Knowledge Base

Knowledge BaseeIDAS / QWAC Certificates

eIDAS Employee Certificate Validation: What to Expect During Validation

Updated on May 29, 2026

Overview

This article explains how eIDAS Employee Certificate Validation works, what information is verified, and what organizations and applicants can expect during the validation process.

Common Questions This Article Answers

What is eIDAS Employee Certificate Validation?

What information is validated for an eIDAS Employee Certificate?

Why is organization verification required?

Why is video-based identity verification required?

What actions are required during validation?

What Is eIDAS Employee Certificate Validation?

It is a structured organization and identity verification process required before issuing employee certificates that comply with the eIDAS Regulation.

How eIDAS Employee Certificate Validation Works

The process validates both the requesting organization and the individual employee through trusted registries, verified contact methods, request authentication, and video-based identity verification.

What Information Is Verified During Validation

Organization legal registration and good standing

Organization legal name and DBA (if applicable)

Verified business address where operations are conducted

Verified business phone number or email address

Certificate request authentication

Applicant identity via video-based identity verification

Additional email verification

Subscriber agreement and document integrity review

What to Expect During Validation

Sign and return the Subscriber Agreement

Ensure organization details match official registration records

Provide signer authority confirmation if requested

Complete video-based identity verification using a secure link

Respond to validation calls or emails

Track progress through the Validation Manager

How to Avoid Common eIDAS Validation Delays

The most common eIDAS validation delays are caused by mismatched or incomplete organization information. The following tips can help speed up the process:

Use the Correct Legal Name

Enter the legally registered name of the organization in the company name field

Do not enter a trade name or DBA as the company name

If a trade name is used, it must be officially registered, verified, and entered in the appropriate field

Provide a Valid Business Address

Use the address (street name, city, state and country) where the organization conducts business

Do not use PO Boxes, virtual offices, mail forwarding addresses, or registered agent addresses

Additional Notes

Certain eIDAS certificates require a Qualified Signature Creation Device (QSCD).

For the Sectigo Employee Qualified Certificate QSCD the private signing key is generated and stored on a secure hardware device (token) rather than in software. This additional protection is required to help prevent unauthorized use of the certificate and to meet platform and industry security requirements.

The secure device ensures that:

The private key cannot be copied, exported, or extracted

Only authorized use of the certificate is possible

Signed software can be trusted as coming from the verified organization

Once validation is complete, the private key is provisioned onto the secure token and shipped to the customer. Once received the customer collects the email certificate via the collection email and imports it into the token. https://www.sectigo.com/knowledge-base/detail/Sectigo-eIDAS-Qualified-Certificate-Installation-on-SafeNet-eToken

This secure storage model helps protect users from malicious software and strengthens trust in signed applications.

Identification Structures Used

National Trade Register (NTR)

National Value Added Tax (VAT)

Legal Entity Identifier (LEI)

Use Cases

Issuing employee certificates compliant with EU trust service regulations

Establishing trusted digital identities for employees

Secure authentication and electronic signing in regulated EU environments

Qualified certificate use cases including QSCD certificates requiring USB tokens

Additional Notes

If any organization or identity information cannot be independently verified, a Validation Specialist will contact the customer with resolution options. Certain certificate types such as QSCD certificates require delivery on a USB token.