Technical checks for the operation of the electronic DNI

Technical checks of the electronic DNI with Mozilla Firefox and Windows

The use of the electronic DNI is valid for online procedures. In order to use it, it is necessary to have certain hardware and software elements that allow access to the card chip and, therefore, the use of the certificates contained therein.

When accessing a web page option that requires an electronic certificate, the browser must request the PIN and then display the certificate store so that the appropriate one can be chosen (authentication or signature). If this does not happen, it means that the browser or the DNIe are not correctly configured.

1. To use the DNIe it is necessary to have a card reader that complies with the ISO-7816 and API PC/SC standards, that is correctly connected to the computer and that the operating system recognizes it correctly. On Windows systems, the message "This device has been successfully installed and is ready to use" appears. You must follow the reader manufacturer's instructions for installing the drivers.

   In addition, it is necessary to install the appropriate software depending on the operating system used. It can be obtained from the download area of the official website of the DNI electronic of the Ministry of the Interior at www.dnielectronico.es/descargas. Once the software has been downloaded, the CRYPTOGRAPHIC MODULE DNIe appropriate to the operating system (32-bit or 64-bit) must be installed.

Select "Save File" and once downloaded, locate the file in the "Downloads" option of your browser or in the folder where your downloads are saved to run it.

In the event that an older version of the cryptographic module is detected, it is advisable to use the "Repair" option of the wizard.

2. With the DNIe in the card reader, check if the Mozilla Firefox browser is recognizing the DNIe . Access the 'Tools' menu or the icon with three horizontal bars, 'Adjustments', 'Privacy and security', and search for 'Certificates' under 'Security'. On the "Security Devices" button, if the software is installed correctly, the " DNI electronic" module will appear in the "Security Modules and Devices" list.

   

   

   To ensure that Mozilla Firefox detects and accesses the certificates contained in the DNIe , we recommend that you log in before entering the corresponding procedure page. To do this, select the electronic DNI module and click on "Login". Enter the password or PIN and, if everything is correct, the text "Session started" will appear in the "Value" column.

   

   

   

   If the module has not been loaded, manually download the "Single Module" by pressing "Load"; type " DNIe " in the "Module name" box and click "Browse".

   

   From the selection window, look for the file called DNIe _P11.dll located in the path "X:\Windows\System32\" , select it and click "Open".

   

   The file name will appear in the "Module File" box, click "OK".

   

   Check that the added module appears in the device table. Click "Sign in".

   

   If you get the error "Could not add module" and your Firefox version is 64-bit, it is recommended that you uninstall that version of Firefox and replace it with a 32-bit Firefox. To do this, go to https://www.mozilla.org/en-US/firefox/all/ and download the 32-bit version with the corresponding language. Some incompatibilities have been detected when maintaining the two versions, so only the 32-bit version should be left installed. To avoid confusion, change the download path for the 32-bit version even if you selected it on the Firefox download website.

   If you have been able to follow these steps and view the certificate in the "Your certificates" tab, it means that the DNIe software and the root certificate for Firefox are correctly installed.

3. After checking that the DNIe is correctly installed, it is necessary to verify that it works correctly. Access the page "http://www.dnielectronico.es/" of the electronic DNI . In the menu on the left side, click on "How to use DNI ", "Verify that it works".

   The verification of the certificates can be done from the "@FIRMA -" validator. VALIDe " or from " FNMT ". Click on the link to validate the FNMT .

   

   Enter the PIN and select the authentication certificate. A window will appear again to enter the PIN.

   As a result of this check, a page will appear indicating, if everything is correct, "Your eDNI has just been verified. You have an Active Authentication Certificate."

   

   If you still do not advance to the next screen after entering the PIN correctly or a "Page cannot be displayed" message appears, the PIN is probably blocked.

   If it appears active, the authentication certificate has been verified as valid, now it will also be necessary to verify the signature. To do this, you can carry out any procedure at the Electronic Office of the AEAT that requires an electronic signature, for example, obtaining a tax certification.

   Until validation (authentication and signature) is completed successfully, the DNIe will not work on our website.