Technical checks for the operation of the electronic DNI

Technical checks of the electronic DNI with Google Chrome and Windows

The use of the electronic DNI is valid for online procedures but it will be necessary to have certain hardware and software elements that allow access to the card chip and, therefore, the use of the certificates contained therein.

When accessing a web page option that requires an electronic certificate, the browser must request the PIN and then display the certificate store so that the corresponding one can be selected (authentication or signature). If this does not happen, it means that the browser or the DNIe are not correctly configured.

Check the version of DNIe you are using. Please note that the DNIe 3.0 is not compatible with Windows XP and Windows Vista operating systems, as indicated on the website www.dnielectronico.es.

To use the DNIe you need a card reader that complies with the ISO-7816 and API PC/SC standards, that is correctly connected to your computer and that is correctly recognized by the operating system. On Windows systems, the message "This device has been successfully installed and is ready to use" appears. You must follow the reader manufacturer's instructions for installing the drivers.

When detecting a eDNI for the first time, the device requests the PIN; The PIN will then be requested only when signing operations are performed.

In cases where the DNIe is not recognized, follow the steps below:

1. Remove the eDNI from the reader.
2. Close or exit browser completely so that no processes are left open.
3. Enter the eDNI into the reader again.
4. Open the browser and try the procedure again (checking "My files" in "Personal area" is an easy way to check this).

If after these steps the system does not ask for PIN , install the cryptographic module as indicated in this help.

If you are prompted for your PIN and after entering it you see “ Page cannot be displayed ”, reload the page (F5 or Ctrl+F5).

If you get this error, but the DNIe works or has worked with this browser on our page or another recently, check the antivirus that may generate errors with the certificates and/or restart the computer.

If the DNIe does not work in this browser on any page install the cryptographic module as indicated in the help below.

In cases where the system does not detect DNIe , and for Windows XP or Vista operating systems, it is recommended to install the latest version of the cryptographic module published on the website www.dnielectronico.es.

For Windows 7, Windows 8, Windows 8.1 and Windows 10, new versions of the DNIe driver are available in the Microsoft Windows Update service. You only have to insert the card DNIe into the reader and the operating system installs the driver quickly and automatically. The DNIe must not be removed from the reader until the installation is complete. If the installation is not done automatically, go to "Windows Update" and click on "Check for updates". The update is called: "General Directorate of Police - Other hardware - DNIe Minidriver for Smart Card".

CRYPTOGRAPHIC MODULE INSTALLATION

With the reader and the DNIe connected to the computer, go to www.dnielectronico.es, enter "Download Area" and click on "Windows System". Depending on whether it is a 32-bit or 64-bit computer, it downloads one installer or another.

Next, download the cryptographic module for the DNIe and follow the instructions that appear when you run it.

With the DNIe in the card reader, check if Google Chrome is recognizing the DNIe . Access the Google Chrome settings menu located at the top right, to the option "Settings", "Settings", "Advanced settings", "Privacy and security", "Manage certificates". The window requesting the PIN will appear. Enter the PIN to check the installed certificates.

The certificates for the DNIe are stored in the "Personal" tab: an authentication certificate and a signing certificate.

In the "Trusted Root Issuing Entities" tab, the entity "ROOT AC DNIE " should appear.

If you have been able to follow these steps and view the certificate in the "Personal" tab, it means that the DNIe software and the root certificate for Microsoft are correctly installed.

• After checking that the DNIe is correctly installed, it is necessary to verify in FNMT that it works correctly. You can access it from the DNI electronic portal, "How to use the DNI ", "Verify that it works" or directly from fnmt.es, "CERES", "Certificates", "Natural person", "Verify status".

  

  

  Enter the PIN and select the authentication certificate. A window will appear again where you will need to enter the PIN.

  As a result of this check, a page will appear indicating whether everything is correct: "Your eDNI has just been verified. You have an Active Authentication Certificate."

  If you enter the PIN correctly and the screen does not advance or a "Page cannot be displayed" message appears, it is likely that the PIN is blocked.

  If it appears active, the authentication certificate has been verified as valid, now it will also be necessary to verify the signature. To do this, you can carry out any procedure at the Electronic Office of the AEAT that requires an electronic signature, for example, obtaining a tax certification.

  Until validation (authentication and signature) is completed successfully, the DNIe will not work on our website.