What is authentication?
Today, most online services require their users to provide proof of their identity. This process is known as authentication.
The authentication procedure can be completed with 3 methods:
- something you know (e.g. your password);
- something you have (e.g. your electronic identity card);
- something unique only you possess (e.g. your fingerprints).
A strong authentication procedure is a 2-step authentication which requires 2 of the 3 aforementioned methods to provide proof of your identity.
What is an electronic signature?
The electronic signature for digital tools is the same as the manual signature on paper:
- it allows to identify the signatory;
- it manifests the signatory's accession to the content of the agreement.
But in addition, as an integral part of the agreement, it guarantees the authenticity through cryptographic techniques. This is why it is:
What is an electronic ID card and who can use the certificates it contains?
An electronic ID (or eID) card is a card with an electronic chip that contains digital data and 2 electronic certificates that allow the holder to authenticate themselves and/or to sign online documents in various web applications.
They can be used by any person of legal age who has requested the activation of the certificates at the time of application for their electronic identity card (eID) or by minors of at least 15 years of age for whom the activation of the certificate was requested by either a parent with parental authority or by their legal guardian.
Electronic certificates cannot be activated for ID cards issued to minors under 15 years of age and to adults who lack legal capacity.
These certificates are strictly for personal use only.
What data is stored in the chip on my identity card?
The chip contains the legible information printed on the ID card, the data required for electronic authentication and signature, the home address of the holder, his/her national identification number and an uncoded image of the holder's face.
What equipment is required to use the electronic features of the identity card?
You will need a card reader and have to install a specific application on your computer. The reader can be purchased at the Government IT Centre (CTIE) (11, rue Notre-Dame, L-2240 Luxembourg) as well as in certain communes.
The required software application (middleware) can be downloaded for free on the LuxTrust website
How do you electronically sign or authenticate yourself online?
After you have installed the application (middleware) and the electronic identity card (eID) is detected by your card reader, a pin request (secret code) will pop up on the screen. You must then enter your PIN code for the first time.
After that, you are requested to enter your PIN code each time at each authentication request from applications your usually use or whenever you need to sign a document electronically.
Is a minor entitled to receive a LuxTrust certificate and to activate electronic authentication and signature rights?
The activation of electronic authentication and signature rights is only possible for young persons over 15 years of age at the time of the application for an identity card.
Young persons over 15 years of age must accept the contractual terms and conditions of LuxTrust in order to activate their certificate. The contractual terms and conditions must also be signed by a parent with parental authority or by the legal guardian of the minor.
The activation of the electronic authentication and signature is not possible if the application is submitted during the 14 days preceding the young person's 15th anniversary.
I have lost the PIN I need to authenticate or sign. What should I do?
If you have lost or forgotten your PIN, you can unlock it using the PUK (Personal Unblocking Key) code for your certificate that you received by post.
It is highly recommended that you have the latest version of the middleware installed.
All step-by-step unlocking procedures are can be found on the LuxTrust website.
You have a limited number of attempts to unlock the card. Please contact the LuxTrust Helpdesk if this does not work after 2 attempts.
When and how can I apply to have my ID-card electronic certificates activated?
Electronic identity-card holders over the age of 15 may ask to have their electronic certificates activated only when they apply for the card. In that case, the applicant must provide a contact email address and agree to the general terms and conditions of use of the certificates.
Therefore, the certificates may be used only if the request was made at the time of enrolment. In other words, if the holder decides not to have their electronic certificates activated when applying for a new ID card, their decision is irreversible.
Initially activated certificates may be revoked upon request.
For minors younger than 15 years of age, the certificates may be activated only with the permission of a parent or legal guardian. The parent or the guardian must sign the request for activation of the certificates and accept the general terms and conditions of use of the certificates.
Electronic certificates cannot be activated for ID cards issued to minors under 15 years of age, or to adults who lack legal capacity.
Can someone else get access to the data on my certificate?
Acces to the chip on the electronic identity card (eID) is protected by your PIN code. Your data cannot be accessed by a third party, even if a person comes close to your wallet or handbag with a contactless eID card reader.
I already have a LuxTrust product. Can I transfer the LuxTrust certificate to my identity card?
No. It is not possible to transfer the certificate number from another LuxTrust product to the electronic identity card.