Catalog of AOC certificates

For public administrations

PERSONAL CERTIFICATES

• • • T-CAT of public employee (on card)
    • T-CAT of public worker (on card)
    • T-CAT Public employee P (in software)
    • T-CAT P of public worker in software)
    • T-CAT of Representative (on card)
    • T-CAT of Pseudonym (on card)
    • T-CAT of Registry Entity operator T-CAT (on card)
    • T-CAT of Registry Entity operator idCAT (on card)

APPLICATION CERTIFICATES

• • • Electronic Seal Certificate (CDA-1 SGNM)
    • Application Certificate (CDA-1)

RELATED PERSON CERTIFICATES

• • • Linked Person Certificate

For the citizens

• • • and dCAT Certificate

Details of each certificate:

For public administrations

Personal certificates:

T-CAT: Qualified electronic certificates

T-CAT of public employee (on card)

The personal card certificate is addressed to natural persons and has information regarding the holder that allows to identify him and his subscribing organization. It is supplied to public employees of the Catalan public administrations as an identification element in electronic communications, allowing documents to be signed in electronic format in order to make online procedures and consultations possible, with full guarantee, and streamlining their management.

With public employee T-CAT, the holder of the certificate is linked directly to a body in the public sector of Catalonia, with an official or contractual relationship that is governed by what is established in the Basic Statute of the Public Employee (Royal Legislative Decree 5/ 2015, of October 30).

This certificate allows, optionally, to identify yourself as a person holding a certain position in your organization.

T-CAT of public worker (on card)

The personal card certificate is addressed to natural persons and has information regarding the holder that allows to identify him and his subscribing organization. It is supplied to public employees of the Catalan public administrations as an identification element in electronic communications, allowing documents to be signed in electronic format in order to make online procedures and consultations possible, with full guarantee, and streamlining their management.

With the T-CAT public body employee, unlike the previous one, the relationship of the person holding the certificate with the body of the public sector of Catalonia is governed by labor law (not by the Basic Statute of the Public Employee , EBEP).

This certificate allows, optionally, to identify yourself as a person holding a certain position in your organization.

T-CAT Public employee P (in software)

The personal certificate of identification and advanced signature with optional charge, is a qualified recognized certificate that identifies, in addition to the person who owns it, to its subscribing organization, and may include a statement regarding the charge of the key holder, is intended for public employees of Catalan public sector entities governed by the EBEP .

The T-CAT P is an advanced signature generator and authentication tool, given that it is delivered in software, without a secure signature creation device; so it can be installed on different media: computers, mobile phones, tablets, etc.

This certificate allows, optionally, to identify yourself as a person holding a certain position in your organization.

T-CAT P of public worker (in software)

The Personal Advanced Signature and Identification Certificate with Charge, optional, is a qualified certificate that identifies, in addition to the person who owns it, its subscribing organization, and may include a statement regarding the keyholder's charge, is intended for public workers in Catalan public sector bodies whose employment relationship is not governed by the EBEP.

It is an advanced signature generator and authentication tool, given that it is delivered in software, without a secure signature creation device; so it can be installed on different media: computers, mobile phones, tablets, etc.

This certificate allows, optionally, to identify yourself as a person holding a certain position in your organization.

T-CAT of Representative (on card)

It is the electronic certificate of representative before high-level Public Administrations, which was incorporated into the Catalog of certificates issued by the AOC Consortium with the adaptation to the EIDAS regulations. This certificate must always be accompanied by an accreditation of the appointment as representative. The document must be a publication in the newspaper or official bulletin, registration in a public register, a notarial document, etc., within the framework of Law 6/2020, of November 11, regulating certain aspects of the electronic services of trust, where it is stipulated that the accreditation of the representation must be carried out by means of a public document.

The representative's T-CAT is a qualified identification and signature tool, which allows the representative to act on behalf of the organization.

T-CAT of Pseudonym (on card)

The Pseudonym T-CAT is a signature certificate for public administration staff with a high-level pseudonym. Personal data will not appear in the certificate, as these will be replaced by the pseudonym indicated. The issuance of these certificates will be subject to prior assessment of the legal accreditation of the pseudonym, which must accompany the request. They will be accepted very specifically for justified uses in which the owner's data cannot be displayed and for people who already have a regulated pseudonym within their organization.

The collectives that can have a pseudonym certificate are those that carry out actions on: classified information, public security, national defense or other actions in which anonymity is legally justified for the performance of actions.

The pseudonym will always be provided by the Administration. They can only request that the identity of the person with a pseudonym be revealed: judicial bodies and other legitimate bodies or persons and only in the cases provided for in Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights. In these cases, the Certification Service Provider will be obliged to reveal the identity of the signatory.

The Legal Regime of classified information is regulated by Law 9/1968, of April 5, on official secrets and Decree 242/1969, of February 20, which develops it.

The pseudonym can be a professional identification number (NIP) as long as it is not related to personal data such as the DNI and alternatively other indicators.

T-CAT: Personal infrastructure certificates

T-CAT of Registry Entity operator T-CAT (on card)

ER Operator T-CAT T-CAT is intended for natural persons who must perform operator responsibilities at a T-CAT registration entity. These entities, which collaborate with the AOC Consortium in issuing certificates, require digital certificates in order to operate with certificate generation and management applications.

Unlike the rest of the personal T-CAT certificates, the T-CAT operator card does not allow the completion of formalities before public administrations. This is because its function is solely to identify the operators who access the ER T-CAT applications and allow the signature of the operations carried out.

T-CAT of Registry Entity operator idCAT (on card)

The T-CAT ER operator certificate idCAT is intended for natural persons who must carry out operator responsibilities at a idCAT registration entity. These entities, which collaborate with the AOC Consortium in issuing idCAT certificates, require digital certificates in order to issue and revoke idCAT certificates to citizens.

Unlike the rest of the personal T-CAT certificates, the idCAT operator card does not allow the completion of formalities before public administrations. This is because its function is solely to identify the operators who access the idCAT operator website and allow the signature of the operations carried out.

Application certificates:

T-CAT: Qualified electronic certificates of public administration electronic seal

Electronic Seal Certificate (CDA-1 SGNM)

The Electronic Seal is a digital certificate that serves for the identification and authentication of the exercise of competence in automated administrative action, according to article 42 of Law 40/2015, of October 1, of the legal regime of the public sector.
This certificate can be used for the exchange of data (between administrations, administrations and citizens and between administrations and companies), the identification and authentication of a system, web service or application, automated electronic filing, checks and electronic copies, among others.

This certificate is recommended for most public administrations that may have the following risks: security breach (e.g. identity theft), moderate financial losses, loss of sensitive or critical information or refutation of a transaction with financial impact meaningful.

Note: The electronic seal is the type of certificate required for the automated actions of many AOC services (EACAT, e-TAULER, e-NOTUM, Representa, Copy..) and for calls to the centralized signer from tools own

T-CAT: Application certificates

Application Certificate (CDA-1)

This certificate is stored on a server (preferably on a cryptographic device) and is required by an application to sign documents or messages to ensure the authenticity and integrity of signed messages or files.

Its use is equivalent to a tampon of the body or department.

It is not a personal certificate, but is linked to an application and acts synchronously, so it does not require the intervention of any operator.
The hardware on which this certificate will reside needs to be sized well, as asymmetric signing tasks can saturate it. However, access to the hardware must be restricted and protected to prevent possible fraudulent uses of the certificate.

For the citizens

IdCAT Certificate:

The idCAT Certificate is a digital identifier that is installed in the browser while guaranteeing your identity on the Internet and allows you to access the different procedures and management offered by many public administrations.

The idCAT Certificate expires 4 years after its issue.

SUMMARY TABLE