Digital Signature Business Key InfoCert

Openapi is the only platform that allows more than 15 different types of digital signatures to be requested via API, including signatures with physical devices (e.g. USB and smart cards), qualified electronic signatures, devices with or without CNSs, and video recognition identification possibilities.

In addition, on Openapi it is possible to choose between different Certification Authorities such as InfoCert or Aruba, without volume purchase commitments or obligations to specific brands.

The API Digital Signature also allows you to request other types of signatures such as simple electronic signatures (with OTP) and qualified signatures.

Business Key InfoCert

The Business Key is a type of InfoCert digital signature on USB, and is available:

With the CNS certificate you can access all PA portals in seconds and in secure mode.

Business Key allows you to digitally sign any computer document (e.g. financial statements and company documents, invoices, notifications, forms for entry in public registers, contracts) via a portable USB stick that can be used with any PC. It does not require the installation of any software because it is already on the device. It has legal value throughout Europe, lasts for 3 years and can be renewed for a further 3 years before expiry by following the dedicated procedure.

Request and Signature List and Codes

GET /prodotti

As mentioned above, Openapi offers a wide range of digital signatures. To check all devices available via the API Digital Signature, and their respective prices, an API request must be made to the endpoint GET /prodotti.

GET https://ws.firmadigitale.com/prodotti

Response Signature List and Codes

GET /prodotti

The response will contain the complete list of all available signatures with name, type (e.g. InfoCert or Aruba), code and price. This list does not include electronic signatures not belonging to the type (such as Simple Electronic Signature) for which dedicated endpoints are provided. For some products, it will also be indicated whether it is a 'blank' signature, in which case no signature certificates will be issued.

The following list is only an example and not exhaustive of the available products:

{
"data": [
    {
    "nome": "Business Key",
    "tipo": "Infocert",
    "codice_prodotto": "KEY",
    "prezzo": 38.00
    },
    {
    "nome": "Business Key CNS",
    "tipo": "Infocert",
    "codice_prodotto": "KEYCNS",
    "prezzo": 38.70
    },
    {
    "nome": "Business Key CNS Con Videoriconoscimento",
    "tipo": "Infocert",
    "codice_prodotto": "KEYCNS_VIDEO",
    "prezzo": 77.90
    },
    {
    "nome": "Business Key Vergine",
    "tipo": "Infocert",
    "codice_prodotto": "KEY_V",
    "prezzo": 38.70,
    "vergine": true
    },
    {
    "nome": "Business Key CNS Vergine",
    "tipo": "Infocert",
    "codice_prodotto": "KEYCNS_V",
    "prezzo": 38.70
    "vergine": true
    }
    .....
    ],
    "success": true,
    "message": "",
    "error": null
    }

In the case of the Business Key digital signature, there will be several codes depending on the presence of the CNS Certificate and the Videorecognition option.

The code allows you to request the device.

Request Business Key

POST richiesta/{codice_prodotto}

To proceed with the device request, a request must be made to the endpoint POST richiesta/{codice_prodotto}. In our case, we chose the Business Key with CNS as the device and the product code is KEYCNS.

POST https://ws.firmadigitale.com/richiesta/KEYCNS

In the payload of the request, we have to pass a series of information about the requester. These data depend on the type of device selected, in the case of the Business Key (with or without CNS) they are:

Here is an example of a payload for a Business Key request:

{
    "data":{
        "assistenza": true,
        "urgenza": true,
        "spedizione": "veloce",
        "anagrafica": {
        "nome": "alberto",
        "cognome": "neri",
        "email": "[email protected]",
        "cellulare": "349xxxxx18",
        "codice_fiscale": "vnxxxxxxxl1x7d",
        "data_nascita": "28/12/2000",
        "sesso": "M",
        "comune_nascita": "terni",
        "provincia_nascita": "terni",
        "nazione_nascita": "terni",
        "indirizzo_residenza": "via rossi 2",
        "comune_residenza": "terni",
        "provincia_residenza": "terni",
        "cap_residenza": "05100",
        "nazione_residenza": "italia",
        "destinatario": "alberto neri",
        "indirizzo_spedizione": "via rossi 2",
        "comune_spedizione": "terni",
        "provincia_spedizione": "terni",
        "cap_spedizione": "05100",
        "tipo_documento": "patente",
        "numero_documento": "123456",
        "soggetto_emittente": "mctc",
        "data_emissione": "05/11/1990",
        "data_scadenza": "12/12/2020"
    },
        "callback": {
           "url": "https://dev.ws.firmadigitale.com/test.php",
           "method": "JSON",
            "field": "data"    
    }
  }

In the case of requesting the Business Key product with video identification, a more limited dataset of information needs to be passed:

At this stage you can also select one or more options for Business Keys without video recognition:

The shipping times are:

Timeframes are from receipt of the expected documentation.

We suggest you set up a callback to stay updated on the change of status of your request.

Response Business Key

POST richiesta/{codice_prodotto}

The response will contain all the information and will include the request id, e.g. in our case it will be 5f7ef1e83a716836d3152662. The request id is indispensable because it will allow us to check the status of the request, download and possibly send the Signature registration form.

The form can be downloaded via the endpoint GET /richiesta/{id}/modulo.

Completion of request

In order for certificates to be issued and for the device to be processed, the applicant must complete the identification process, as required by current legislation.

This can occur in various ways. If the applicant

The video recognition option simplifies this process by automating the entire identification process through a simple call with an operator, which can be done from any device.

Signature processing status can be checked at any time via the endpoint GET /richiesta/{id}

In the response, when the status has changed to processed, it will be possible to access the tracking code of the shipment, the envelope number and the device identification number. Instead, the signature activation data (Emergency Code, PIN, PUK) will be, according to regulations, sent directly to the applicant's email via virtual envelope (PDF).

Via the API Digital Signature, 'Virgin' Business Keys can also be requested. This is the case, for example, for RAO customers who can issue signature certificates themselves and only need to purchase batches of devices.

The Business Key service via API is ideal for companies and organisations wishing to offer their customers a secure, certified signature that can be used by individuals with their own credentials both to sign any digital document and to access public administration services if they choose the CNS (National Services Card) option.

Do you have questions about the types of digital signature devices or the procedures for requesting and activating them? Don't hesitate to contact us: one of our consultants will be available to provide you with all the information and clarifications you need!