What is LuxTrust and what are LuxTrust certificates?
However, although this description clearly summarizes what LuxTrust is and what LuxTrust certificates are, it can be difficult to comprehend if certain concepts are not clear, such as: What are digital certificates and electronic signatures? What is a Qualified Trust Service Provider? What is the eIDAS Regulation about? So, let's review these concepts one by one.
What are digital certificates and electronic signatures?
In the digital world, it is essential to be able to verify people's identities and the authenticity of documents. To achieve this goal, two tools are used in conjunction: digital certificates and electronic signatures. Both elements rely on cryptography and use two related keys, a private key and a public key.
- 🔐Private key: this is a secret key that only the owner possesses and is stored securely on devices such as USB tokens, cards, or mobile applications such as those distributed by LuxTrust. When a person wants to digitally sign a document, they must use their private key to generate a unique electronic signature for that document.
- 🌐Public key: as its name suggests, this key can be accessed by anyone, is contained within the digital certificate and is used to verify the authenticity of a digital signature. This certificate not only contains the public key but also links the signer's identity to that key and is issued by a trusted certification authority such as LuxTrust.
The process works as follows:
- The signer uses their private key, which is protected on a secure device such as those distributed by LuxTrust, to sign the digital document.
- The signer delivers the document to the recipient along with their digital certificate.
- The recipient uses the digital signature and certificate to verify the authenticity of the document.
On the one hand, the certificate guarantees that the public key used for verification actually corresponds to the person or entity signing, as the certifying authority has previously validated their identity. On the other hand, the application of the public key to the document and its signature using cryptography makes it possible to verify that the document has not been modified since it was signed and that the signature was generated with the private key corresponding to the public key of the certificate.
What is the eIDAS Regulation about?
The entire issue of digital certificates and electronic signatures is regulated at the European level. The legal framework governing electronic signatures in Luxembourg is based primarily on Regulation (EU) No. 910/2014, known as the eIDAS Regulation (Electronic Identification, Authentication, and Trust Services), and on complementary national legislation. Under the eIDAS Regulation, electronic signatures are legally valid in all EU Member States.
What is a Qualified Trust Service Provider?
In the European Union's trusted list browser, you can find the trusted lists for each country where authorized trust service providers are located. There are currently two active entities in Luxembourg: BE INVEST International S.A. and LuxTrust S.A.
Expert Accounting Help | EasyBiz
Payroll services and accounting from €90. Expert team ready to help.
Learn moreHow to get a LuxTrust certificate?
Now that the concepts of LuxTrust, certificates, and signatures have been clarified, it is time to explore how to obtain a LuxTrust certificate and a device that allows electronic signatures. Obtaining both items is very simple. The step-by-step procedure is detailed below.
Step 1 – Purchasing a LuxTrust product
To create an advanced or qualified signature, you need a secure device that stores the private key mentioned above. LuxTrust offers several options:
- 📲LuxTrust app: this is the simplest option and costs 47 euros for three years.
- 🔎Scan: this device allows you to verify the identity of the signer and does not require the installation of any additional applications on your phone or computer. It costs 105 euros for 3 years.
- 🪪Smartcard: with this last alternative, the private key that allows electronic signatures to be made is stored on a chip embedded in a card. This option may be convenient in certain cases but requires the purchase of a compatible card reader. The card costs 129 euros for 3 years with delivery in two weeks or 258 euros with delivery in 24 hours.
The choice of device will depend on compatibility requirements with the institutions with which you wish to interact. LuxTrust provides a guide table indicating the compatibility of the different devices with various common institutions in Luxembourg.
Once the desired product has been selected, it’s necessary to place an order with LuxTrust and submit the documentation requested during the process. Finally, it’s necessary to pay the amount corresponding to the chosen product.
Step 2 – Identity verification
To ensure that the electronic signature is uniquely linked to the signatory's identity, an identity verification is required. The identification process can be carried out in person at LuxTrust's premises, online, at LuxTrust's partners' premises, or at a notary's office, bringing along an identity document. At this point, it is worth noting that it is better to carry out the verification in person, as the online option, although it may seem more convenient, involves an additional cost of around 70 euros.
Step 3 – Activating the digital certificate
Once the necessary device has been received, it must be activated. To do this, it is necessary to take the access codes provided in the letter sent by LuxTrust, go to the LuxTrust activation page, and follow the instructions. Although the process is fairly simple and all you need to do is follow the instructions, LuxTrust makes things even easier by providing detailed instructions depending on the type of device:
Step 4 – Using the device to create electronic signatures
Once the device is active, you can use it to sign electronic documents, carry out online transactions, or authenticate yourself on platforms that require digital verification, such as MyGuichet.lu.
Conclusion
LuxTrust certificates are a key part of Luxembourg's digital transformation, providing secure electronic identity and enabling electronic signatures with full legal validity. This article has provided an overview of this topic, explaining the key concepts and detailing how to obtain these certificates along with the devices that enable electronic signatures. However, you may still have questions or be looking for more specific information. In that case, remember that EasyBiz can be your right-hand man. Just contact us, we will answer your questions and make your life easier.
