FAQ

Digital signature

I forgot my PIN/password, what should I do?

If your remote digital signature certificate is provided by Aruba, recover your password through the Aruba SelfCare page: https://selfcare.firma-remota.it/asmonitor/login.xhtml The procedure requires to insert  user name defined during the certificate activation phase followed by "@frUniTN" and the user code received by email from Aruba after the activation of the signature certificate (sender communications [at] staff.aruba.it)

If your remote digital signature certificate is provided by Infocert (issued before 22 November 2021) visit https://ncfr.infocert.it/ncfr/NcfrServlet click "I can't log in" and follow the instructions.
 

I don't receive the OTP code (Aruba certificate), what should I do?If

If your certificate is from Aruba, check the association between your device and the certificate.

Go to https://selfcare.firma-remota.it/asmonitor/login.xhtml and fill in the fields:

  • username defined during the certificate activation phase followed by "@frUniTN"
  • password defined during the certificate activation phase

click on "Test device" to check the association; if the device has not been configured, follow the instructions to configure it.

I received a digitally signed file but once opened, I do not see the signature

The digital signature is not visible as a handwritten signature. It is a digital certificate, which is added to the original file. It can be verified and "viewed" with specific utilities (see the verification with ArubaSign) which can also reveal the identity of the signer. Here are some useful instruments and documents:

I received a file with the extension ".p7m", how do I open it?

Files with “.p7m” extension are digitally signed using the CADES standard: read the paragraph above for information on signature display and verification.

The organization receiving the file I signed says the signature is not visible. Why does this occur?

The e-signature standard used (PADES or CADES) may be not the same that is used by the recipient and/or there may be no image (graphic representation) of the signature.
In the EU there are three types of e-signature standards to create digitally signed documents:

  • CAdES (Cryptographic message syntax Advanced Electronic Signatures)
  • PAdES (Portable document format Advanced Electronic Signature)
  • XAdES (XML Advanced Electronic Signature).

When placed in a document, these three signature standards ensure the same legal effectiveness, as provided for by our legal system.

Can certificates be used for personal purposes?

The certificates issued by UniTrento can only be used for institutional purposes in compliance with University policies.
The remote digital signature identifies you as a member of the University of Trento; when you sign using the certificate you also provide this information.
 

The identification process for the issuance of the certificate by Aruba has failed and the link I received has expired. What can I do?

Contact the digital signature service by email to firmadigitale.help [at] unitn.it explaining the problem. You will receive a new link to be used for your identification.

I downloaded the ArubaSign app, how do I configure it?

Launch ArubaSign and select the preferences menu.
Select Remote Signature, flag the items “Manually set remote signature servers” and “Specify domain”.
Complete the form as described here:

  1. server1:
    https://app3.firma-remota.it/ArubaSignerService/webresources/signerservice
  2. server2:
    https://app4.firma-remota.it/ArubaSignerService/webresources/signerservice
  3. domain: frUniTN
  4. write the Remote Signature Username that you created when you activated the service, and include the domain “@frUniTN” (example: username @ frUniTN)
  5. click Save to complete the process.

I have to verify a file signed by multiple individuals with different signature formats (Pades and Cades)

Not all digital signature verification tools recognize both CADES and PADES signatures. In this case, follow these guidelines:

  • run the document using a system that verifies CADES signatures. The system will recognize all CADES signatures associated with the document
  • view the file extracted from the CADES file using ADOBE Reader or another signature verification system to recognize all the PADES signatures associated with the document.

 

ArubaSign allows the verification of mixed signatures with a single verification operation (see how to do)

I have received a.pdf file signed with digital signature, I printed it and passed it to my Director for him to sign it.

No! A digitally native and digitally signed document can only be managed in digital mode.

I need to have a document signed by multiple parties and one of them does not have a digital signature.

In such a case the document must be signed using both handwritten and digital signatures. The policy adopted at UniTrento is as follows:

  1.  the party that does not have a digital signature first signs the paper document
  2.  the party that does not have a digital signature scans the signed paper document and the identity document of the person who signed the document by hand (in a single file containing the signed document and the scanned identity document)
  3. the document created as described in point 2 is then signed with a digital signature by the other party(s).

The party who signs the document in paper form is also responsible for storing it after it has been scanned; from the point of view of the University, the original document is the one containing the digital signatures (which is provided with a time stamp and/or filed in PiTre and/or sent via PEC).

Handwritten signatures must always be made before digital ones. When a digitally signed document is transformed into a paper document, in fact, the digital signature(s) are lost.

How to rename a digitally signed document

In the case of CADES signatures (.p7m), a digitally signed file can be renamed without modifying the final extensions of the file name.
Example:

  • the file xjdfsdyuhre.pdf.p7m (CaDES format) can be renamed agreement.pdf.p7m
  • the file xjdfsdyuhre.pdf.p7m (CADES format) CANNOT be renamed agreement.p7m
  • the file xjdfsdyuhre.pdf.p7m (CADES format) CANNOT be renamed agreement.pdf (the digital signature would be lost)

In the case of multiple .p7m extensions, all of them must be maintained. In fact, each .p7m extension corresponds to a digital signature on the document.
Example:

  • the file agreement.pdf.p7m.p7m.p7m (CaDES format) can be renamed agreement _UniTrento-PAT_2022.pdf.p7m.p7m.p7m (all the extensions remain)
  • the file agreement.pdf.p7m.p7m.p7m (CaDES format) CANNOT be renamed agreement_UniTrento-PAT_2022.pdf.p7m (all extensions must be maintained, therefore all signatures)
  • the file agreement.pdf.p7m.p7m.p7m (CADES format) CANNOT be renamed agreement_UniTrento-PAT_2022.p7m.p7m.p7m
  • the file agreement.pdf.p7m.p7m.p7m (CADES format) CANNOT be renamed agreement_UniTrento-PAT_2022.pdf (all digital signatures would be lost)

 

Files with PADES signatures (.pdf) can be renamed without changing the extension.

Example:a decree xyz.pdf can be renamed into decree123_2022_RET_approval.pdf

 

The document I have to sign includes abusive clauses. How do I sign them?

If a representative of our University is asked to sign a document containing abusive clauses which has not been prepared by our University, follow the instructions provided by the other party.
 

I have to prepare a document that contains abusive clauses. What should I do?

This is the solution adopted by our University to sign abusive clauses:

  • prepare the main document including a reference to the abusive clauses
  • prepare a separate document (annex) including the abusive clauses and a clear reference to the main document
  • have both documents signed
  • file the two documents as a main document and its annex.

What is the maximum size to sign documents in U-Sign?

In U-sign the limit is 50 Mb.
 

I use my digital signature certificate to sign the minutes in Esse3. Can I also use it to sign other documents?

If you are a member of the teaching and research staff, you can use the digital signature certificate to sign work related documents using the U-Sign digital signature service (webfirma.unitn.it). For more information read the University policies.

Can I have more than one digital signature certificate?

Yes, there is no limit to the number of digital signatures you can have. In addition to the digital signature certificate issued by the University, you can have one or more personal digital signatures that you personally purchased or were provided by other entities (for example, by a professional association). The University will provide users with one remote digital signature.
 

I have downloaded the ArubaSign app, can I use the time stamp?

The time stamp can only be placed through the U-Sign digital signature service (webfirma.unitn.it).
 

I have an Aruba certificate and I repeatedly entered an incorrect password, what should I do?

Contact the support firmadigitale.help [at] unitn.it that will ask the Aruba technicians to unblock the user.

I have activated the Aruba certificate, but the University systems have not updated, what should I do?

The University systems integrated with the digital signature (Esse3 and USign) are updated approximately 48 hours after the activation of the certificate.