Skip to main content
Version: 4.41

Firmaprofesional certificate issuance

Overview​

In this tutorial you learn how to manage the complete issuance process for a Firmaprofesional certificate from the Redtrust admin console: from the initial setup of the operator certificate through to the point where the certificate is available for download.

This tutorial is aimed at Redtrust admin console users who act as Registration Authorities (RA) for Firmaprofesional. To follow it, you need the Emitir desde Firmaprofesional permission assigned to your role.

By the end of this tutorial you will have issued a Firmaprofesional certificate and the end user will be able to download it from the personal area.

Before you begin​

Make sure you have:

  • The Emitir desde Firmaprofesional permission assigned to your role in Redtrust (see Required permissions)
  • The PFX file of the operator certificate provided by Firmaprofesional and its password
  • The applicant's details: first name, surnames, identity document type and number, and email address
  • The identity and representation documentation corresponding to the profile you are issuing (see the Firmaprofesional certificate profiles reference)

Step 1: Configure the operator certificate​

The operator certificate is a PFX file that Firmaprofesional provides. Redtrust uses it to authenticate with the Firmaprofesional API. Without it, you cannot create or manage requests.

You only need to perform this step once, or when you need to renew or replace the certificate.

  1. Sign in to the Redtrust admin console.
  2. Click your username in the upper-right corner and select Perfil.
  3. In the Detalle certificado de operador section, click Subir certificado de operador.
  4. Select the PFX file.
  5. Enter the certificate password in Contraseña del certificado.
  6. Click Subir.

Redtrust validates the certificate and stores it securely. Once complete, the certificate name, its upload date, and its expiry date appear in the Detalle certificado de operador section.

warning

The operator certificate has an expiry date. When it expires, Firmaprofesional certificate requests stop working until you upload a new one. Renew the certificate with Firmaprofesional before it expires.

Step 2: Create the certificate request​

  1. Go to Certificados > Peticiones > Firmaprofesional tab.
  2. Click Emitir certificado.
  3. Select the certificate type you need and click Siguiente.

The available profiles depend on your account configuration with Firmaprofesional. To see all available profiles and the documentation required for each, see the Firmaprofesional certificate profiles reference.

Fill in the applicant details​

  1. In the General step, fill in the form fields. The available fields depend on the selected profile and are provided by the Firmaprofesional API, so they may vary. For the documentation required for each, see the Firmaprofesional certificate profiles reference. In all cases, the holder's details must match their identity document exactly.
  2. Select the Duración del certificado from the dropdown.
  3. Click Siguiente.
warning

The holder's email address is linked to the certificate. If you need to change it after issuance, you must revoke the certificate and issue a new one.

Configure the group and backup copy​

In the last step of the wizard:

  1. Select the certificate group or groups to which the issued certificate will be assigned.

  2. (Optional) Under Copia de seguridad, select whether to generate a copy of the certificate:

    • Copia del titular: the holder can download it from the personal area (requires the Descargar certificado de Firmaprofesional permission in their role).
    • Copia del operador: the admin can download it from the admin console (requires the Permitir copia de operador permission in their role).
    info

    The backup copy can only be downloaded once. If the holder declines it at the time of download, the private key cannot be extracted from Redtrust and Redtrust becomes the sole custodian.

  3. (Optional) Assign an owner to the certificate.

  4. Click Aplicar. The contract downloads immediately.

Redtrust has submitted the request to the Firmaprofesional API. The request appears in the requests list with a paper plane icon indicating the Pedido state.

Step 3: Obtain the signed contract​

  1. Find the file in your computer's downloads folder. To download it again, go to the Firmaprofesional tab, click ⋯, and select Descargar contrato.
  2. Give the contract to the applicant to sign digitally or by hand.
  3. Scan or save the signed contract in PDF or image format.

Step 4: Manage the evidence​

Evidence consists of the documents that prove the holder's identity and, for corporate certificates, the existence of the entity and the powers of representation.

  1. Click your request from the requests list in the Firmaprofesional tab.
  2. In the dialog, go to the Evidencias tab and upload files in the required and optional fields. If you need to attach more images (for example, if you have a DNI in two separate files), use the Agregar button.
  3. Click Cerrar.

The icon in the requests list changes to an upload icon, indicating Evidencias completadas.

warning

The identity document must be a DNI, photo residence card, or valid passport. A driving licence, NIE, or residence card without a photo are not valid.

The copy must include the complete image of the document. If the copy is cropped, it is only acceptable if it includes all the data that will go into the certificate, a legible support number, and a photograph of the holder.

See the profiles reference if you are unsure which documents are required for each profile.

Step 5: Validate the identity​

  1. Locate the request in the list in the Firmaprofesional tab.
  2. Click ⋯ > Validar identidad.

Redtrust submits the identity verification to Firmaprofesional using the operator credentials.

info

If the Validar identidad option does not appear in the menu, the request is not yet in the required state for this step, or it has already been completed.

Step 6: Check the result​

You can check the updated state of the request by clicking the certificate and viewing the state in the General tab. When Firmaprofesional completes its review, the request moves to the Aprobado state.

If Firmaprofesional rejects the request, it moves to the Rechazado state. Check the reason in the request detail.

Step 7: Obtain the certificate​

When Firmaprofesional has approved the request, you can obtain the certificate.

  1. Locate the request in the list in the Firmaprofesional tab.
  2. Click ⋯ > Emitir certificado.
  3. Optional: if the certificate was configured with an operator copy in step 2, you can download it from the same list by clicking ⋯ > Descargar certificado.
warning

The operator copy can only be downloaded once. Once downloaded, the option is no longer available.

Summary​

You have completed the issuance process for a Firmaprofesional certificate: you configured the operator certificate, created the request, collected and uploaded the documentation, and validated the identity. Once issued, the holder can download the certificate from the personal area.

Next steps​