Enterprise Certificate
The company’s digital ID and stamp,
– also known as eSegl or eSeal.
safety
When you use an Enterprise Certificate for reporting on behalf of the company, you know that you are reporting for the correct company and avoid using your private identification.
eSeal
What is an Enterprise Certificate?
An Enterprise Certificate, also called eSeal or eSegl, is your company’s digital credential and used to identify the company and enter into agreements. Some of the most common applications are:
- Reporting to public authorities, e.g. Altinn, the Tax Administration or the Financial Supervisory Authority of Norway
- Authentication of the company, e.g. to Elhub, the Norwegian Tax Administration’s APIs and the Debt Register
- Digital signing
Commfides’ Enterprise Certificate follows strict security requirements and is approved for use both in Norway and throughout the EU.
Our Enterprise Certificate
Standard Enterprise Certificate
- 3 years validity
- NCP level – Normal Certificate Policy
- Soft token
- SEID 2.0
- 3072 bit RSA
NCP is a high level of validation.
Can be delivered with customer-generated key and elliptical curves.
EU Qualified Seal (QCP) delivered on card (QSCD)
- EU Qualified Seal (QES), highest security level
- On the EU trusted list. Enforceable throughout the EU/EEA
- PDF signing certificates approved by Adobe (AATL) worldwide
- Cards with certificate are delivered with card reader and sent by mail
- SEID 2.0
- 3072 bit RSA
Test certificate
- 3 years validity
- NCP level – Normal Certificate Policy
- Soft token
- SEID 2.0
- 3072 bit RSA
Commfides generates key. Can be delivered as LCP, NCP or NCP +.
Can be delivered with customer-generated key and elliptical curves.
This is how the delivery takes place:
1. Order
Fill out the digital order form here.
When the form is completed, it is signed by a person with a role in the Brønnøysund Register, e.g. authorized signatory or authorized signatory.
2. Production
We validate the business according to public registers. The business certificate is sent within 3 working days after the order has been received and approved.
3. Delivery
The business certificate is delivered to the registered recipient. The PIN code is sent separately, digitally afterwards. The recipient confirms that the Enterprise Certificate has been received.
Common uses for the Enterprise Certificate
Altinn
All types of companies in Norway report A-melding to Altinn. The A-melding can be sent through the payroll system, via an accountant or directly to Altinn. By using an Enterprise Certificate, you make reporting flexible and correct.
Signing in the EPREL database
In order to register electrical products in the EU's energy label database (EPREL), companies must use an EU Qualified eSeal (QSCD) to meet EU reporting requirements. Commfides QSCD eSeal fulfills the requirements and can be used to register the necessary information in the EPREL system.
Skatteetaten
The Norwegian Tax Administration (Skatteetaten) has several digital services that make it easy for businesses to gain access to their data. One of them is access to an electronic tax card for employees. Enterprise certificate can be used to gain access.
Signing of digital diplomas and certificates
Schools and educational institutions can issue certificates and diplomas that are legally valid when digitally signed with a qualified eSeal (QSCD). This gives both the recipient and the employer confidence that the documentation is genuine and reliable. Commfide's QSCD certificate is approved for use throughout the EU and a signed diploma is thus recognized across national borders in the EU.
Maskinporten
Maskinporten has been developed by the Norwegian Digitalisation Agency (Digitaliseringsdirektoratet) and makes it possible for companies to share information in a secure way. All companies that will use Maskinporten need an Enterprise Certificate.
Skatteetaten
The Norwegian Tax Administration (Skatteetaten) has several digital services that make it easy for businesses to gain access to their data. One of them is access to an electronic tax card for employees. Enterprise certificate can be used to gain access.
Elhub
There is a requirement that all message exchange in the electricity supplier network Elhub is encrypted with an enterprise certificate. The certificate must be issued to the organization number that signs the message.
Reporting of sick leave
NAV facilitates digital follow-up and reporting of sick leave. An Enterprise Certificate is used to identify the company digitally and meet the requirements for secure communication.
Explanations of key terms for the Enterprise Certificate
LCP
LCP stands for Lightweight Certificate Policy and is the lowest security level. LCP certificates thus have simpler validation and lower requirements for ordering and delivery and are used when there is a need for secure identification, but the requirements are not strict. LCP certificates are well suited for automated systems and digital services with lower risk, providing security and reliability in electronic communication.
NCP
NCP stands for Normal Certificate Policies and is Commfides' standard Enterprise Certificate. NCP certificates offer a higher level of security than LCP, without compromising on usability or flexibility. Where LCP is suitable for simpler, automated systems, NCP is better suited for businesses that require secure authentication and signing in accordance with national and European requirements. With NCP, you get stronger identity control at issuance and thus greater trust in digital processes - a combination of high security and broad applicability.
NCP+
NCP+ is an extended version of NCP, with stricter requirements for the ordering and delivery process, as well as technical security. It provides a higher level of trust and is often used in services where extra security is needed, but where the very highest (qualified) level is not required.
QCP
QCP stands for Qualified Certificate for electronic Signature and is the highest trust level for digital certificates according to the EU eIDAS regulation. A QCP confirms the identity of a person or entity and is used, for example, to create qualified electronic signatures with full binding legal validity throughout the EU/EEA - in the same way as a handwritten signature.
QSCD
QSCD stands for Qualified Signature Creation Device and is an approved technical device or software used to create electronic signatures with the highest level of security, according to the EU eIDAS regulation. A QSCD protects the user's private key and ensures that the signature is legally binding and cannot be forged.
Test certificate
All types of Enterprise Certificate can be ordered as a test certificate for use in test environments. Test certificates have no requirements for approval.
eIDAS
eIDAS stands for electronic IDentification, Authentic and trust Service and is an EU regulation aimed at increasing digital interaction across national borders. All Commfides certificates are issued at eIDAS level.
eIDAS 2.0
eIDAS 2.0 is an updated version of the eIDAS Regulation and introduces, among other things, the new EU Digital ID Wallet - a digital wallet where citizens can store and use their identity and important documents (such as driving licenses, diplomas, etc.) digitally throughout the EU. This gives citizens greater control over their own digital identity and makes it easier and safer to use public and private digital services.
SEID 2.0
SEID 2.0 is a Norwegian standard for digital certificates and electronic identity. It is used to ensure secure identification and signing in both public and private services, and is adapted to the requirements of the EU eIDAS Regulation.
Administration of e-ID
E-ID Portal
All customers who want free access to the e-ID Portal, which makes it easy and clear to manage your company’s Enterprise Certificates.
OVERVIEW
The portal provides a full overview of all the company's Enterprise Certificates, as well as the status of deliveries and invoices.
ADMINISTRATION
With the E-ID Portal, administration is easy. You can order, cancel or renew Enterprise Certificates with a click. One or more administrators get access to manage the Enterprise Certificate for your company.
SSL reseller
The E-ID Portal makes it easy to become a reseller of Enterprise Certificates. As a reseller, you can manage Enterprise Certificates for as many customers as you want without losing track.
FAQ - Frequently asked questions about Enterprise certificate
An enterprise certificate is a digital proof of identity for businesses. The enterprise certificate functions as the company’s electronic identity in various contexts that require authentication, for example signing electronic documents, logging in on behalf of the company, reporting or connecting to APIs. An enterprise certificate can be used by individuals manually or in automatic processes between machines.
In a technical sense, the enterprise certificate is a digital certificate that confirms the company’s identity. The information about the company in the certificate has been verified by an approved certificate issuer, a so-called CA – Certificate Authority. Commfides is one of the approved issuers in Norway. The enterprise certificates we issue follow the international X.509 standard for digital certificates within Public Key Infrastructure
The enterprise certificate confirms the company’s identity using PKI – Public Key Infrastructure. The certificate contains a public key that is available to everyone and a private key that only the company has access to. The certificate links the public key to the company, based on the issuer’s check of the company information. The certificate can thus be used to establish a secure connection between the company and the other party.
This confirmation forms the basis for a number of digital actions that the company is involved in, for example connecting to various public services such as the Tax Administration’s APIs, signing tenders and reporting to Altinn. If an employee uses their private e-ID for these purposes, uncertainty arises as to who commits to the action. An enterprise certificate creates a clear distinction between private and professional roles.
The enterprise certificate can be used to log into or gain access to a number of public services such as ID-Porten, the Tax Agency’s APIs and Helsenett. It can also be used for reporting, such as:
- Sick leave reporting to NAV
- A message to Altinn
- Reporting of value transactions to the Norwegian Financial Supervisory Authority
- For energy companies to Elhub
- Reporting to the Norwegian Petroleum Directorate
Enterprise certificates can also be used to secure message exchange within the public sector.
Another important area of use is the signing of tenders and contracts. Here, the certificate streamlines the process, and helps to minimize the risk both for the signatory, for the supplier and for the purchaser. If the tender process is carried out electronically, an electronic signature may be mandatory. A signature with an enterprise certificate is, in contrast to a personal signature, binding for the company.
You can order an enterprise certificate on Commfides’ website. The order form for a enterprise certificate can be found here. The certificate is sent to the recipient via encrypted e-mail, while the password is handed out separately when attending in person (see also the next point). Delivery time is normally three to five working days, but can vary with demand – allow plenty of time when ordering.
The person ordering the enterprise certificate must have a role in the company that is registered and visible in the Brønnøysund Register. Examples of such roles are general manager, councillor, contact person, authorized signatory or authorized representative. It is also possible to authorize individuals in the company to order enterprise certificates. In that case, the order must be signed by one of the persons with a role as described above. The person who receives the power of attorney can order enterprise certificates either via the order form or in Commfides’ e-ID Portal.
The recipient of the enterprise certificate will receive it by e-mail. The password for the enterprise certificate must be sent separately. It can either be sent with Posten’s PUM service for collection at the post office (which is linked to the recipient’s address), or the recipient can collect the password by attending in person at Commfides, at Lysaker in Oslo. The recipient must be able to show a valid passport, possibly a national or European ID card.
For those who need several enterprise certificates, whether it is for their own business, or on behalf of customers in the role of dealer, there is a good solution. Commfides provides access to a web-based tool, called the e-ID Portal, where a person from the business can order, manage and keep track of certificates. The portal provides an overview of the status of ordered certificates and simplifies both the ordering and delivery process. The portal is free and is suitable for those who need the majority of certificates and who want a good overview.
Enterprise certificates follow a common European standard in line with EU regulations. The so-called eIDAS regulation, which entered into force in 2018, regulates electronic identification and trust services. New enterprise certificates are issued according to the national certificate profile SEID 2.0. These certificates have increased security with stronger cryptography than before, and can be used across European borders.
