1. MitID Erhverv

Note

Note that using TrustView with MitID Erhverv requires the installation of the TrustView MitID Erhverv module.

1.1. Set up MitID Erhverv certificate profile

Before ordering MitID certificates or adding an OCES certificate for the first time in TrustView, a certificate profile must be set up on the MitID Erhverv Portal.

Create a new certificate profile:

How to create a new certificate profile

The fields for name and e-mail for contacts must be filled out in this case (even though it is shown as optional). This will allow the method of identification of a one-time code to be selected in the next step.

Enter the information for the certificate profile

The identification method of a one-time code and the issuing method of the internet browser must be selected:

Select the one-time code identification method

After the certificate profile has been created, note the one-time password displayed. The reference number is available when viewing the certificates section of the certificate profile created (or you can extract it from the issuance link in the e-mail sent to the contact e-mail address used during the certificate profile creation).

Find the reference number of the certificate profile

Note the one-time code displayed

Once that has been completed, the next time the OCES certificate needs to be renewed, the certificate can be renewed from inside TrustView, by clicking Renew now on the OCES certificate detail page.

Important

It is only possible to renew it from TrustView before the certificate has expired; otherwise you would have to order a new OCES certificate and import it again.

Inside TrustView, to get the OCES certificate issued, go to MitID Erhverv in the left menu, click Add and choose the Issue MitID Erhverv certificate option.

Issue the OCES certificate inside TrustView

Fill out the form with the PIN and Reference number you got from the MitID Erhverv portal earlier, and set the appropriate Environment (Test or Prod) for the certificate. Click Create and the OCES certificate will now be issued to TrustView, which will monitor it and you have the option to get it renewed automatically or simply click Renew now to manually renew it directly from TrustView.

Important

The renewal must take place inside TrustView, before the OCES certificate expires. If the MitID Erhverv certificate expires, you must restart the process directly from the MitID Erhvervs portal and issue it from inside TrustView or simply import it, to get it monitored by TrustView again, after the renewal.

1.2. Adding an existing MitID Erhverv certificate

Besides issuing a new OCES certificate as described above, Add on the MitID Erhverv page offers two more ways to bring an already-issued MitID Erhverv (OCES) certificate under TrustView’s monitoring:

  • Import existing MitID Erhverv certificate - upload the certificate’s PKCS#12 keystore file together with its password. An Enable automatic renewal of certificate checkbox is available here as well, matching the automatic-renewal option offered when issuing a new certificate.

  • Import existing MitID Erhverv certificate without private key - paste the public certificate text or upload the certificate file (no password, since there is no private key to protect). This path covers both organisational (VOCES) and functional/system (FOCES) OCES certificates. A certificate added this way can be monitored for expiry like any other, but cannot be renewed from TrustView, since TrustView never has its private key.

1.3. MitID Erhverv renewal

In order to be able to renew MitID Erhverv certificates, an action is required.

Send an email to mitiderhverv@digst.dk with the following content:

Email subject: IdM light
Email: Your organizational CVR number and contact information

Note

Digst usually replies back within a few days. You can read more here.

1.4. Troubleshooting

1.4.1. MitID Erhverv e-mail validation error

Some changes have been applied to the process, which you can read more about here.

If you need to renew any OCES or MitID Erhvervs certificates, you may encounter this error in the event log of the detail page of the certificate:

Example of MitID Erhvervs error message
1"detailed_error": "Error requesting client certificate response: {\"errorReasonCode\":\"CertificateEmailNotValidated\",\"message\":\"Email used for the certificate is not validated!\"} - 400",
2"entrytype": "MONITOREDOCESCERTIFICATE_ISSUE_ERROR"

To validate e-mail during renewal of OCES3 certificates using TrustView, complete the following steps:

  1. Log in to the MitID Erhvervs portal

  2. Select the certificate profile

  3. Start a renewal process

  4. Locate the e-mail sent to the e-mail address included in the certificate profile

  5. Click the link to validate the e-mail address in the e-mail

  6. Click Verify on the page opened by the link

  7. Once the e-mail validation has been completed, click Renew now inside TrustView on the same MitID Erhvervs certificate that you attempted to renew before, when you encountered the error

Important

Every time you encounter this error during renewal of a MitID Erhvervs certificate, you will need to go through this process to validate the e-mail.