Identification by QES / AES
A qualified electronic signature (QES) or an advanced electronic signature (AES) based on a qualified certificate (hereinafter referred to as a QES) can be used not only to sign documents, but also as a 2nd factor for identifying an employee (user) to access company data.
To allow access to the company using a QES, you need to enable QES identification in the Company Account settings in the Security section.
The system provides the ability to identify both with file keys and with cloud and hardware keys.
The user (employee) will be granted access to the company only if his/her identification code from the QES key certificate matches the code specified in his/her data in the Employees directory of the Company Settings section.
If the value of the identification code field in the employee's data in the Employees directory is not filled in, it will be automatically filled in with information from the employee's QES certificate during the first identification.
At the moment of enabling QES identification, users will lose access to the company until they pass QES identification.
Identification is required for each device (browser) on which the employee logs in to the company.
The identification validity period applies for the respective device and can be configured from minimum (1 day) to maximum (unlimited). After logging out on the device where the QES identification was previously performed, it will be requested again during the next login.