and can be used by each of the electronic signature verification.

What should I do if I change my personal/company data?

In case of changing your personal or business data you need to inform InfoNotary as the electronic signature certificate contains personal information that must be updated. For this reason, the effects of this certificate must be stopped and then reissued with updated information.

How to sign an electronic document?

Electronic documents can be signed by the program InfoNotary e-Doc Signer, which can be found on the installation disc InfoNotary. Once you install it, you can click right mouse button on the document you want to sign and menu InfoNotary e-Doc Signer choose Sign. Then follow the wizard instructions to sign.In an analogous manner to verify a signature on a document.

Note that the name of the signature file must be in Latin, and it contained a folder / directory.

In addition, many programs have built-in support for electronic signatures. These include Microsoft Office, OpenOffice.org and Adobe Acrobat. Instructions on how to sign documents they can be found in the documentation of the program.

How you can sign an electronic document if I work on Linux or Mac?

We provide for the users of Linux and Mac OS X pre-release version of the product for the creation and verification of electronic signatures InfoNotary e-Doc Signer v.2, which can be downloaded from here.

You can also sign files from the command line using OpenSSL or utilities NSS. Both versions run on Linux and Mac. Brief instruction signature NSS has the article Signature files via NSS.

How to set your mail client?

Comprehensive guide to settings MS Outlook, MS Outlook Express and Mozilla Thunderbird to use the digital signature can be found at Instruction for installation of digital signature or from installation disc InfoNotary.

Where can I download the latest drivers for the smart card reader?

For readers OmniKey, as CardMan 6121, the latest drivers can be downloaded from the following address - [1].

For readers of ACS, such as ACR 38, the latest drivers can be downloaded from [2].

In both cases, you need to download PC / SC driver for your operating system.

If you use Todos reader you can download the latest drivers from [3].

With which operating systems can I use certificates for qualified electronic signature issued by InfoNotary?

Smart cards InfoNotary provides for its clients work with all versions of Windows after 98 Second Edition, Linux version 2.4.21 or newer and MacOS X 10.5 or newer. To be able to use the full functionality of electronic signatures recommend using at least Windows XP, Linux 2.6 or Mac OS X 10.6.

Readers offered by us have drivers for most operating systems.

Technical problems

Why do I get error "ssl_error_renegotiation_not_allowed" when working with electronic signature in Firefox?

This error means that SSL renegotiation is disabled in your browser settings. To solve this problem, you must do the following:

1. Enter about: config in the address bar of Firefox;
2. press "I'll be careful, I promise", to access the setting;
3. look for the field "security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref" and change the value of true.

My card is not detected and the icon HiPath SIcurity Card API displays an error code 0x80100014, what to do?

This error code indicates that the smart card is not inserted in a reader.

• For SIM-sized smart cards, please see the picture:

My card is not detected and the icon HiPath SIcurity Card API displays an error code 0xe06d7363 or No service, what to do?

How to solve this problem, read here: Smart Card Service.

When installing Infonotray e-Doc Signer or Infonotary Smart Card Manager error occurs 2738, what to do?

This error means that you have installed Windows Script or it does not work correctly. To solve this problem, you must do the following:

• If you are using Windows 2000 or XP, you can install the latest version of http://www.microsoft.com/downloads/details.aspx?familyid=C717D943-7E4B-4622-86EB-95A22B832CAA&displaylang=en.
• If you are using Windows Vista or later, it must do the following:

1. Run Command Prompt as administrator. This can be done in the following way - in the Start menu, click All Programs, click there, Accessories, Command Prompt locate and right-click the mouse on it and select Run as administrator.
2. Run the following command „regsvr32 vbscript.dll“. You should receive a message „DllRegisterServer in vbscript.dll succeeded“. If you get an error 0 × 80004005, then Command Prompt is not running as administrator.

Why when I renew my certificate I see the old on in Keychain Access?

Because Keychain-a on Mac OS X caches the contents of the card, it is possible for the issuance of a new certificate for electronic signature or extension of the validity of the new content of the card is not visible. To solve this problem, you must delete the cached information. This can be done as 'Switch off the reader' delete the folder / var / db / TokenCache / tokens. The terminal command to delete is - sudo rm-r / var / db / TokenCache / tokens. After restarting the computer and reconnect the reader and the card, Keychain Access will display its actual content.

Configure WinHTTP proxy in Windows Vista / 7

Settings for WinHTTP proxy settings are separated by a Microsoft ® Internet Explorer. You can check these settings using the following command:

netsh winhttp show proxy

Configuring the proxy can do by following command:

netsh winhttp set proxy adress-of-proxy-server

You can remove the proxy configured in the following way:

netsh winhttp reset proxy

For more information about configuration options follow:

netsh winhttp set proxy help