User instructions for signing MS-Office documents using our UPC token (Summer release) through the AATL certificate.

Status: May 05, 2023

1 Basics

1.1 Goals of this document

A step-by-step guide to signing MS Office documents. By signing an MS-Office document, other users can no longer edit the final document. Otherwise the document is considered invalid.

2 Short version

Procurement of suitable certificate

The following product type of our UPC tokens allow MS-Office documents to be signed.
✓ UPC Bundle (Summer Release)

The following product types support the signing of MS-Office documents.
✓ COMPANY
✓ SIGNATURE
✓ AUTHENTICATION

✓ An overview of all products can be found here

Note: Your MS-Office document must have a compatible file format. If the current file format of your MS Office file is not compatible, you will be prompted to save the document in a different format. Please follow this prompt. Otherwise you will not be able to sign the document.

Protect document

✓ Select “File” → “Information” → “Protect document” → “Add digital signature”.
✓ In the new window that appears, select the type of commitment under “Type of commitment”, specify the purpose of the signature and select the certificate under “Change…”.
✓ Under “Details” you can add further information about the signer. To add the signature click on “Sign”.

3 Documentation in detail

3.1 Sign MS-Office document

Note: For this process you have to attach your UPC token to your PC.

Click on “File”

Legend:

1. On the top left corner click on “File”

Add digital signature

Legend:

1. Click on “Info” on the left Sidebar → “Protect Document” → Click on “Add a Digital Signature”

Type informations of the signature in

Legend:

1. Choose a “Commitment type”
2. Type the “Purpose for signing this document” in.
3. If you click on the “Details” button you can add more Informations about the signer
4. Choose your certificate after clicking on “Change…”

Password query of the upc token

Legend:

1. Type in your password of the UPC-Token

Signature confirmation

Legend:

1. Click on “Ok” to complete

After a digital signature, the document is protected from any processing or manipulation. If the file is edited after a signature, the document becomes invalid! You can find more information about digital signatures in MS Office documents here.

You might be interested in that

User guide for signing and encrypting emails with the GLOBALTRUST CLIENT certificate on your Apple iPhone
As of May 10, 2023

1 Basic

1.1 Goals of this document

A step-by-step guide on how to add the certificate to your iPhone to then sign and/or encrypt emails. This guide was created for an Apple iPhone (iOS version: 16.2).

1.2 Purchase of suitable certificate

The following product type of our certificates supports the signing and encryption of e-mails on an Apple iPhone
✓ CLIENT

✓ You can find an overview of all products here
✓ You can find general information on signing and encrypting e-mails here

2 Short version

Installation of the certificate

✓ Open our Globaltrust Mail→ Click on the download link → Enter your data → “Send” → Install .p12 file → Allow configuration profile
✓ “Settings” → “Profile loaded” → “Install” → enter the screen password → “Install” → enter the password for the certificate

Add certificate to email account

✓ Search for “Mail” in the settings and click → select the email that belongs to the certificate
✓ Click on “Account” → “Advanced settings” → “Sign” and/or “Encrypt by default”.

Send signed email

✓ Create new email draft → Enter recipient, subject and message → Send

✓ Search for “Mail” in the settings and click → select the email that belongs to the certificate
✓ Click “Account” → “Advanced Settings” → “Sign” and “Encrypt”.
✓ Install the recipient’s certificate.
✓ Create new email draft → Enter recipient, subject and message → Send

Note: With S/MIME encryption, both communication partners require a suitable certificate.

3 Detailed documentation

3.1 Step I – Installation of the certificate

Legend:

1. Open “Mail”

Legend:

1. Open our Globaltrust email.
2. Open the link to download the certificate.

Legend:

1. 1.  Enter the 18-digit reference number (is included in the e-mail)
   2. Enter activation pin
   3. Enter new certificate password

Legend:

1. Install pfx format

Legend:

1. Click “Allow”.

Legend:

1. Click on “Close”

Legend:

1. Open “Settings”

Legend:

1. Click on “Profile loaded”

Legend:

1. Click on “Install”

Legend:

1. Enter “Screen Code” to confirm the installation

Legend:

1. Click “Install”.

Legend:

1. Click “Install”.

Legend:

1. Enter the password of the certificate

Note: This is the password that you entered as the new password when installing the certificate.

Legend:

1. Here we now see the configuration profile which we have set up for a signature or encryption.

3.2 Step II – Add certificate to email account

Now that we’ve installed our certificate and set up our configuration profile, we’re ready to sign emails.

Legend:

1. In Settings, search for “Mail” in the search bar

Legend:

1. Click on “Accounts”.

Legend:

1. Select the e-mail account that is also assigned to the certificate. In this case it is an Outlook mail.

Legend:

1. Click on “Account”.

Legend:

1. Click on “Advanced Settings”

Legend:

1. Under the following sub-items you can activate the signature or the standard encrbyption

Note: With S/MIME encryption, both communication partners require a suitable certificate.

Legend:

1. Click on the controller → Controller turns green and a tick appears next to the certificate.

3.3 STEP III – Send signed email

In order to carry out this section, you have to click on the tab in the sub-item Signing in the last step.

Legend:

1. Open settings.
2. If the “Mail” app has not been closed beforehand, it must be closed once so that the certificate can be used.
3. Open “Mail” app

Legend:

1. Create a new email draft

Legend:

1. Enter the recipient, subject if necessary, and a message.
2. Click on the arrow to send your message

3.3 Schritt IV – Send signed and encrypted e-mail

To carry out this section, you have to click on the tab in the last step, in the sub-item “Sign” and “Encrypt by default”. In addition, with S/MIME encryption, both communication partners must have a suitable certificate.

Before you can send an encrypted message, you must also install the recipient’s certificate

Legend:

1. Click on the recipient whose certificate you want to install.

Legend:

1. Click View Certificate

Legend:

1. Click on “Install”

Legend:

1. After successful installation, click on “Done” at the top right.

Legend:

1. After successful installation, a tick appears next to the recipient’s certificate.

If you have activated the “Standard encryption” then you cannot send an encrypted e-mail to people whose certificate you have not installed. If you try anyway. you will see a crossed-out lock in the recipient bar on the right, as also indicated below.

If you have activated the “Standard encryption” and want to send an e-mail to a person whose certificate you have already installed, then after entering the recipient you will notice that the lock is no longer crossed out and at the top there is an inscription “Encrypted” shows up.

Legend:

1. Click on the arrow to send your encrypted and signed email.

The LDAP service from GLOBALTRUST

The LDAP service can be used to call up additional information about people via their certificates and the certificate itself. All you need is an LDAP-enabled client or a number of programs support LDAP directly (including Microsoft Outlook and Mozilla Thunderbird)

The LDAP directory at GLOBALTRUST has the following basic structure: Root entry: c=AT,
Organization designation o=GLOBALTRUST or o=A-CERT,
Sub-designation ou=<product name> such as “A-CERT ADVANCED” or “GLOBALTRUST QUALIFIED”</product name>

A maximum of 50 hits are displayed for each search. If no search criterion is specified, the first 50 entries are displayed.

What is LDAP?

Lightweight Directory Access Protocol (LDAP) was created to facilitate the standardized exchange of personal information on the Internet.
It can be very helpful for exchanging certificates, especially for encrypted data transmission, which requires the message recipient’s certificate.

GLOBALTRUST uses the latest LDAP version, LDAPv3, which has been defined in a number of RFCs (including RFC3377, RFC3671, RFC3672, RFC3673, …).

What information does the GLOBALTRUST LDAP service provide?

In addition to the certificate itself (UserCertificate;binary), the following certificate information: serial number (serialNumber), e-mail address (mail) and certificate usage (cn) from the certificate.

Furthermore, additional information from the certificate is issued (if included):

– first name (givenName),
– surname (sn),
– Organization details (acertOrganization),
– location (acertLocation),
– Information about the test certificate (acertTestCertificate), X.509 Extension: If the field is present and “true”, the certificate in this node was created for test purposes,
– Management code according to § 19 E-Gov-G (acert management code), X.509 extension: contained in GLOBALTRUST/A-CERT GOVERNMENT certificates,
– Signature creation unit issued by GLOBALTRUST/A-CERT (acertIssuerInfo), X.509 extension: Information on the hardware signature creation unit used,
– Signature creation unit used by the signer (acertSigneeInfo), X.509 Extension: Information according to the signer on the hardware signature creation unit used,
– Identification number of the signature creation device (acertHWID),
– Revocation indicator (acertRevoked): Field “true” if certificate was revoked,
– Revocation date (acertRevokeDate): time of revocation,
– Provisional revocation date (acertTempHold): Time at which a certificate was provisionally revoked (but not yet finally revoked).

In the LDAP service, only those fields that contain applicable information are displayed, empty fields are not displayed. The LDAP service is updated daily.

Online LDAP search

A web interface for the LDAP search, with which you can easily search our database of public certificates, is in the works.

Open source LDAP client

http://www.ldapbrowser.com/ offers a free LDAP client. However, GLOBALTRUST does not guarantee functionality.

You might be interested in that

Step 1: Download Root Certificate

In order to be able to use the GLOBALTRUST signature services, the GLOBALTRUST root certificates must be installed.

Download addresses for important root CA certificates:

• GLOBALTRUST https://www.globaltrust.eu/static/globaltrust2006.crt
• GLOBALTRUST 2015 https://www.globaltrust.eu/static/globaltrust-2015.crt
• GLOBALTRUST 2020 https://www.globaltrust.eu/static/globaltrust-2020.crt
• GLOBALTRUST RKS-CARD 2015 https://www.globaltrust.eu/static/globaltrust-rks-card-2015.crt

Overview of all CA certificates from GLOBALTRUST:

https://www.globaltrust.eu/certificate-policy.html

Step 2: Install Certificates

Depending on the operating version of the iOS, the installation may differ. GLOBALTRUST does not offer direct support for this, but there are numerous installation instructions on the Internet.

Recommended Google search: “iOS Root Certificate install”

Examples of installation instructions:

• https://www.ibm.com/support/knowledgecenter/SSHS8R_7.0.0/com.ibm.worklight.instal…
• https://www.thesslstore.com/blog/trust-manually-installed-root-certificates-in-ios
• https://blogs.technet.microsoft.com/uclobby/2014/01/09/installing-private-ca-root…

You might be interested in that

You might be interested in that

Outlook 2016

This guide is optimized for installing and using certificates with Microsoft Outlook 2016 to sign and encrypt emails. You can find this guide at https://www.globaltrust.eu/static/outlook-anleitung.pdf

In order for signers to be able to create valid signatures when sending emails, the necessary private keys and certificates must be installed in the Microsoft certificate management. The installation process is required once for the Signator.
If the mail recipient has a current Microsoft operating system (including the updates recommended by Microsoft), no activities are required on his part. Signed emails are recognized automatically. Troubleshooting certificate usage in Outlook.
The documentation also contains instructions on how to use the GLOBALTRUST LDAP server and help on setting up an Outlook account for the first time.
The documentation also includes previous guidance for Outlook 2013 and Outlook 2007/2010.

Quick installation for experienced users

Install certificate

• Download the PKCS#12 file from GLOBALTRUST and install it in the Windows certificate manager with a double-click
• In the Outlook options select the settings for the trust center
• Under E-mail security select “Settings…” for Encrypted e-mail messages
• Select signature and encryption certificate, switch hash algorithm to “SHA256”.

Sign/Encrypt

Compose a new message
Show options ribbon
Press the Sign or Encrypt button → Send
To encrypt a message, a certificate from the recipient is required (see documentation)
GLOBALTRUST creates private key and certificate

If GLOBALTRUST creates the private key and issues the certificate, the signer receives a single file in PKCS#12 format (.P12 extension) that contains the private key, their own certificate and all information on the certification path.
After successful installation (see below) you will receive a certification path that looks like this:

“GLOBALTRUST” → “GLOBALTRUST CLIENT 1” → “your end user certificate” or
“GLOBALTRUST 2015 ” → “GLOBALTRUST 2015 CLIENT 1” → “your end user certificate” or
“GLOBALTRUST 2020 ” → “GLOBALTRUST 2020 CLIENT 1” → “your end user certificate”

Note: due to specific requirements, other certificate chains are also possible, but they all start with GLOBALTRUST.

Certificate usage in Outlook with multiple email addresses

Outlook only accepts certificates for signing e-mails that contain exactly the same e-mail address as the active user account. If someone wants to sign at different email addresses, then he needs several certificates. You can find out how to display the certificates here.

You might be interested in that

User guide for signing PDFs using PKCS12-based certificates as of April 13, 2023

1. Procurement of suitable signature certificates

PDFCreator allows the automated signing of all printed documents using PKCS-12 based signature and seal certificates. The following GLOBALTRUST product types are delivered as PKCS12 files by default and are therefore suitable for PDF signatures according to these instructions:

✓ SIGNATURE
✓ COMPANY

✓ You can see an overview of all our products here

2. Open printer settings

PDF Creator home interface

Legend:

1. Choose „Printer“
2. Open „Settings…“

3. Open settings for PDF

Legend:

1. On the left side under “Formats” select the format “PDF”.

4. Open settings and set parameters for signatures

Legend:

1. Select the “Signing” tab on the right-hand side
2. Select ​​”Sign PDF file”
3. Select certificate file (you can find the required PFX file on the GLOBALTRUST download page under ITEM I)
4. Optionally state signature reason, signature contact, signature location
5. Optionally select “Signature visible in PDF file” below

Overview

X.509 certificates are digital data, which means that anyone can create an X.509 certificate with any content. Due to this fact, several mechanisms have been put in place to verify that a certificate is valid and trustworthy.

Trust

A central concept when checking X.509 certificates is trust. Trust in a certificate is a necessary condition for the validity of a certificate. Most of the time, software that uses X.509 certificates is delivered with one or more root certificates, which the software (e.g. Microsoft certificate management) evaluates as “trusted” a priori. In addition, the EU member states maintain their national trust lists, which are summarized in the European trust list (EU Trust List EUTL). It contains qualified trust services in accordance with the eIDAS-VO.

Certificate Verification

The following steps are carried out (not necessarily in this order) to check the validity of a certificate:

• Verification of the signature
• Verification of the validity period
• Checking the revocation status
• Verification of trust (certificate path)

If one of these steps fails, the certificate is invalid and, depending on the software, a more or less exact error message or warning is issued.

Verification of the signature

Each X.509 certificate is signed with the private key of the issuer of the certificate. The signature can be checked using the associated public key. If the signature verification fails, the document was a) never signed or b) the document has been modified since the signature.

Gain an overview of all our Signature and Trust Services

Verification of the validity period

In each X.509 certificate, a period of validity is specified by means of a start date and an end date. If the current system time is before the start date or after the end date, this check is negative. Depending on the type of certificate, different upper limits are set for the period of validity. For SSL certificates, currently around 1 year.
Expired certificates can no longer produce valid signatures – however, signatures set before expiry remain valid later. Software that issues an error here does not work in accordance with the standard.

Checking the revocation status

Each X.509 certificate can be revoked by the issuer. Information is stored in the certificate on how the revocation status of the certificate can be checked. The check can trigger a connection from the checking software to a server of the issuer, which is used to query the revocation information. GLOBALTRUST offers the methods CRL and OCSP to check the revocation status. The revocation status check fails if a) the connection to the revocation information server fails or b) the checking software receives the information that the certificate has been revoked.

Especially with OCSP it is necessary to actually be online. It is sufficient if port 80 is enabled for this check. If the direct connection cannot be secured, online verification should be disabled. Some software then brings up a message in the form that a “Check of the current validity status of a certificate could not be carried out”. However, this does not affect the actual validity of a signed document.

If there are justified doubts about the validity of a document, there is always the option of inquiring directly with GLOBALTRUST. Then the validity is checked manually. If asked, GLOBALTRUST needs the serial number of the certificate, the name of the certificate and the date the document was signed.

Verification of trust (certificate path)

During this check, the checking software searches for the issuer certificate of the certificate to be checked and carries out a complete certificate check of this certificate. Of course, this again triggers a check of the issuer certificate of this certificate, and so on, until a certificate is checked where the issuer and subject are the same (self-signed certificate – root certificate). This check ends successfully if, in the course of checking this certificate path, a certificate is found that the software trusts (see the “Trust” section). It fails if a) an issuer certificate cannot be found or b) the verification has arrived at the end of the certificate chain (self-signed certificate) and this certificate is not trusted.

Useful tools for certificate and signature verification

• Signature and seal verification RTR: https://www.rtr.at/TKP/was_wir_tun/vertrauensdienste/Signatur/signaturpruefung/Pruefung.en.html
• Signature and seal verification EU Commission: https://ec.europa.eu/digital-building-blocks/DSS/webapp-demo/validation
• Certificate verification EU Commission: https://ec.europa.eu/digital-building-blocks/DSS/webapp-demo/certificate-validation
• ETSI Signature Conformance Checker (access required): https://signatures-conformance-checker.etsi.org/pub/index.php

1. User guide for installing PKCS12-based certificates, signing documents and assigning qualified time stamps in Adobe Acrobat Reader DC
   As of June 22, 2022

    

1 Basics

1.1 Goals of the document

A step-by-step guide to installing the necessary certificates to be able to sign pdf documents and assign qualified time stamps.

1.2 Change history

2 Short Version

Procurement of suitable signature certificates and time stamps

The following product types are delivered as PKCS12 files by default and are therefore suitable for PDF signatures according to these instructions:

✓ SIGNATURE

✓ COMPANY

For the assignment of qualified time stamps:

✓ QUALIFIED TIMESTAMP

✓ An overview of all products can be found here

Verifying the installation of certificates

✓ Open Preferences, select the „Signatures“ category and open the „Identities and Trusted Certificates“ settings.

✓ In the new window that appears, look for your own certificate in the list. If it is in the list, close the window, otherwise it still has to be installed (ð 3.1.3      See all installed certificates p.6)

✓ In the lower half of the settings for “Validation” in “Windows Integration” select the checkbox to verify signatures with certificates already present in Windows ð Complete

Add Timestampserver

✓ Open the settings for “Time stamps for documents” in the preferences under “Signatures” on the right side.

✓ Open the window for adding a timestamp server, give it a name, specify the server (for GLOBALTRUST: https://timestamp.globaltrust.eu:13080) and enter the login data you received ð Complete

Sign pdf document

✓ Open pdf-Document

✓ In “Tools” select “Certificates” tool

✓ Select “Sign digitally” in the toolbar at the top of the document.

✓ Follow the Instructions of Adobe Acrobatð Complete

Check Signature

✓ Open signed pdf document

✓ Note the blue banner at the top of the image

✓ Select signature field in document and read signature details ð Complete

3 Documentation in detail

3.1 Step I – Check the installed certificates

3.1.1 Open Settings

Legend:

1. Choose„Edit“
2. Open„Preferences…“

3.1.2 Open certificate options

Legend:

1. Select “Signatures” in the categories
2. On the right side under “Identities and trusted certificates” click on “More…”.

3.1.3 See all installed certificates

Select “Windows Digital IDs”.

Legend:

1. If the personal certificate has already been installed on Windows, it will appear here. Select the desired certificate. The window can be closed.

3.1.4 Verification settings

Legend:

1. On the right side under “Verification” click on “More…”.

3.1.5 Activate windows-Integration

Legend:

1. In the lower half of the window under “Windows integration” select the checkbox “Verification of signatures”. This allows Adobe Reader to check signed pdf files using the root certificates installed in Windows.
2. Press “OK” to close the settings window → Complete

3.1.6 More Settings

Legend:

1. Optionally, the visual appearance of the signature can be changed under “Creation and Appearance”..
2. Confirm with “OK” and exit the settings.

Note: These are purely optical measures and have no effect on the validity of the signature!

3.2 Step II – Add Timestampserver

3.2.1 Timestamp settings

Requirements: In order to be able to create signatures with qualified time information, qualified time information generated by a time stamp server is required.

Legend:

1. To configure the time stamp server, click on “More…”..

3.2.2 Add Timestampserver

Legend:

1. In the new window that appears, click on “Time stamp server”.
2. Click the Add Server icon

3.2.3 Timestampserver settings

Legend:

1. Give the server a name, suggestion: GLOBALTRUST QUALIFIED TIMESTAMP
2. Enter the server URL: it can be both https://timestamp.globaltrust.eu:13080, or https://timestamp.globaltrust.eu used
3. The login data issued by GLOBALTRUST are to be used here.
4. Confirm to save settings and close the window.

3.2.4 Set default Timestampserver

Legend:

1. The newly added timestamp server appears in the list of existing servers.
2.  If no timestamp server was previously available, the newly added one must be set as the default. To do this, click on the button at the top right with the label “Define default settings”..
3.  Click “OK” to confirm the security message → Complete

3.3 Step III – Sign pdf document

3.3.1 Open document for signing

Legend:

1. Navigate to the desired file and open it with Adobe Reader DC.

3.3.2 Go to tools

Legend:

1. Click on “Tools” in the top bar
2. Choose certificate

3.3.3 Choose certificatestools

Note:

There are three tools to choose from in the top bar:

1. “Sign digitally” to add a signature to the pdf file
2. “Timestamp” to add a timestamp to the pdf file that specifies when the file was last modified
3. “Verify all signatures” to verify signatures added to the pdf file.

Legend:

1. Click on “Sign digitally” to add a signature.

3.3.4 Note on adding certificates

Legend:

1. The text explains how to use the tool. Click “OK” to confirm.

3.3.5 Set signature

Legende:

1. Use the mouse (the mouse pointer has turned into a cross) to drag a blue rectangle into a free space in the document. After releasing the mouse pointer, a window appears.
2. If there are several certificates: select the desired certificate → Continue

3.3.6 Choose certificate and change the looking

Legend:

1. If more than one certificate is installed, the desired one can be selected here. Click the down arrow to view the list.
2. If there are no changes to be made to the presentation, click Sign.
3. Optionally, the document can be locked after signing.

3.3.7 Save signed document

Legend:

1. Give the signed document a name.
2. Click on “Save” to complete the process.

3.3.8 Confirm Timestampserver

Legend:

1. This security warning appears on the first pdf file to which a time stamp is added. Click on “Allow” to confirm that the server should be used → Finish

3.4 Step IV – Check signature

3.4.1 Check Signature

Legend:

1. When opening a signed file, a blue banner appears at the top of the screen. This indicates that the file is signed and indicates whether the signature is valid or invalid, or if there are any other problems with the signature.
2. The file also contains a signature field. With a left click on it, details on the validity of the signature and the creator of the signature can be viewed.

3.4.2 Details of signaturevalidation

Legend:

1. This shows who signed the file, whether the document was modified after it was signed, and whether the signer’s identity is valid.
2. Click on “Signature Properties…” for more details

Signature property →

Legend:

1. The certificate used and the certificate path can be displayed under “Show certificate of issuer…”.

3.4.3 Duration and exhibitor

Show issuer’s certificate →

Legend:

1. After determining the origin of the certificate, click on “OK” to close the window. → Finish

Advanced Properties →

Show the certificate of the timestamp server

Show certificate →

As a qualified trust service provider, we are required by Art 24 eIDAS Regulation to verify the identity of our customers. There are several ways to do this. However, identification is particularly convenient and fast using Videoident – online identification via video chat. This enables our customers to register for all services and products in just a few minutes, easily and in a legally secure manner. Worldwide, video identification works for ID documents from almost all countries.

Know your customer

Qualified trust services have legal effects – for example, an electronic signature replaces the owner’s handwritten signature and thus enables contracts to be concluded completely digitally. The signature data must not fall into the hands of unauthorized persons. Similar to the provisions in banking, the eIDAS Regulation, therefore, requires trust services to be issued only to persons identified beyond doubt.

Videoident – eIDAS-compliant identity verification online

We are very pleased to provide our customers worldwide with a precise video authentication that complies with all legal requirements – eIDAS, AML (Anti Money Laundering), KYC (Know your Customer principle).
Video identification takes place online via video call and is completed in just a few minutes: all you need is an Internet-enabled device (computer, cell phone, tablet) with a camera.

Products and solutions from GLOBALTRUST – security and trust included

Those who know us know: We have high demands on all our solutions. They have to be user-friendly, i.e. quick and easy to use, of course, one hundred percent legally compliant and, in addition, applicable worldwide, so that we can also serve our international customers to the same extent. We apply the same standards when it comes to clearly identifying our customers. For all GLOBALTRUST products, especially TRUST2GO®, the following applies: In order to prevent signature abuse and to ensure that the activation data only reaches the verified recipients, we strictly check the identity of our customers during the initial registration.

Identity verification options – analog and digital

There are several proven options for identity verification. The simplest, physical-analog option: In-person-ID check. The problem with this: the lack of time when deadlines need to be met and you are not in Vienna.

For some countries we rely upon a postal procedure: Austrian Post’s “Ident.Brief” fulfils the legal framework for establishing your identity in every respect. Your identification is also carried out by physically recording your ID data – but on your premises. This means that the identity check takes several days.

Videoident procedure – highly secure online identification

Our digital alternative: Videoident. Online authentication via video call is very simple and takes place in three steps:

1. You enter your data as usual in the ordering process.
2. You receive a link. A call center employee accompanies you through the identification process via video chat – in German or English, as you prefer. (For other languages, please reach out in advance.)
3. You receive your product

That’s all you have to do to register for our products. The advantages of video identification are obvious:

1. It is the fastest way to prove your identity in a legally secure way -.
2. … the identification happens in a few minutes – (almost) no matter where in the world you are.
3. You can use any Internet-enabled device with a camera for this purpose – …
4. … the process is completely free of media discontinuity
5. … and is available to you daily between 7:00 and 22:00 Berlin Time in German or English.
6. The Videoident process complies with all legal requirements
7. … and ensures that your data remains 100 percent on European soil.

Which countries/documents are supported?

• Please see the current  countries list  (as of 22. May 2022)