Firma electronica sat code#

If the result doesn’t match with the hash calculated at the beginning of the process, the signature is not valid and will not be stamped. In the servers, the encrypted hash is decrypted using the public certificate.

Firma electronica sat code#

(To comply with the provisions of the Code of Commerce, neither the private key nor its password must ever leave the signer’s device). The encrypted hash and the public certificate are sent to the platform’s servers.The encrypted hash is the electronic signature itself. In the signer’s device, the document’s hash is generated and is encrypted using the private key.If it hasn’t been revoked, they can continue. If it has been revoked, the user cannot continue. The platform checks the revocation status of the certificate with the SAT.cer (is older, newer or belongs to a person with a different RFC), they can’t proceed to sign. The signer enters the platform, this can be through an email invite to sign.The platform or a user generates the document to be signed and gets its hash.In Mifiel and other platforms that allow the use of advanced (qualified) electronic signature like the e.firma, the process for the user and at the technical level is the next one: key work exclusively together, that’s why it is not possible to sign interchanging differente pairs (for example, using the certificate of one person (RFC) with someone else’s private key, or a new certificate with an old private key), it must always be the same pair. Once your identity has been verified, the SAT certifies (signs) your request, generating a public certificate (.cer file), strictly tied to the private key that you generated.During an on-site appointment, SAT officials validate your identity using your identifying documents and capturing your biometric information (iris scan, fingerprint, handwritten signature).From that moment, both files are linked with each other, they are born together. As a user you generate your private key (.key file) and a certificate request in your computer or at the SAT office.How does the e.firma work? File generation (obtaining the e.firma) However, there is no problem when visualizing its information or selecting them to sign documents in Mifiel or to carry out online government procedures, for example. This nomenclature also allows to distinguish them from similar files like the Certificado de Sello Digital (CSD), a set of certificate and private key that allows to generate tax invoices (CFDI) but cannot be used for other purposes (such as signing documents in Mifiel).Īs a user of these files, you should not try to manipulate them (trying to open them to see its content with non-specialized apps). They are usually named ‘FIEL’, ‘CLAVEPRIVADA_FIEL’, your RFC, etc. cer extension, which is common among digital certificates. key extension, though you must make sure it is not a Keynote file (Apple’s slideshow app). It’s also known as digital certificate or public key certificate. At its core, it is a personal identification document for the digital world. It contains your personal information like name, RFC (tax ID), autograph signature and biometric data. Public certificate: It is electronically signed by authorized SAT staff in their offices after validating your identity.The private key itself is the tool that allows you to generate electronic signatures. It’s protected by a password that you create and that is different from the CIEC (the password used to log into the SAT’s website. Private key: As a user, you must generate it from your computer or at the SAT offices when requesting the e.firma.The two files that comprise the e.firma are: Implications for Mifiel’s private signing process.File generation (obtaining the e.firma).Its renewal can be done online whether it’s still valid or if it expired less than a year ago. The procedure to get it is done at the SAT offices by appointment. The e.firma or FIEL is the set of files issued under the SAT’s (Mexican tax authority) infrastructure that, when used in conjunction, allow to generate advanced (qualified) electronic signatures.