Contact

Access to online services

English

Information on electronic verification

​​​​​​In order to guarantee compliance with current regulations on identification and electronic signatures, FREMAP only allows access to its online services through recognized digital certificates, issued by Certification Authorities included in the Trusted List of Qualified Providers (TSL).​​

In this regard, the following will be allowed for carrying out procedures through our platform:

The platform allows the identification and authentication of users through electronic certificates, in order to guarantee the user's identity and security in accessing the electronic services offered.

This access system is based on the use of electronic certificates issued by recognized certification service providers, in accordance with the applicable regulations on electronic identification and trust services.

The use of the digital certificate will allow the user to access the services available on the platform after verification of their identity, through the authentication mechanisms provided by the browser, operating system or mobile application used.

Technical requirements To use the access system using a digital certificate, the following will be necessary:

  • Have a valid and current electronic certificate, issued by a certification authority accepted by the platform.
  • Have the certificate correctly installed on the browser, operating system or cryptographic device from which access is made.
  • In the case of certificates stored on cryptographic cards or secure devices (e.g., electronic ID card), have the necessary drivers or software for their use.
  • Use a browser or runtime environment that supports authentication using electronic certificates.

At the time of access, the system will ask the user to select the electronic certificate available on their device to proceed with identity verification.

In the case of access via mobile application, the certificate must be installed or accessible on the mobile device or in the certificate management system of the corresponding operating system.

During the authentication process, the platform will perform various automatic checks on the validity of the electronic certificate presented by the user.

In particular, the following aspects will be checked:

  • Validity of the certificate, verifying that it has been issued by a certification authority accepted by the platform.
  • Certificate revocation status, verifying that the certificate has not been revoked by the issuing authority through available verification mechanisms (e.g., revocation lists or online validation services).
  • Temporary validity of the certificate, verifying that the certificate is not expired at the time of authentication.

If the certificate fails any of the above checks, the system will deny access to the platform.

Currently, the platform supports electronic certificates issued by the following certification authorities:

  • National Mint and Stamp Factory (FNMT)
  • National Police (DNIe)​
  • SIA (Minsait Cyber)
  • IZENPEL
  • Professional Firm

The platform will be able to incorporate new certification authorities or trusted service providers that meet the established technical, regulatory and security requirements.

The list of accepted certification authorities will be kept up to date on this page, constituting the official reference for the use of the access system using a digital certificate.

The user is responsible for the safekeeping, proper use and confidentiality of their electronic certificate and, where applicable, the devices or keys associated with it.

The use of the certificate to access the platform will be considered to have been carried out by its holder, unless proven otherwise, so the user must take the necessary measures to prevent the unauthorized use of the certificate.​

In order to guarantee the security of the service and the traceability of the operations carried out, the platform may record technical evidence of the authentication process, including information relating to the electronic certificate used and the date and time of access.

These records may be kept for the legally established periods and used exclusively for security, auditing and regulatory compliance purposes.

The accepted electronic certificates comply with current regulations on electronic identification and signatures, in particular with:

  • Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market.
  • Law 39/2015 of 1 October, on the Common Administrative Procedure of Government Agencies.
  • Royal Decree 203/2021, of March 30, approving the Regulation on the operation and functioning of the public sector by electronic means.