The most convenient way is through the BORICA online store. The request is submitted online and the process includes remote identification. After successful completion, the QES package is delivered by courier to the address specified in the request.

In most cases, the package includes a smart card and a card reader, so that the electronic signature can be used after activation and installation of the required software.

For a standard online request for a QES on a smart card, the package usually includes a smart card and a card reader. The smart card stores the certificate and the signing keys, and access to it is protected by a PIN code.

After delivery, the card is activated and personal PIN and PUK codes are set. The PIN code is used for signing, while the PUK code is used to unblock the card if the PIN becomes blocked.

After delivery, the card is activated. During this process, personal PIN and PUK codes are set for use with the smart card.

The first document signed with the new electronic signature is the trust services agreement. After that, the signature is ready to be used in electronic services, portals and systems that support QES on a smart card.

1. Receive the package with the smart card and card reader.
2. Activate the card.
3. Set personal PIN and PUK codes.
4. Sign the trust services agreement as the first document with the new signature.
5. Install the required software using the automatic installer.

A personal QES is used by a natural person when signing on their own behalf — for example for e-government services, banks, contracts and other documents.

A professional QES is used when the natural person signs in relation to a legal entity, sole trader or professional capacity. It is suitable for managers, legal representatives, employees, authorised persons and others signing in connection with an organisation’s activity.

If the signature will be used on behalf of the company, the appropriate choice is a professional QES. It includes data about the natural person and their relation to the legal entity.

When the request is submitted by the legal representative and the data can be verified in the online process, the request can be submitted through the online store with delivery to the specified address.

If you will sign on your own behalf, the appropriate choice is a personal QES. It can be used for electronic administrative services, document signing, electronic communication with institutions, banks and other organisations.

Yes. For a personal QES, courier delivery is the recommended online option — the request is submitted through the store, remote identification is performed and the package is delivered to the specified address.

For a professional QES, delivery is suitable when the request is submitted by the legal representative and the data can be verified in the online process. When the request is submitted through an authorised person, for a foreign company or under more specific circumstances, additional documents may be required.

Smart cards and card readers are not offered as standalone items through the online store. They are provided as part of an electronic signature request when the selected product includes a carrier and a reader.

No. A QES on a smart card is issued to a specific natural person. Signatures created with it are linked to the person entered in the certificate.

The PIN code is personal and must not be shared with other people — colleagues, accountants, employees, partners or external consultants. If another person needs to sign documents, the appropriate solution is to issue a separate electronic signature in that person’s name.

Yes. One smart card may contain more than one electronic signature when the holder is the same natural person. This is useful, for example, when the same person uses both a personal and a professional QES.

Renewal is requested through the online store. If the current signature is still valid and the data in the certificate has not changed, the process can be completed online.

If the signature expired less than 30 days ago, renewal can still be completed remotely, with remote identification.

If more than 30 days have passed since the expiry date, or if there is a change in the certificate data, a new QES is requested.

B-Trust sends email notifications to the email address entered in the certificate. Notifications are sent 30, 15, 7 and 3 days before the expiry date.

The validity period can also be checked in the B-Trust Public Register.

If up to 30 days have passed since the expiry date, use online renewal through the store. In this case, the process includes remote identification.

If more than 30 days have passed, a new QES is requested.

No. If the data included in the certificate has changed, a new QES is requested.

• change of name;
• change of email address, when included in the certificate;
• change in legal entity data;
• change in representation authority;
• change in professional capacity;
• an employee leaving the organisation;
• change of other data entered in the certificate.

Yes, when this option is available. A smart card has its own lifecycle and older cards may no longer be supported as certified carriers for new issuance or renewal of a QES.

Choosing a new card reduces the risk of technical issues and ensures the use of an up-to-date carrier.

Cloud QES is a qualified electronic signature used through the B-Trust Mobile application. No smart card or card reader is required. Signing is confirmed through the phone.

Install B-Trust Mobile, create a customer profile and follow the steps in the application. The process includes remote identification and activation of Cloud QES.

After activation, signing is confirmed through the mobile application.

Yes. Own documents can be signed in two ways — directly through B-Trust Mobile or through the My B-Trust customer portal.

Through My B-Trust you can upload documents, sign them with Cloud QES or send them for signing to other users.

Yes. With an active customer profile, you receive 3 free signings/identifications every year. They can be used for your own documents or for documents sent to you by another person.

Additional packages can be purchased through B-Trust Mobile.

Yes. B-Trust Mobile can be used in remote identification processes when the respective electronic service supports this method of identification.

In some processes, document signing may also be required after identification. Depending on the service, signing can be performed with Cloud QES or with one-time Cloud QES.

One-time Cloud QES is used for a specific signing in a specific process — for example in a service provided by a bank, insurer, pension company, employer or another relying party.

It is not a general-purpose signature for repeated use. It is issued and used within the specific transaction.

When Cloud QES expires, the process is managed through B-Trust Mobile. When a new certificate is required, the steps are completed in the application.

My B-Trust is a customer portal for working with electronic documents. Through it, documents can be uploaded, signed with Cloud QES and sent for signing to other users.

Access is available to every user with an active customer profile in B-Trust Mobile. Login is confirmed through the mobile application.

Through My B-Trust you can:

• upload your own documents;
• sign documents with Cloud QES;
• send documents for signing to other users;
• receive documents sent to you for signing;
• track document history;
• use the portal as a convenient online channel for electronic signing.

Yes. Upload the document in My B-Trust, specify the recipient and send it for signing. The recipient signs through B-Trust Mobile if they have an active profile and a valid Cloud QES.

Yes, when the process is suitable for work through the customer portal. My B-Trust is convenient for sending and signing documents without building a technical integration.

For automated processes, high volumes or integration with an organisation’s systems, B-Trust business services and integration solutions are more suitable.

Use the B-Trust automatic installer. This is the recommended method because the installer checks the technical requirements, detects the card reader, installs the required smart card software and assists with browser configuration.

After installation, perform a functionality test. Before the test, insert the card into the card reader and make sure the card reader is connected to the computer.

BISS is software for browser-based signing. It is used by electronic services and web systems that require signing with QES through a browser.

The first step is to use the automatic installer. Then check:

• whether the card reader is connected to the computer;
• whether the card is inserted correctly;
• whether the smart card software is installed;
• whether BISS is installed and running when signing through a browser;
• whether you are using a supported browser and operating system;
• whether the certificate is valid.

If the PIN code is blocked after several incorrect attempts, find the PUK code for the card. Then use the smart card software to unblock the card and set a new PIN.

If the PUK code is not available or the card cannot be unblocked, a new carrier and a new certificate may be required.

If you are not sure about the PIN code, do not enter random combinations repeatedly. After several incorrect attempts, the card may become blocked.

Look for the PIN/PUK information. If the PIN cannot be recovered, use the PUK code and the smart card software to set a new PIN.

The PUK code is used to unblock the card. If the PUK code is not available and the card becomes blocked, it is usually not possible to set a new PIN. In this case, a new carrier and a new certificate are issued.

Use the B-Trust Public Register. Valid, invalid, suspended and revoked certificates can be searched there.

You can search by person or company name, email address or serial number.

Checking the certificate shows the certificate status, but the validity of a signed document also depends on the electronic signature placed on the file — for example whether the document was changed after signing, whether the signature was created within the validity period of the certificate and whether the required validation data is available.

To check a signed document, use an electronic signature validation service or software.

A suspended signature cannot be used for valid signing while it has the status “suspended”. This status is used when there is a suspected risk, lost carrier or another situation requiring temporary restriction of use.

If the reason no longer exists, the certificate may be reactivated according to the applicable procedure.

Revocation is final. After revocation, the certificate cannot be used and cannot be restored. If an electronic signature is needed again, a new certificate is requested.

Revocation applies going forward. Documents signed before revocation are verified based on the time of signing, the certificate status at that time and the available validation data.

If the document is important for long-term evidence, use validation and a suitable archive format or service so that evidence of the signature’s validity is preserved over time.

Request certificate suspension as soon as possible. This limits the risk of misuse while the situation is clarified.

Phone: 0700 199 10
Short number: *9910

If the card is not found or there is a suspected misuse, the next step is revocation and issuance of a new certificate.

Log in to My B-Trust from another device and detach the certificates from the lost device. The same can be done from a new device after restoring access.

If there is suspected misuse or access to the profile cannot be restored, use the suspension or revocation channels.

Install B-Trust Mobile on the new device and restore access according to the steps in the application. After that, connected devices and certificates can be managed through My B-Trust.

• Do not share your PIN code.
• Do not provide your smart card to other people.
• Do not write the PIN and PUK codes on the card or on the card reader.
• Lock the phone on which you use B-Trust Mobile.
• If you lose a card or phone, use the suspension or management procedures immediately.
• Carefully review documents and signing requests before confirming them.

All main documents are published in the “Documents” section — templates of powers of attorney, certificate management requests, agreements, general terms, policies and practices, tariff, documents for remote signing and archived versions.

The required documents are published on the “Required documents” page. The requirements differ depending on the service type — personal QES, professional QES, electronic seal, cloud certificate or another product.

A power of attorney is used when requesting, receiving or managing the certificate is carried out through an authorised person.

Use the appropriate template according to the service type and the action to be performed.

When an employee no longer has the right to sign in relation to the organisation, the professional QES is revoked. After revocation, the certificate cannot be used going forward.

For signing as an individual, choose a personal QES or Cloud QES.

For signing in relation to an organisation, choose a professional QES.

For signing through a phone, use Cloud QES and B-Trust Mobile.

For signing your own documents or sending documents to other users, use My B-Trust.

Use the contacts page. In case of a lost card, suspected misuse or the need to suspend/revoke a certificate, use the relevant certificate management page.