eSeal
Enterprise certificate / eSeal
The company’s digital ID and stamp.
Used for digital reporting, authentication with APIs, digital signing, and the secure exchange of information.
Fast delivery
Usually within 2 business days
6,200 NOK, excluding VAT
For a 3-year lifespan
Qualified Certificate
Meets Norwegian and European requirements
Our Enterprise certificates / eSeals
Standard Enterprise certificate / eSeal, 3 years (EU-qualified)
Used to authenticate the business in digital services and integrations, including with Maskinporten, Digitoll and Elhub.
Unlimited OSCP, CRL, and
UNID lookups
Product specifications:
På EUs trusted list – Rettskraftig i hele EU/EØS
NCP level (high validation level), SEID 2.0, 3072-bit RSA
PDF-signering – Godkjent av Adobe (AALT) i hele verden
Valid for 3 years
3 separate certificates, each with its own key pair
Unlimited OCSP/CRL/UNID lookups
Soft token, delivered digitally
Can be provided with a customer-generated key and with elliptic curves
All prices are ex. VAT
EU qualified seal (QSeal/QSCD)
Used to seal documents, sign PDFs, and verify a company’s identity throughout the EU, for example in EPREL.
Includes unlimited OSCP, CRL, and
UNID lookups
PRODUKTSPESIFIKASJON
On the EU trusted list - Enforceable throughout the EU/EEA
Highest security level in the EU
PDF Signing – Approved by Adobe (AALT) Worldwide
Valid for 3 years
3 separate certificates, each with its own key pair
Unlimited OCSP/CRL/UNID lookups
Hard token, QCP level, SEID 2.0, 3072-bit RSA
Delivered on a smart card with a card reader – sent by mail
All prices are ex. VAT
Test certificate 3 year
For development and testing in a test environment prior to production deployment, including integration with Maskinporten, Digitoll, and Elhub.
Includes unlimited OSCP, CRL, and
UNID lookups
PRODUKTSPESIFIKASJON
Can be delivered as LCP, NCP or NCP+ (Standard NCP)
Valid for 3 years
3 separate certificates, each with its own key pair
Unlimited OCSP/CRL/UNID lookups
Soft token, SEID 2.0, 3072-bit RSA
Delivered digitally
Can be provided with a customer-generated key and with elliptic curves
All prices are ex. VAT
Approved for use in Norway and the EU
Commfides' Enterprise certificate complies with the strict security requirements of the eIDAS Regulation and is approved for use in both Norway and throughout the EU.
eSeal
What is an Enterprise certificate?
An Enterprise certificate, also known as an eSeal, is a business’s digital ID and seal. It is used to identify the business in digital services and system integrations. Some of the most common uses are:
- Authentication for APIs and public digital services
- Integration with Maskinporten
- Reporting to Digitoll and Digital Interaction with the Norwegian Customs and Excise Authority
- Secure Message Exchange with Elhub
- Reporting to the Debt Registry and the Debt Portal
- Digital Signatures, Electronic Signatures, and Encryption
Enterprise certificate for Digitoll
Here's what you need to get started with Digitoll
For businesses that plan to connect directly to the Norwegian Customs and Excise Authority’s Digitoll APIs, an Enterprise certificate is an important part of the setup for Maskinporten. Many start with a test certificate for the test environment before the solution goes into production. Click the button below to learn more about how to get started with Digitoll.
This is how it works:
1. Ordering a Certificate
Fill out the digital order form here.
Once the form is completed, it must be signed by a person with a designated role in the Brønnøysund Register, such as an authorized signatory or a person authorized to sign on behalf of the company.
2. Validation and Production
We verify the business based on public records. The Enterprise certificate will be sent within 3 business days after the order is received and approved.
3. Issuance of a certificate
The Enterprise Certificate is delivered to the registered recipient. The PIN code is sent separately, digitally, afterward. The recipient confirms receipt of the Enterprise Certificate.
Uses for the Standard Enterprise certificate / eSeal
The Enterprise certificate is used to authenticate the business and ensure secure digital interaction with public and private services.
Digitoll
An Enterprise certificate is used in the setup for Maskinporten when the business itself needs to send Digitoll messages or documents to the Norwegian Customs and Excise Authority via the API.
Maskinporten
An Enterprise certificate can be used to authenticate the enterprise's systems with Maskinporten when accessing public APIs.
Elhub
An enterprise certificate is used to sign messages and identify the enterprise conducting the electronic exchange with Elhub.
KS Fiks / Municipal Sector
Organization certificates are used in several Fiks integrations for authentication via Maskinporten. In Fiks OI, which is part of the Fiks platform, certificates can be used to sign and encrypt messages.
The National Population Register / The Tax Administration's APIs
An Enterprise certificate can be used for client authentication with Maskinporten when the enterprise retrieves data from the National Population Register or other data-sharing services provided by the Norwegian Tax Administration.
The Debt Registry and the Debt Portal
An Enterprise certificate is used as a client certificate for reporting and exchanging debt information between financial institutions, service providers, and debt registries.
DSOP – Public and Private Data Sharing
Used in certain DSOP services, including the Consent-Based Loan Application, to ensure secure access and data exchange between banks and government agencies.
Health and Electronic Data Exchange
Used to sign and encrypt electronic messages between healthcare providers, including e-prescriptions and certain settlements with Helfo.
Applications for Qualified eSeals (QSeal / QSCD)
EPREL (EU)
The Qualified eSeal (QSeal) is used to seal the company's verification file and document the company's identity during supplier verification in EPREL.
EPREL (EU)
Kvalifisert eSegl brukes til å forsegle virksomhetens verifikasjonsfil og dokumentere virksomhetens identitet ved leverandørverifisering i EPREL.
Digital Certificates and Diplomas
A Qualified eSeal (QSeal) can be used to seal digital certificates, diplomas, and other proofs of learning, allowing the recipient to verify the issuer and check whether the content has been altered.
e-ID Portal
Administration and Renewal
With Commfides’ e-ID Portal, you get a complete overview and full control over all of your company’s Enterprise certificates. The portal is free and can also be used to issue Enterprise certificates to customers.
Overview of Certificates and Deliveries
Status and Expiration Dates
Easy ordering, renewal, and suspension
More users
Issue Enterprise certificates to customers
Skal virksomheten registrere produktpass i DPP-registeret?
EUs sentrale register for digitale produktpass (DPP) er nå åpent. Før virksomheten kan registrere produktpass, må den verifiseres som juridisk enhet. Til dette trenger dere et kvalifisert elektronisk segl. Commfides er en kvalifisert tillitstjenesteleverandør (QTSP) og leverer kvalifiserte elektroniske segl som er anerkjent i hele EU. Bestill kvalifisert e-segl fra Commfides og gjør virksomheten klar for DPP-registeret.
- Privat nøkkel beskyttet av QSCD (Qualified Signature Creation Device)
- Sertifikat med validert virksomhetsnavn, land og organisasjonsidentifikator
- Kan legge kvalifisert PAdES-segl direkte i PDF-erklæringen fra DPP-registeret
- Personlig kundestøtte alle virkedager mellom 08.00 – 17.00
Enterprise certificate / eSeal encyclopedia
LCP – Lightweight Certificate Policy
LCP stands for Lightweight Certificate Policy and represents the lowest security level. LCP certificates therefore have a simpler validation process and less stringent requirements for issuance and use, and are used when secure identification is needed but the requirements are not strict. LCP certificates are well-suited for automated systems and digital services with lower risk, and provide security and reliability in electronic communications.
NCP – Normal Certificate Policy
NCP stands for Normal Certificate Policy and is Commfides’ standard Enterprise Certificate. NCP certificates offer a higher level of security than LCP, without compromising user-friendliness or flexibility. While LCP is suitable for simpler, automated systems, NCP is better suited for organizations that require secure authentication and signing in accordance with national and European requirements. With NCP, you get stronger identity verification at the time of issuance and, as a result, greater trust in digital processes—a combination of high security and broad applicability.
NCP+ – Normal Certificate Policy +
NCP+ is an extended version of NCP, with stricter requirements for the ordering and delivery process, as well as technical security. It provides a higher level of trust and is often used in services where extra security is necessary, but where the very highest (qualified) level is not required.
QCP – Qualified Certificate Policy
QCP stands for Qualified Certificate Policy for Electronic Signatures and represents the highest level of trust for digital certificates under the EU’s eIDAS Regulation. A QCP verifies the identity of a person or entity and is used, for example, to create qualified electronic signatures with full legal validity throughout the EU/EEA—just like a handwritten signature.
QSCD – Qualified Signature Creation Device
QSCD stands for Qualified Signature Creation Device and is an approved technical device or software used to create electronic signatures with the highest level of security, in accordance with the EU’s eIDAS Regulation. A QSCD protects the user’s private key and ensures that the signature is legally binding and cannot be forged.
Test certificate
All types of certificates can be ordered as test certificates for use in test environments. Test certificates do not require a signature when ordered or validation upon issuance.
eIDAS
eIDAS stands for electronic IDentification, Authentication, and Trust Services and is an EU regulation aimed at increasing cross-border digital interaction. All Commfides certificates are issued at the eIDAS level.
eIDAS 2.0
eIDAS 2.0 is an updated version of the eIDAS Regulation, and introduces, among other things, the new EU Digital ID Wallet—a digital wallet where citizens can store and use their identity and important documents (such as driver’s licenses, diplomas, etc.) digitally throughout the EU. This provides greater control over one’s own digital identity and makes it easier and safer to use public and private digital services.
SEID 2.0
SEID 2.0 is a Norwegian standard for digital certificates and electronic identity. It is used to ensure secure identification and signing in both public and private services, and is aligned with the requirements of the EU’s eIDAS Regulation.
FAQ
FAQ - Frequently asked questions about Enterprise certificates / eSals
An Enterprise certificate is a digital identity for businesses. The Enterprise certificate serves as the company’s electronic identity in various contexts that require authentication, such as signing electronic documents, logging in on behalf of the company, reporting, or connecting to APIs. An Enterprise certificate can be used by individuals manually or in automated processes between machines.
In technical terms, an organization certificate is a digital certificate that confirms the organization’s identity. The information about the organization contained in the certificate has been verified by an approved certificate issuer, known as a CA (Certificate Authority). Commfides is one of the approved issuers in Norway. The Enterprise certificates we issue comply with the international X.509 standard for digital certificates within Public Key Infrastructure.
The Enterprise certificate verifies the company’s identity using PKI (Public Key Infrastructure). The certificate contains a public key that is available to everyone and a private key to which only the company has access. The certificate links the public key to the company, based on the issuer’s verification of the company’s information. This allows the certificate to be used to establish a secure connection between the company and the other party.
This confirmation serves as the basis for a number of digital transactions in which the company is involved, such as connecting to various public services like the Norwegian Tax Administration’s APIs, signing bids, and reporting to Altinn. If an employee uses their personal e-ID for these purposes, uncertainty arises as to who is committing to the action. An Enterprise certificate creates a clear distinction between personal and professional roles.
The Enterprise certificate can be used to log in to or access a variety of public services, such as ID-Porten, the Norwegian Tax Administration’s APIs, and Helsenett. It can also be used for reporting purposes, such as:
- Reporting Sick Leave to NAV
- A-Report to Altinn
- Reporting of Value Transactions to the Financial Supervisory Authority
- For Energy Companies Using Elhub
- Reporting to the Norwegian Petroleum Directorate
Organization certificates can also be used to secure the exchange of messages within the public sector.
Another important application is the signing of bids and contracts. Here, the certificate streamlines the process and helps minimize risk for the signer, the supplier, and the purchaser. If the bidding process is conducted electronically, an electronic signature may be required. Unlike a personal signature, a signature using an Enterprise certificate is legally binding on the company.
You can order an Enterprise certificate by filling out the order form here. The Enterprise certificate is sent to the recipient via encrypted email, while the password is handed out separately in person.
Commfides leverer virksomhetssertifikatet som en sertifikatpakke med tre separate sertifikater, hvert med eget nøkkelpar:
- ett sertifikat for autentisering
- ett sertifikat for signering
- ett sertifikat for kryptering
Dette gjør det mulig å bruke separate nøkler og sertifikater til de ulike formålene.
Du kan bestille et virksomhetssertifikat ved å fylle ut bestillingsskjemaet her. Virksomhetssertifikatet sendes til mottaker via kryptert epost, mens passordet utleveres separat ved personlig oppmøte.
The person ordering the Enterprise certificate must hold a role within the company that is registered and visible in the Brønnøysund Register or other national business registers. Examples of such roles include managing director, chief administrative officer, contact person, authorized signatory, or authorized representative. It is also possible to grant individual employees within the company the authority to order Enterprise certificates. In that case, the order must be signed by one of the individuals holding a role as described above. The person granted authorization can order an Enterprise certificates either via the order form or through Commfide’s e-ID Portal.
The recipient of the Enterprise certificate will receive it by email. The password for the Enterprise certificate must be sent separately. It can either be sent via Norway Post’s PUM service for pickup at the post office (associated with the recipient’s address), or the recipient can pick up the password in person at Commfides in Lysaker, Oslo. The recipient must be able to present a valid passport or, alternatively, a national or European ID card.
For anyone who needs multiple Enterprise certificates — whether for their own business or on behalf of customers in their role as a reseller — there is a good solution. Commfides provides access to a web-based tool called the e-ID Portal, where a representative from the business can order, manage, and keep track of certificates. The portal provides an overview of the status of ordered certificates and simplifies both the ordering and delivery processes. The portal is free and is ideal for those who need multiple certificates and want a clear overview.
Enterprise certificates follow a common European standard in accordance with EU regulations. The so-called eIDAS Regulation, which entered into force in 2018, governs electronic identification and trust services. New Enterprise certificates are issued in accordance with the national certificate profile SEID 2.0. These certificates offer enhanced security with stronger cryptography than before and can be used across European borders.
We will send the Enterprise certificate no later than 3 business days after we have received and approved your order. Depending on demand, delivery times may vary by a few days at times. Please contact our customer service center if you have any questions about your order or need faster delivery.
