How to Verify a Qualified Electronic Signature (QES) Under eIDAS in PDF
Question details
The user needs to determine how to verify if a digital signature in a PDF meets the requirements of a Qualified Electronic Signature (QES) under the EU eIDAS regulation.
- Product
- Adobe Acrobat / PDF Readers
- Device & OS
- not provided
- Scenario
- Checking the legal classification and validity of a digital signature in a PDF document to ensure it complies with EU eIDAS regulations.
- Observed behavior
- Basic signature validation in a PDF only proves the document hasn't been altered; additional steps are required to confirm the signature meets QES status via trusted lists and certificate details.
Ensure your device is connected to the internet so your PDF software can successfully fetch the latest EU List of Trusted Lists (EUTL) and check certificate revocation statuses.
Validate the Digital Signature and Trust Service Provider Details
Use the built-in Signatures panel in your PDF software to cross-reference the signer's certificate with authorized EU trust lists.
A standard valid digital signature does not automatically mean it is a Qualified Electronic Signature (QES). To verify a QES, the PDF software must confirm that the signer's certificate was issued by a Qualified Trust Service Provider (QTSP) recognized under eIDAS.
Open the signed PDF document in your PDF reader. Click on the 'Signatures' panel, typically located on the left-hand navigation pane, to view a list of all digital signatures present in the file.
Right-click the specific signature you wish to verify and select 'Show Signature Properties' or 'Validate Signature' from the context menu.
In the properties window, click on 'Show Signer's Certificate' to open the certificate viewer. Navigate through the certificate details to locate the issuer information.
Check the trust tab to confirm that the certificate traces back to a Qualified Trust Service Provider listed on the European Union Trusted Lists (EUTL). Ensure your software's trusted lists are configured to include EUTL updates.
Review the certificate policies and signature-creation device details to ensure the hardware and standards used comply with eIDAS QES strict requirements.
Manage and Validate Digital Signatures with WPS PDF
WPS PDF provides comprehensive, built-in digital signature validation tools, allowing you to easily verify document integrity, view detailed certificate properties, and manage signed files seamlessly.
- 1. Open the Signed Document: Launch WPS Office and open your digitally signed PDF document using the WPS PDF tool.
- 2. Locate the Signature: Click directly on the digital signature field within the document, or open the Signatures pane on the left sidebar to see all signatures.
- 3. View Properties: Right-click the signature and select 'Signature Properties' to pull up the detailed validation and certificate information.
- 4. Confirm Validity: Review the signer's identity, the document timestamp, and the certificate's trust status to ensure the digital signature is valid and authentic.
Frequently Asked Questions
What is the difference between an Advanced Electronic Signature (AES) and a Qualified Electronic Signature (QES)?
An Advanced Electronic Signature ensures identity and document integrity, whereas a Qualified Electronic Signature adds another layer of security. A QES is created using a qualified signature creation device (like a smart card or secure token) and relies on a qualified certificate issued by a recognized trust service provider, giving it the same legal standing as a handwritten signature under EU law.
Why does my PDF reader say the signature is valid, but it does not specify QES status?
Standard PDF validation merely checks if the document has been altered since signing and if the certificate chain is trusted by your local operating system. It does not automatically cross-reference the EU List of Trusted Lists (EUTL) to confirm the specific QES legal classification.
How do I update the trusted lists in my PDF software to recognize eIDAS certificates?
Most professional PDF editors have an option to manage trusted identities. You can usually find a setting under Preferences or Security settings to 'Update Trusted Certificates' or 'Enable European Union Trusted Lists (EUTL)'. Activating this ensures your software automatically fetches the latest authorized certificate providers.
