Why signature cards are declining
With a card, the private key is stored on the chip. Every signature needs the card, a certified reader, drivers and local signing software. Operating-system updates, new computers and remote work regularly create support effort. Cards also expire and must be reapplied for.
eIDAS explicitly allows a qualified trust service provider to manage the signature creation device on behalf of the signatory. That is the legal basis for remote signing.
How remote signing works
The qualified certificate is generated and stored in the provider's highly secured hardware security module. Only you can trigger it: you open the document in the browser, review it and confirm with a second factor, such as a smartphone app.
No reader, drivers or local software are required. You can sign on PC, tablet or smartphone – in the office, at home or on site. The result is a QES that can be validated just like a card-based signature.
Identification and costs
Before a qualified certificate is issued, your identity must be verified once, for example via online ID or video identification. DE-CODA SIGN offers two options: a European QTSP with a 3-year certificate (€4.90) or a German QTSP with a 5-year certificate (€14.90).
After identification you sign without additional hardware. Plan identification early so it is complete before your card expires.
Parallel use and phased transition
You don't need a hard switch-over date. DE-CODA SIGN can be used alongside your existing D-Trust card until it expires. Start by moving selected document types – such as expert reports or certificates – to remote signing, gain experience, then complete the move.
Common pitfalls when switching
Transitions rarely fail because of technology; they fail because of organisation. Identification is often started too late, leaving a gap between card expiry and the new certificate. Allow several weeks of lead time.
A second issue is recipients who validate signatures automatically, such as courts, authorities or clients with their own checks. Tell them early that your certificate will change and send a test document. The same applies to internal templates: signature fields, filing paths and naming rules should match the new process.
Third, clarify delegation rules. With remote signing, every authorised person uses their own certificate – shared cards or passed-on PINs, which are legally problematic anyway, become a thing of the past. Document who may sign which documents with a QES.
Transition checklist
• Note your card's expiry date and set a transition date. • List document types you currently sign with a QES. • Inform recipients who validate signatures technically. • Complete identification with your chosen QTSP. • Sign first documents in parallel and test validation with recipients. • Retire old readers and software once the card expires.
DE-CODA has supported the Chamber environment since 1997 and will review your current card with you.
Frequently asked questions
Is remote signing as legally secure as a card?
Yes. Both produce a qualified electronic signature with the legal effect of a handwritten signature.
Do I still need a card reader?
No. A browser and smartphone are enough.
What about documents I already signed?
They remain valid. A signature relates to the moment of signing.