How can we help you?
Order my product

Can I get a refund?

For any reimbursement request, please contact our Customer Support Desk by email only at questions@luxtrust.lu.

How can I get a LuxTrust certificate or product if I am not your client and I live outside Luxembourg?

To equip you with a LuxTrust certificate or product, we need to identify you in person (or equivalent). In case you do not have the possibility to come at our premises, you can order a product either through video identification or using notary certified documents with apostille (of the Hague).

Order a product via video identification

Two products are currently available through a video identification process:

  • digital identity for personal use associated with the LuxTrust App - order here.
  • digital identity for professional use associated with the LuxTrust SmartCard - order here.

Please make sure you meet the eligibility criteria for a video identification process before ordering.

 

Order a product using notary certified documents with apostille

Getting identified by a notary, in accordance with the Hague Convention of 5 October 1961, is an alternative to face-to-face or video identification.

In case you opt for this type of identification, you need to provide us a copy of your identity card or passport, duly certified by a notary. This copy must bear an apostille and must be legible according to the standards applicable to Luxembourg (alphabet, language, etc.).

Then, please send it by mail along with your printed order file to:

House of Entrepreneurship
One Stop Shop - cellule LuxTrust
14, rue Erasme
L-1468 Luxembourg
B.P. 305, L-1030 Luxembourg
Phone: 42 39 39 – 341
Fax: 43 83 26
E-mail: luxtrust@cc.lu
Opening hours: only by appointment

How to prepare for the video identification?

To get through a video identification process, you need:

  • a smartphone (supporting at least iOS 12 or Android 6) with microphone and good camera functionalities
  • the same valid ID document you used during the ordering process
  • your VideoID code received during the ordering process
  • a good Internet connection and phone signal
  • to be alone, in a quiet and calm place

How will I know if my video identification process was successful?

If the video identification process was successful and your identity has been validated, you will receive your LuxTrust codes by SMS within 24 hours after your video session.

How to check the expiry date of my LuxTrust certificate?

You can check the exact expiration date of your LuxTrust certificate at any time by logging into your MyLuxTrust area in the Test my certificate section.

What type of LuxTrust certificate or product do I need?

LuxTrust provides you with a multitude of options to benefit from a trusted digital identity. Most of our partners support all our devices, but some of them may have specific requirements.  

In order to find the product that best fits your needs, take a few moments and ask yourself the following questions: 

  • Do I need a device for professional or personal use?
  • For what type of operations will I use it? Is it for registering for VAT, filling my taxes, connecting to my bank or something else?
  • Does my provider support the device or product I chose?
  • Can I come to LuxTrust’s office in Luxembourg to get identified?

You can also check here the list of devices accepted by each of our partners.

Will I be reimbursed if I could not complete the video identification process due to a technical issue?

If you were unable to complete your video identification session due to technical reasons, please contact our Customer Support Desk at +(352) 24 550 550 or by email at questions@luxtrust.lu. We can then either help you restart the process or refund you.

If the session was not validated because your ID document was not compliant or valid, no reimbursement is possible.

How long is my LuxTrust certificate valid for?

The certificate, to which your device is linked, is valid for three years. We will inform and invite you to renew your certificate when it is about to expire.

What should I do if I could not complete my video identification?

If your VideoID activation code is still valid, the system allows you to start again the process.

If your code has expired, please contact our Customer Support Desk at +(352) 24 550 550 or by email at questions@luxtrust.lu.

What if I cannot get in touch with an operator during my video identification process?

If you reach the point when you have to speak with an operator and you receive the following message “Please wait, an operator will answer as soon as possible”, it will usually take a few more minutes until you can speak with one. If you can no longer wait, please resume the session at a more convenient time.

If, after several attempts, you could not still get in touch with an operator, please contact our Customer Support Desk at +(352) 24 550 550 or by email at questions@luxtrust.lu.

What are the eligibility conditions for video identification?

To be eligible for video identification process, you must:

You are not eligible? Then, you will need to get identified in person. 

What payment methods does LuxTrust accept?

If you order digital identity products (Token, Smartcard, app, Signing Stick), you can pay by credit card (MasterCard or Visa) or use a voucher provided by your employer or bank.

If you order an SSL certificate, you can also pay by bank transfer.

Activate and use LuxTrust

Can I use COSI Home Edition if I am not a LuxTrust client?

The service is currently reserved for LuxTrust customers (including persons who have a Luxembourgish eID card).

If you want to become one, you can get a LuxTrust digital identity: 

  • for private/personal use here.
  • for professional use here.

Can I use COSI Home Edition for my company?

You can use the service as long as you still have credit (e-signatures) available.

For businesses, LuxTrust proposes various solutions more adapted to their needs. You can contact us here to find out more.

How to activate my LuxTrust Mobile app if I never had a LuxTrust device (Token or Scan) before?

Please check the activation guide available here.

How to activate my LuxTrust product (except the LuxTrust app)?

To start using your LuxTrust product, you must first activate it on our website. Go to your MyLuxTrust area under My certificate > Activate. You will need your device and your LuxTrust codes (received by SMS or mail) and follow the instructions.

If you do not activate your product within 60 days after the order, it will become automatically and irreversibly unusable. You will then have to order a new one at your own expense.

How to use my SmartCard?

When you connect to one of our partners’ websites, you have the possibility to choose from several LuxTrust devices.

  1. Select the LuxTrust SmartCard.
  2. Make sure you have inserted it into the card reader that is connected to your computer.
  3. Insert your PIN.

Before you use for the first time the SmartCard, you need to download and install the LuxTrust Middleware on your computer. For more information, click here.

How to use my LuxTrust app?

There are three ways to use LuxTrust app to log in or perform online transactions.

App2App mode

Once set up within your banking app, the LuxTrust app can automatically exchange with it so that you do no longer need to enter a one-time password (OTP). Simply confirm or cancel the transaction. Each banking app is different, so you need to check with your bank how to enable this feature.

Scan the QR code (mosaic image)

When connecting to a website using a computer or tablet:

  1. Select the LuxTrust app from the displayed devices.
  2. Enter your UserID and password.
  3. Launch the LuxTrust app on your smartphone.
  4. Tap on Scan.
  5. Aim the QR code with your phone’s camera.
  6. The camera will decrypt the image and then generate a one-time password (OTP) that you will be able to enter in the field provided for this purpose on the website.

Push notification

The partner websites that have enabled this feature will automatically send you a notification in the LuxTrust app asking you to confirm or cancel the specific operation. You can also find it under “Pending transactions”.

How to use my LuxTrust Scan?

When you connect to one of our partners’ websites, you have the possibility to choose from several LuxTrust devices.

  1. Select the LuxTrust Scan.
  2. Enter your UserID and password.
  3. Turn on the LuxTrust Scan by pressing its top right button.
  4. Aim for the QR code displayed on the website.
  5. Enter the code (called one-time password - OTP) displayed on the screen in the field provided for this purpose on the website.

How to use my Signing Stick?

When you connect to one of our partners’ websites, you have the possibility to choose from several LuxTrust devices. 

  1. Select the LuxTrust Signing Stick.
  2. Make sure you have inserted it into a USB port on your computer.
  3. Enter your PIN.

Before you use for the first time the Signing Stick, you need to download and install the LuxTrust Middleware on your computer. For more information, click here.

How to use my LuxTrust Token?

When you connect to one of our partners’ websites, you have the possibility to choose from several LuxTrust devices.

  1. Select the LuxTrust Token.
  2. Enter your UserID and password.
  3. Press the Token button to display the 6-digit OTP code.
  4. Enter the OTP code displayed on the screen in the field provided for this purpose on the website.

Do I have to return the LuxTrust product and revoke my LuxTrust certificate if I change my bank?

Your LuxTrust digital identity gives you access to a set of online services and belongs to you. You can therefore keep your LuxTrust product and continue to use it if your new bank is among our partners.

Where can I find the activation code of my LuxTrust product (Scan, SmartCard…)?

The activation code is a 5-digit code. You have set it during the ordering process. We had advised you to use the last 5 characters of your identity card or passport number.

Where can I use LuxTrust?

Click here to check the list of our partners and authorised applications.

What if I cannot see my e-signature in a PDF document signed in COSI Home Edition?

It may happen that the drawing/image representing your signature is not visible in the document. However, if you have completed your signature process, your document is duly signed electronically.

Your electronic signature is not visible in the same way as a handwritten signature. You can check it by opening your document with Adobe Reader.

What happens when I used my 2 free e-signatures in COSI Home Edition?

You will still be connect to the platform, but will not be able to sign. Your credit will be automatically renewed at the end of each month.

If you have recurrent, more complex administrative needs, check our electronic signature solutions adapted to business needs.

What are the technical requirements to use COSI Home Edition?

There are no specific technical requirements for using this service, you just need a good Internet connection.

For your security, we advise you to take all precautionary measures to protect your computer (such as install an antivirus, keep your system up-to-date etc.) and do not disclose your LuxTrust credentials (User ID and password) under any circumstance.

Manage my account

Can I convert / upgrade my private certificate into a professional certificate?

Unfortunately, it is not yet possible to change or upgrade your private certificate into a professional one.

If you need a professional certificate, you can order one here.

How to update my personal data (email, address, phone number)?

For the time being, contact our Customer Service Desk at (+352) 24 550 550 to update your data.

How to associate a LuxTrust Scan to my LuxTrust certificate?

If you already have a LuxTrust Token or the LuxTrust app, you can associate a LuxTrust Scan to your certificate.

  • If you are equipped with the LuxTrust app, go to your MyLuxTrust area under Manage my products and click on Add a device to associate your LuxTrust Scan.
  • If you only have a Token, call our Customer Service Desk at (+352) 24 550 550.

Once your Scan is linked to your LuxTrust certificate, you can handle it using the UserID and password of your Token or LuxTrust app.

For information, the Scan cannot be associated with a certificate linked to a SmartCard or a Signing Stick.

How to change (reset) my password or PIN code?

  • If you have a Token, Scan or the LuxTrust app, go to your MyLuxTrust area in Change my password.
     
  • If you have a Smartcard or Signing Stick, you will need letter received by mail during your order which contains your initial codes (PIN, PUK and Challenge). Then follow the instructions according to the operating system of your computer: Windows, Mac or Ubuntu.

You can enhance your security by regularly changing your password or PIN code.

How to temporarily deactivate a LuxTrust product?

If you want to temporarily disable access to one of your LuxTrust products (for example, in the event of theft or loss), there are 2 available options:

  1. If you already have a second device linked to your certificate
    Go to your MyLuxTrust area in Manage my products section and proceed to the deactivation of your product of choice.
     
  2. If you have no other device linked to your certificate
    Call our Customer Service Desk at (+352) 24 550 550. After identifying you, our agent will give you a security code to connect to your MyLuxTrust area.

How to change my secret image?

To change your secret image, go to your MyLuxTrust area on our website and click on Change my secret image.

When will I see my secret image?

You will get to see your secret image every time you use your LuxTrust Token, SmartCard, Signing Stick or your Luxembourgish eID card.

Do I still need to activate my LuxTrust product if I renewed my certificate?

Only if you have a LuxTrust SmartCard or Signing Stick, you have to activate it after each certificate renewal. To proceed, go to your MyLuxTrust area in My Certificate section and click on Activate.

How to temporarily suspend my LuxTrust certificate?

If you have lost your LuxTrust product or if you wish to make it unusable for a short period of time, you can choose to suspend it. You will be able to reactivate it within 30 days. After this period, your certificate will be automatically revoked and unusable. You will then have to order a new one at your expense.

To suspend your certificate, go to your MyLuxTrust area in Suspend my certificate section.

If you no longer have your initial codes, contact our Customer Service Desk at (+352) 24 550 550 at any time.

How to replace my LuxTrust Scan?

In order to replace your LuxTrust Scan, please contact your bank. It will inform you on the steps to take.

How to permanently deactivate my LuxTrust certificate associated with my device?

If you no longer want to use your LuxTrust certificate, it is best to revoke it so that no one else can use it. Revocation is an irreversible action and your certificate cannot be reactivated.

You can revoke your certificate in your MyLuxTrust area, under Revoke, or by calling our Customer Service Desk at + (352) 24 550 550 (available 24/7).

You can also go to one of our Registration Authorities. In order to ensure the legitimacy of your request, the agent will have to identify you and ask you to show an official identity document (ID card, passport or Luxembourgish residence card).

In a professional context, if you are a "Certificate administrator", you can request the revocation of a certificate issued on behalf of your organisation without the prior approval of the certificate user. You can send you revocation request signed electronically with your "Administrator" certificate to questions@luxtrust.lu.

I forgot the password of my Token, Scan or LuxTrust app. How to reset it?

If you have forgotten the password for your Token, Scan or LuxTrust app, you can reset it in your My LuxTrust area, under Forgotten password. The system will either send you an SMS or ask for your initial codes if we do not have your mobile phone number.

If your account is blocked or you no longer have your initial codes, contact our Customer Service Desk at (+352) 24 550 550.

I forgot the PIN code of my Smartcard or Signing Stick. How to reset it?

If you have forgotten your PIN code, find the letter received by mail during your order which contains your initial codes (PIN, PUK and Challenge). Then follow the instructions corresponding to the operating system of your computer: Windows, Mac or Ubuntu.

If you no longer find your initial codes, contact our Customer Service Desk at (+352) 24 550 550.

My certificate has expired. What should I do?

If your certificate has expired, you can renew it in your MyLuxTrust area in Expired certificate. This will allow you to order a new certificate while retaining your access and identifiers (SSN number, User ID and password).

If you no longer have your initial codes or your certificate has expired for more than 3 months, contact our Customer Service Desk at (+352) 24 550 550 or by email at questions@luxtrust.lu.

  • If you have a LuxTrust Token, Scan and the LuxTrust app, you can keep your device as well as your credentials (User ID and password).
  • If you have a SmartCard or Signing Stick, we will send you by post a new device and new codes. You will then have to activate the new product and set a new PIN code.

My certificate is about to expire. How do I renew it?

The LuxTrust certificate is valid for 3 years. Before it expires, we will inform you by email. Then, you can renew it in your MyLuxTrust area in Renew my certificate section. This will allow you to order a new certificate while retaining your access.

  • If you have a LuxTrust Token, Scan and the LuxTrust app, you can keep your device as well as your credentials (User ID and password).
     
  • If you have a SmartCard or Signing Stick, we will send you by post a new device and new codes. You will then have to activate the new product and set a new PIN code.

Where to find my initial codes (LuxTrust codes)?

You received the LuxTrust initial codes either by SMS or by post after your order.

In case you can no longer find them, please contact our Customer Support Desk at (+353) 24 550 550 or your bank agency.

What can I do if my certificate is revoked?

Revocation is an irreversible action.

If you need a LuxTrust certificate, you have to order a new one via our website or your bank.

LuxTrust application

Can I associate multiple certificates to my LuxTrust app?

For the moment, the LuxTrust app can be associated to only one certificate (either a digital identity for private use or a digital identity for professional use).

Can I benefit from LuxTrust app if I have a Smartcard and/or Signing Stick?

Our Smartcard and Signing Stick cannot be associated with LuxTrust app.

Can I install the LuxTrust app on a second phone?

It is possible to install the LuxTrust app linked to your certificate on a second smartphone.

If you have more than two smartphones associated with your LuxTrust digital identity, the LuxTrust app will ask that you delete one. Remember to define the name of your device when activating the application to ease your task.

Can I use my LuxTrust app for my online shopping?

You can use your LuxTrust app for all your online purchases. To choose this option, you just have to go in your e-banking space.

How many times can I defer the backup activation?

At any time, you can enable or disable the backup feature in the “Security” menu of the LuxTrust Mobile app.

How to activate my LuxTrust Mobile app with my Scan?

Please check the activation guide available here.

How to activate my LuxTrust Mobile app with my Token?

Please check the activation guide available here.

How does the backup of the LuxTrust Mobile app work?

When you back up your LuxTrust Mobile app, an encrypted secured file is saved on your smartphone’s operating system for identification purposes. It contains a recovery “safety code” to safeguard the data.

Having a backup allows you to restore your LuxTrust Mobile App more easily if you switch smartphones or encounter any unexpected issues (for example, a technical problem or the loss or theft of your phone).

To use this feature, the cloud save must be enabled on your smartphone. You can also do a manual save with iTunes or equivalent.

How is my recovery “safety code” protected?

The recovery “safety code” is not shared with anyone but it is kept in a secure place (file). This file is saved by a third party (your mobile operating system, e.g. Android, iOS or equivalent) but it is under your control.

You can choose the backup modalities in the settings of your phone: manual backup, cloud, etc.

How can I enable/disable the backup feature?

You can enable or disable the backup feature in the “Security” menu of the LuxTrust mobile app.

For assistance, please contact our Customer Care by phone at +352 24 550 550 or via e-mail at: questions@luxtrust.lu.

Do I still have to keep my Token or Scan if I activated my LuxTrust app?

We advise you to keep safe your LuxTrust Token or Scan. It may serve as a backup solution in case your phone gets lost or stolen.

Will I be able to continue using the LuxTrust Mobile app if I do not activate the backup feature?

It is necessary to activate the backup feature to continue using the LuxTrust Mobile app. It can then be disabled.

How secure is the backup feature of the LuxTrust Mobile app?

LuxTrust implements appropriate state-of-the-art technical and organisational measures to protect its users’ personal data.

As the backup of the LuxTrust Mobile app is saved by your mobile operating system, we highly recommend securing it with multi-factor authentication, strong passwords or PIN codes. Do not share those with anyone.

You can refer to Android/iOS or equivalent support to understand how the backup can be further secured.

For more details about the LuxTrust Mobile app backup feature, please read the Annex or our Informative Notice: Privacy policy | LuxTrust S.A.

Why should I back up my LuxTrust Mobile app?

The backup offers an enhanced user experience. It shortens the waiting time when you change smartphones and facilitates the reactivation of the LuxTrust Mobile app on a new smartphone.

What to do if I did not receive my verification SMS to complete the activation?

If you did not receive your verification SMSes during the activation process, your personal data are most likely outdated or missing from our database.

Please contact our Customer Service Desk at +(352) 24 550 550 (Monday to Friday from 08:00 to 18:00) or by email at questions@luxtrust.lu in order to update your client profile and complete the activation.

What type of data is saved during the backup of the LuxTrust Mobile app?

The only data processed is a recovery “safety code” linked to a User/Proxy User identification. For more information, please consult our Information notice available here.

What is the difference between my Initial Password, my Password and my Passcode?

The Initial Password is the one you received by post or SMS when you ordered your LuxTrust product.

The Password is the one you set up when you activated your certificate. It must be between 6 and 10 characters long and contain upper and lower case letters and digits.

You chose your Passcode when you activated the LuxTrust app. It enables you to unlock your app. It must also be between 6 and 10 characters long and contain upper and lower case letters and digits.

What are the technical requirements to activate the backup feature?

In order to activate the backup, make sure the “cloud save” is enabled on your smartphone. You can also save it manually with iTunes or equivalent.

What are the technical requirements to use LuxTrust app?

LuxTrust app is compatible with iOS 13 (or newer) or Android 7.0 (or newer).

For security reasons, LuxTrust does not accept rooted or jailbroken devices.

SmartCard reader and Middleware

How to install or update the LuxTrust Middleware?

Download the latest Middleware compatible with your operating system here.

Before connecting your device to your computer, install the LuxTrust Middleware. Restart your computer at the end of the installation.

If it is the first time you activate your device, do not forget to:

  • Change your initial PIN code you received by mail after your order.
  • Activate your certificate in MyLuxTrust area in My certificate section > Activate.

Where can I buy a SmartCard reader?

To use your Smartcard, your need to have a SmartCard reader.

You can buy a card reader:

  • online on www.linsys.lu or www.conostix.lu
  • in the approved POST shops (Luxembourg-Gare, Luxembourg-Ville, Esch-Alzette, Ettelbruck, Wiltz, Grevenmacher).

LuxTrust guarantees the compatibility of its products with any of the readers listed below:

  • IdBridge CT30
  • IdBridge CT40
  • Ezio Shield Pro

     

    What to do if the LuxTrust Middleware does not start?

    You have just finished the installation and restarted your computer, but the LuxTrust Middleware does not start. The following error message appears:

    “The LuxTrust Middleware cannot be started. Another session is already running on your computer under another user of your operating system. Please log into the other user account and close the session. Then restart the LuxTrust Middleware.”

    When you see this message, it could be that:

    • you have 2 active sessions. So, you have log in first under the other user to close the session and then restart the LuxTrust Middleware.
    • the port is already used by another application. In this case, you have to stop the other application or change the port of the other application. LuxTrust Middleware acts as a local server and is connected to port 24727. If another application is using the same port, the error message above can appear.
    • you have an OpenEcard app installed. So, you have to stop this application as it uses the same port as the LuxTrust Middleware.

    What to do if my SmartCard or Signing Stick is not recognised by the LuxTrust Middleware?

    If your Smartcard/Signing Stick is not recognised by the LuxTrust Middleware, you should:

    • Make sure your device is duly connected to your computer
    • Close the LuxTrust Middleware by clicking on Exit
    • Restart the LuxTrust Middleware

    If the issue persists, please contact our Customer Service Desk at +(352) 24 550 550.

    What operating systems and platforms are supported by LuxTrust Middleware?

    The list of operating systems and platforms supported by LuxTrust Middleware is available here.

    Product lost, stolen or blocked account

    How can I unblock my LuxTrust certificate?

    If you have a LuxTrust Token, Scan or the LuxTrust app:

    • Go to your MyLuxTrust area in Unblock my account.
    • Enter your UserID, the code received by SMS on your phone (or the initial Password you received in the SMS or letter when you ordered the product), as well as the OTP displayed on your Token, Scan or the LuxTrust application.

    For security reasons, your account is blocked after 5 failed logins. It will be automatically unlocked after 12 hours. Once unlocked, we advise you to set a new password.

    If you have a LuxTrust SmartCard or Signing Stick, you have probably blocked your PIN code. To solve the issue, please follow the procedure according to your operating system:

    What to do if I lost my LuxTrust device (Token, Scan, SmartCard or Signing Stick) or it got stolen?

    If you have lost your LuxTrust device or it got stolen, immediately contact our Customer Service Desk at +(352) 24 550 550 and ask your certificate to be suspended.

    You can also temporarily suspend your certificate in your MyLuxTrust area. For this, you will need your initial codes received when you first ordered the device.

    Depending on your situation, you can either order and associate a new device to your account or revoke your certificate and order a new one. If you have questions about which action to take, please contact our Customer Service Desk at +(352) 24 550 550.

    What to do if my LuxTrust product is faulty?

    If your LuxTrust product is faulty (out of service, the screen is unreadable, etc.), please:

    1. Contact our Customer Service Desk at (+352) 24 550 550 (or your bank branch if you have a Token or Scan) to proceed with its replacement.
    2. Return us the faulty device by post, in person at our offices or by handing over your Token or Scan to your bank branch.

    We will give you a new device free of charge. You will keep your UserID and Password.

    What if I no longer have access to my LuxTrust app (I replaced my phone or it got stolen)?

    If you have changed your phone or it has been stolen, there are 2 possible options:

    1. If you have a Token or Scan linked to the same certificate as your LuxTrust app: you can re-download the app and proceed to its activation. As a precaution, you should suspend access to your old phone. To do this, go to your MyLuxTrust area in Manage my products section.
       
    2. You don’t have any other additional device: please contact our Customer Service Desk at +(352) 24 550 550. A LuxTrust operator will help you associate the app with your account and suspend the access to your old phone.

    What if I can no longer remember by secret image?

    If you are not sure about the secret image you had chosen, go to your MyLuxTrust area in Change my secret image section. There you can pick a new one that you need to remember for your future operations.

    What to do if I do not remember or find my UserID or my LuxTrust codes?

    If you do no longer have or find your LuxTrust codes, please call our Customer Service Desk at +(352) 24 550 550.

    What to do if I do not see my secret image or it does not match with the one I have chosen?

    If you do not see your secret image when you enter your OTP or PIN code or it is not the one you have chosen, then you are most likely on a pirate site imitating LuxTrust. Cancel the transaction and call our Customer Service Desk at +(352) 24 550 550 to report it.

    As a reminder, you will not see your secret image if you are using the LuxTrust app or Scan.

    Solutions for professionals

    If I have a professional certificate, do I have to return the LuxTrust product if I leave the company?

    In case you leave the company, you (as delegated user) or your employer should revoke the digital certificate associated with to your device.

    For security reasons, we encourage you to revoke it yourself (action available in your MyLuxTrust area). If you also have a device such as a Smartcard or Signing Sick, please destroy it as you would normally do with a credit card.

    Can I change the data of my certificate after it was issued (VAT number, address, company name)?

    You can change the notification email, postal address or phone number of your active professional certificate. The intracommunity VAT number can only be changed in the billing address. To do so, please contact our Customer Service Desk at +(352) 24 550 550.

    However, you cannot modify the company name or the email address displayed when you apply an electronic signature using your certificate. If you want a certificate with this new data, you will need to order a new one.

    Can the electronic signature's validity be challenged in court?

    Within the European Union, an electronic signature cannot be dismissed solely on the grounds of its format. In the case of the qualified electronic signature, its legal value is equivalent to that of a handwritten signature. However, in case of litigation, it is possible to dispute the validity of this type of e-signature. It will then be necessary to provide proof that it was created through fraudulent means.

    The burden of proof in case of dispute of an electronic signature

    If the e-signature is qualified, it is commonly acknowledge that it has the legal equivalent of a handwritten signature. It will therefore be up to the party who challenges the signature to prove that it cannot be assimilated to a handwritten signature in a specific case.

    On the other hand, if the electronic signature is advanced, the electronic signature is not a priori assimilated to a handwritten signature. So, it will be up to the party who invokes the validity of the electronic signature to prove that the signature electronic has been made in such a way that it can have the legal value of a handwritten signature.

    Thus, the user of a device allowing him to electronically sign documents at the qualified level will be in a better position in case a co-contractor in an EU country challenges his electronic signature.

    How to obtain evidence in the event of a dispute

    Support in the event of a dispute will depend on your chosen service provider and the level of signature you used.

    If you are a LuxTrust customer or the dispute is related to the use of a LuxTrust signature certificate, you can contact our customer service who can provide the competent authorities with the audit trail related to the use of your certificate. It remains the user's responsibility not to share the elements of his LuxTrust digital identity (UserID, password, OTP or PIN code in the case of chip-based products) with a third party.

    How do I get an overview of the active professional certificates registered in my organisation's name?

    It is possible to send you the list of active certificates linked to your organisation for 100€ excluding VAT.

    You have to 2 options to make this request:

    1. If you have an employee with a "certificate administrator" certificate on behalf of your company, this person can send us a request signed electronically by email to questions@luxtrust.lu.
       
    2. You can send a written request signed by a company representative. This request must be accompanied by a copy of the signer’s identity document as well as recent proof that s/he is authorised to sign on behalf of the company (e.g.: extract from the trade register).

    Why do I need the authorisation of my employer for ordering a professional digital certificate?

    The professional digital certificate allows you to authenticate and sign on behalf of the organisation that employs you. So, in order to issue such a certificate, we need to get the authorisation of your employer besides checking your personal data.

    What is an electronic signature certificate?

    An electronic signature certificate is a document in digital form that contains data related to a natural person. The certificate is issued by a Certificate Authority and a trust service provider. The certificate (also known as a digital identity) binds the identity of the owner to his or her electronic signature.

    What is the difference between a qualified and an advanced electronic signature?

    The most notable difference between a qualified and an advanced electronic signature (as defined in eIDAS Regulation) becomes apparent in case of legal disputes or when a party contests the validity of an electronic signature.

    The qualified level enjoys legal recognition and acceptance across all EU member states. It is the only one having the legal equivalent of a handwritten signature. This means that, in case of a dispute, the judge will view the qualified electronic signature in the same light as a handwritten signature. In addition, its validity is presumed and the reverse burden of proof principle is applied. So, the party contesting the signature will have to prove that the qualified e-signature is invalid.

    If, on the other hand, the electronic signature is advanced, then the party who claims its validity will have to prove to the court that the advanced e-signature is indeed valid.

    Data protection and security

    Are my personal data safe at LuxTrust?

    The security of your personal data is of utmost importance for us. We ensure that your data is protected in the best possible way and according to the European Regulation for Electronic Identification (eIDAS) and the General Data Protection Regulation (GDPR).

    Companies working with LuxTrust request only the strictly necessary data and confirm that they will not use it without your permission.

    LuxTrust shares your data only when you have explicitly given your permission each time. With LuxTrust, you are always in charge of your personal data.

    How long is my OTP valid for?

    Your one-time password (OTP) is valid for 180 seconds or 3 minutes. As its name suggests, it can only be used once.

    If you have to perform a more sensitive transaction, your service provider will most likely ask you for a second OTP. You will need to generate it again with the help of your LuxTrust Token, Scan or the LuxTrust app.

    How can I tell if I am dealing with a fraudulent communication?

    When you receive a communication (by email or SMS), there are several elements that you should check as they might indicate you are dealing with a fraud attempt:

    • Sender’s address or telephone number: they have unusual formats and do not match with the corporate emails or phone numbers you used to communicate previously with your service supplier.
    • The type of demand / request: such communications almost always contain an urgent demand such as to update your data or provide some information to continue accessing a service.
    • Links: most service providers will never send you a link by email or SMS asking to update your data.
    • Spelling: a large number of errors in the wording can be a sign of a fraud attempt.

    What is an OTP?

    OTP stands for “one-time password”. It is a code generated by a security device (Token, Scan etc.) that is valid for a limited timeframe and only for a single session or transaction. You use it to complete traditional static passwords. Once you use it or its validity time passed, the device generates a new one according to an algorithm linking your digital identity to LuxTrust servers.

    Phishing attempts are more and more numerous and hackers mimic very well the websites of your service providers. Be careful not to share your personal data (UserID, passwords, OTPs) via these websites. If in doubt, please contact our Customer Service Desk at +(352) 24 550 550.

    What should I do if I think I am a phishing attempt victim (via email, SMS, fake website)?

    If you have unfortunately shared your personal codes, passwords or data through what you suspect to be a fake website, report it to immediately LuxTrust. Call our Customer Service Desk at (+352) 24 550 550 to suspend your certificate. Please also contact your bank to block any transaction.

    Please always bear in mind that LuxTrust will never ask you to update or share your personal information by email or SMS.

    You could not find the answer you were looking for? Get in touch with our Customer Service Desk.