Electronic seal and timestamp integration guidelines

Prerequisites

Before integrating an electronic seal, apply for the required eZīmogs service through the organization’s legal entity profile on eParaksts.lv.

ℹ️

For more information about the eZimogs, see Electronic seal and timestamp.

1. Access your organization's legal entity profile on eParaksts.lv.
2. Apply for the required eZīmogs service.
3. Sign the application electronically.
4. Receive the service within 5–10 business days.

LVRTC provides one of the following:

• eZīmogs+ smart card and PIN envelope
• eZīmogs certificate in file electronically
• eZīmogs+ cloud (See integration guidelines)

💡

A timestamp is included with the electronic seal package.

To apply only for timestamping services, contact eParaksts support at [email protected].

Electronic seal integration flow

Use the Signing Platform, SignAPI, to integrate electronic seal functionality into your system.

What LVRTC provides

For integration, LVRTC provides:

• a PFX (Personal Information Exchange) file containing the signing certificate and private key
• an authentication certificate

Convert the PFX file to Base64 format before using it in the signing flow.

Steps

1. Request a server-to-server access token.

   Use the integration platform at eidas.eparaksts.lv with your credentials to obtain an introspect token.

2. Authenticate to SignAPI.

   Use the introspect token to authenticate against the SignAPI service.

3. Start a SignAPI session and upload the file.

4. Create the electronic seal.

   Use the SignAPI eSeal creation method and provide all required parameters.

   To perform the signing operation, use:

   • the Base64-encoded signing PFX file
   • the PFX password hashed with the SignAPI central public authentication certificate
   • your electronic seal authentication certificate

5. Download the sealed document.

6. Validate the sealed document.

Related documentation

👍

You can test the electronic seal and timestamping service in the test environment before moving to production.

See the Test environment documentation to request access and prepare test credentials.