Certificate access - Sede electronica

With this procedure, you can check whether your computer is correctly configured to perform a procedure with a certificate.

Address of the test procedure: https://sede.gva.es/en/inicio/procedimientos?id_proc=13141

A digital certificate or electronic certificate can be defined as a document electronically signed by a certification service provider that links signature verification data to a signatory and confirms the signatory's identity.

A digital user certificate is a document that allows you to identify yourself on the internet and one is needed in order to carry out procedures, both with public administrations and with numerous private organisations, over the internet.

A digital certificate can be obtained by both natural and legal persons from a recognised certification authority. Currently in Spain, in addition to the DNIe issued by the Directorate General of Police, there are other digital certificates issued by various certification authorities, such as the Technology and Electronic Certification Agency (ACCV).

In order to obtain a digital certificate, you must apply in person and therefore physically appear in person. This is necessary since a digital certificate can only be issued following identification of the applicant. Thus, it is not possible to obtain a digital user certificate just by downloading files, a face-to-face application is required first.

The list of certificates accepted by the Generalitat Valenciana can be consulted in the following point.

In general, procedures can be processed with DNIe, FNMT (Fábrica Nacional de Moneda y Timbre) and with the certificates for legal persons, public employees or individuals issued by the ACCV, in addition to all those accepted by the @firma platform, which can be consulted in the initiative section on the e-Government Portal.

We also recommend that you check the validity of your certificate on the following website: https://valide.redsara.es/valide/?lang=en and you can check that it was successfully installed by consulting the section Installation of certificates in file from the file explorer

If it has been installed correctly, you don't have to do anything, you will be prompted to select it when necessary. If your certificate does not appear in the window when you are asked to select it, check that it has been correctly installed, check the help and contact support if necessary, indicating which type of certificate you are trying to use.

In order to sign/authenticate in Windows (7 or higher) or Mac environments, you will need to install the electronic signature certificate from the file explorer. To do so, the following steps must be followed:

• For a Windows 7 or higher system
  • Close the browser where you are going to perform the processing (we recommend the latest versions of chrome).
  • It is necessary to install the certificate on your computer, otherwise the applet will not find it, so look for your certificate file, which will have a name similar to "YOUR_NAME.p12", and double click on it, you must then follow the steps of the wizard with all the default options until the installation of the certificate on your computer is finalised.
  • Once you have done this, please clear the java and browser cache to perform a clean run.
  • Check that the installation has been carried out correctly by following the instructions on the following web page by choosing the browser you are going to use https://sede.red.gob.es/redAyuda/index.jsp?nav=GC&pag=certificados (by default the instructions for Chrome are loaded, but you can select other browsers on the web page)
  • Open the browser where you have the certificate installed and try processing the procedure again.
• For a MAC system
  • By simply double-clicking on a digital certificate in software format (.p12), the operating system will automatically launch a wizard to install it.
  • In this case, Mac Keychain will be launched, this is the application in charge of managing our digital certificates (Keychain Access). This link provides you with all the information you need: https://www.viafirma.com/en/esignature-api/

To process an application, you can use browsers without Java support by using self-signature. To do so, before commencing, download and install Autofirm@ the self-signature application from http://firmaelectronica.gob.es/Home/Descargas.html

Access the procedure / service via the Chrome browser and try the procedure again.

If you continue to have problems accessing or signing in to the processing platform, we recommend that you download the troubleshooting guide.

• Bear the following in mind: if the problem you are having is that, when you see the message "Preparing digital signature environment. This may take a few minutes, please wait" or similar, the page seems to be stuck/not advancing, check that there is not a window with the list of certificates in the background asking you to select the certificate to use. We have found that sometimes this window appears behind the window being displayed, giving the impression that the process has stalled when in fact it is waiting for a response from the user.
• If you are using Mozilla Firefox, check whether a red icon has appeared in the navigation toolbar between the back button and the field with the path to the web page. If the icon is there, click on it and when prompted, allow the Java plugin to run.
• Check that you have the Java plugin running correctly in your browser, by accessing the following address http://www.java.com/es/download/testjava.jsp where you will need to allow the applet to run. If you get a warning that you need to update Java, please note that this is not necessary for verification, you can process the procedure as long as your current version meets the published requirements, although it is advisable to have Java updated.
• Due to security changes in Java, certain versions detect that a new version is available and block the use of a previous version. After updating, you will need to close the browser. When you log in, you will be prompted through a series of alerts for permission to run the application, and you will need to grant this permission.

You can avoid the error alerts that appear in the browser before accessing by installing the certification from the Autoritat de Certificació de la Comunitat Valenciana website (Root CA on Download certificate hierarchy (accv.es)).

Information on how to export/import the certificate can be found on the following ACCV webpage:

• Exporting the certificate: https://www.accv.es/ayuda/cert-sw/exportar-certificado-navegador-web-fichero/
• Importing the certificate again (in another browser): https://www.accv.es/ayuda/cert-sw/instalar-fichero/

With Autofirm@ it is possible to use a certificate without having to install it or if the one installed is not a valid certificate (revoked, etc.).

On the certificate selection screen, three icons appear on the top right-hand side. If we click on the second icon, the one with an arrow pointing upwards (red box in the image below), it allows us to select the location where we have the certificate.

It should be noted that the certificate is not installed and therefore it will be necessary to repeat this operation every time we want to use it unless we install it.

Note that if our certificate appears on any revocation list, even if we install a good one, it will ask us to select a valid one from an external store.

AutoFirm@ requires administrator permissions to be installed.

If you are unable to install AutoFirm@, please install in administrator mode by right-clicking on the "AutoFirm@" executable icon and choosing install in administrator mode.

If installation has already been attempted, but an error occurred in the installation process, you must uninstall it completely before reinstallation.

Depending on the operating system you use, you should proceed as follows:

• Linux

If your operating system is Linux there must be a bug in the file en/gob/afirma/keystores/mozilla/MozillaKeyStoreUtilitiesUnix.class that does not include all the paths where to find the NSS libraries and therefore you have to create them manually.

For 32bits

# mkdir /opt/firefox

# cd /opt/firefox/

# ln -s /usr/lib/i386-linux-gnu/nss/libsoftokn3.so

# ln -s /usr/lib/i386-linux-gnu/libnspr4.so

For 64bits

# mkdir /opt/firefox

# cd /opt/firefox/

# ln -s /usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so

# ln -s /usr/lib/x86_64-linux-gnu/libnspr4.so

In some cases, this is not enough and it is also necessary to patch the references to ~/.pki/nssdb to work with Firefox certificates:

# mkdir -p ~/.pki/nssdb

# cd ~/.pki/nssdb

# ln -s ~/.mozilla/firefox/*.default/cert8.db

# ln -s ~/.mozilla/firefox/*.default/key3.db

• Windows

If your operating system is Windows, these are permissions issues so you will need to log in as a system administrator user.

This error occurs if you do not have a digital certificate, or if the digital certificate you are using does not pass the check, or the certificate is correct but not properly installed.

If you do not have a digital certificate or do not have a current one, we can inform you that, in general, you can process a procedure with DNIe, FNMT (Fábrica Nacional de Moneda y Timbre) and with the certificates for legal persons, public employees or individuals issued by the ACCV, in addition to all those accepted by the @firma platform that you can consult in the initiative section of the e-Government Portal:

Verification of Electronic Office Certificate - Sede electronica - Generalitat Valenciana (gva.es)

It is possible that your certificate is not found, so you will have to install it in the browser from the file explorer, to do this you can consult the section: "Installation of certificates in file from the file explorer" in this FAQ document.

Once you have obtained/installed the certificate by following the instructions, we recommend that you check the validity of the certificate again at the following address: http://valide.redsara.es/valide/inicio.html once you have clicked on the "View extended information" button and then send us a screenshot.

Verify that the applicant has granted you electronic representation through the representatives register, which can be consulted on Registration of representatives (accv.es)

Below you will find details of how to access and digitally sign a procedure.

A configuration that does not usually cause problems on computers is to use the Google Chrome browser, which in the most recent versions no longer supports Java, with AutoFirm@ installed and which can be downloaded on http://firmaelectronica.gob.es/Home/Descargas.html

Access and signature problems do not usually occur with this application and the Google Chrome browser.
To access with the certificate, click on the Access option below the Cl@ve option and then select the DNIe/Electronic certificate authentication method.

You will also be able to use the permanent cl@ve option, if you have it after having visited a cl@ve office in person.

Remember that the cl@ve system, in its cl@ve-permanent option, is only for individuals and is NOT available for legal entities or companies. With this system it is not necessary to have the AutoFirm@ application installed, although a certificate must be generated in the cloud the first time it is accessed.

If you receive the following error message when trying to access with a digital certificate, please follow the steps below:

• Verify that your certificate is correctly installed. We recommend that you check the validity of the certificate again at the following location: VALIDe (redsara.es) once you have clicked on the "View extended information" button. Remember that if your certificate is not correctly installed, you should contact the organisation that issued your certificate.

• Install the AutoFirm@ application. You must have AutoFirm@ installed and have administrator permissions to be able to authenticate yourself with a digital certificate and carry out procedures. Please follow the following steps:

1. Download the latest version of AutoFirm@ from the following website:  http://firmaelectronica.gob.es/Home/Descargas.html

2. Install AutoFirm@ as an Administrator. This point is important, otherwise the application will not have permissions to perform the operations. Right-click on the installer and click on "Run as administrator".

• Using the Google Chrome browser (it is important that your browser is updated to the latest version), try to access the procedure again.