Within the TicketBAI system, transaction data is signed via electronic certificates. The certificates for the autonomous regions of Araba-Álava, Bizkaia and Gipuzkoa can be obtained from trust service providers (TSP or CA - Certificate Authority).
In principle, different certificates can be used for signing:
| English | Basque | Spanish | Comment |
| Device certificate | Gailuaren ziurtagiria | Certificado de dispositivo | uniquely identifies each accounting device - a different certificate per device (cash register) |
| Certificate of natural person or entity representative, | Pertsona fisikoaren edo erakundearen ordezkariaren ziurtagiria | Certificado de persona física o de representante de entidad, | serves to verify the identity of natural or legal persons |
| Company seal | Enpresa-zigilua | Sello de empresa | Technical certificate, can be used by a software producer or a group of people in a department or work group. |
| Non-qualified self-employed certificate | Autonomoen ziurtagiri kualifikatu gabea | Certificado no cualificado de autónomo | non-qualified certificate, is issued to persons engaged in economic activity in accordance with the provisions of the Foral Ordinance on Income Tax. |
Trust service providers
The following link will take you to an overview of Spanish trust service providers - VDA (website in Spanish): https://sedeaplicaciones.minetur.gob.es/Prestadores/Inicio.aspx
Some VDAs at a glance:
IZENPE
Via the IZENPE website, the following can currently be used for signing TicketBAI data
- Device certificates and
- Non-qualified certificates for self-employed
can be applied for.
- Link to certificate application at IZENPE: https://servicios.izenpe.com/ticketbai/mostrarHome.do
CERES
CERES is a certification body of the National Mint - Royal Spanish Mint (Fábrica Nacional de Moneda y Timbre-Real Casa de la Moneda - FNMT-RCM).
- Link to CERES: https://www.cert.fnmt.es/web/ceres/home
ANF AC Spain
According to its own information, the first officially registered contract service provider in Spain (2000).
- Link to ANF AC: https://anf.es/en/welcome-to-anf-ac/
However, the use of the different certificates is defined by the legal status of the company, as well as by the software architecture of the POS software used, or how the signature is carried out throughout the system.
Restrictions regarding architecture
Client-side signature architecture
We speak of a "client-side signature architecture" if the certificate is located directly on the device on which the accounting software is installed. For example, a desktop application (without internet connection) on which the certificate is stored.
Permitted certificates
For such architectures, there are no restrictions regarding the certificates that can be used.
- Device certificate,
- certificate of the representative of a natural or legal person
- Company seal
- Non-qualified certificate for self-employed persons
can be used to sign transaction data.
Server-side signature architecture
Server-side signature architectures" are systems in which, for example, the POS software (accounting system) is located on a different system than the so-called "signature software" that performs the signature. [Note: the RetailForce Fiscal Middleware works as signature software in Spain]. In this case, the signature software is accessed remotely.
Also, if the issuing / signing of documents is done via batch processing, this is considered a server-side signature architecture.
Permitted certificates
In this case, signing with a device certificate is not permitted.
- certificate of the representative of a natural or legal person
- Company seal
- Non-qualified certificate for self-employed persons
can be used to sign transaction data.
Certificate use
In order to be able to use the certificate within the framework of the fiscalisation of POS systems in Spain, it must be uploaded in the RetailForce Cloud Portal.
You can find more information on this in the articles Upload fiscalization certificates and Configuration Spain.
Comments
0 comments
Please sign in to leave a comment.