How do I sign an XML file with Evrotrust?
To sign an XML file with Evrotrust, the signing process applies an electronic signature to the XML data using the appropriate XML signature format, typically XAdES. With a qualified electronic signature (QES), the signer first completes the required electronic identification and receives a qualified certificate. Evrotrust supports remote QES, so signing does not require a physical smart card or USB token.
What is a XAdES signature?
XAdES stands for XML Advanced Electronic Signatures and is a family of electronic signature formats designed for XML data. It adds information to the underlying XML digital signature that can support signature validation and long-term evidentiary requirements. XAdES is therefore relevant when the document or structured data that needs to be signed is in XML format.
What is a PAdES signature?
PAdES stands for PDF Advanced Electronic Signatures and is designed specifically for signing PDF documents. Unlike XAdES, which applies to XML data, PAdES keeps the electronic signature associated with the PDF document and supports validation through PDF-compatible software. The appropriate format therefore depends primarily on the type of file being signed.
What is the difference between XAdES and PAdES?
XAdES is designed for XML documents and structured XML data, while PAdES is designed for PDF files. Both formats can support electronic signatures, but they package and represent signature information differently. Choosing between them depends on the document format and any technical or regulatory requirements of the system receiving the signed file.
Can I use a qualified electronic signature for XML files?
Yes. A qualified electronic signature (QES) can be applied to electronic documents and data when the technical signing system supports the required format. Evrotrust QES is based on a qualified certificate and a qualified signature creation device (QSCD), and it is legally equivalent to a handwritten signature across the EU.
Is an Evrotrust QES legally valid across the EU?
Under the eIDAS framework, a qualified electronic signature has the equivalent legal effect of a handwritten signature and must be recognized across EU Member States. Evrotrust is a qualified trust service provider (QTSP), and its QES is issued after the required electronic identification process. Evrotrust also supports remote issuance and use of qualified certificates for signing electronic documents.
Do I need a USB token to sign XML or PDF files with Evrotrust?
No. Evrotrust supports fully remote qualified electronic signing without requiring USB drives, physical tokens, or smart cards. The signing certificate can be issued remotely after successful identity verification, allowing the user to sign electronically through supported Evrotrust services.
What happens to a file after it is signed electronically?
The electronic signature cryptographically links the signer and the signed data so that subsequent changes can be detected. For QES, Evrotrust uses a qualified certificate and a QSCD, providing a high level of identity assurance and document integrity. The resulting signature can then be validated to check the certificate, signer information, document integrity, and other signature data supported by the selected XAdES or PAdES format.
