Frequently Asked Questions (FAQ)

Do not proceed with the certificate request registration.

Report the incorrect data and the correct data to assistenza.cesia@unibo.it and wait for the correction before proceeding.

Edit the data directly from the website and proceed with the certificate request registration. The changes will only be valid for the signing certificate request.
We invite you to subsequently request data correction as per the instructions published on the University Intranet.

The security code is in the email you received from noreply@time4mind.com with the subject: Digital Signature Device Issuance.

If you can no longer find the email, you can request it to be resent by clicking the “Send” button during certificate issuance.

The identity document only needs to be valid when issuing a new qualified signing certificate.

For renewal, the signature made with the expiring qualified certificate is sufficient.

You can change your PIN by accessing the certificate management page or from the Intesi platform, logging in with your institutional @unibo.it credentials.

The PIN must consist of numbers only and have a length between 8 and 16 digits.

You can perform the PIN RECOVER operation from the Intesi platform, logging in with your institutional @unibo.it credentials.

The PIN must consist of numbers only and have a length between 8 and 16 digits.

After 3 incorrect PIN entries, the system temporarily blocks further attempts for 15 minutes.
After 15 minutes, you can enter the PIN again.

It is recommended to always verify that the PIN field is empty, i.e., that it does not contain a previously saved code displayed as ******* and that auto-completion does not occur during input.

• if you have already issued the remote signing certificate, you must:
• • report the theft/loss to the competent authorities
  • the certificate must be revoked and a new issuance will be required.
• if you have not yet issued the signing certificate:
• • no action is required.

Please remember that if the phone and/or SIM are provided by the University of Bologna, you must always report the theft/loss to the competent authorities following the procedures published on the University Intranet.

If you chose the SMS token:

• if the phone number does not change, no action is needed (even if the carrier changes) because the token is linked to the phone number, not to the device
• if the phone number changes, you must update it before replacing it. To update it, connect to the Intesi platform with your institutional @unibo.it credentials. Go to the “Strong Authentication” menu and select “Edit”. This operation is only possible if you have access to both numbers, the old and the new one.
• if you no longer have access to the old number (e.g., you no longer have the SIM with the old number or the SIM is no longer working), revoke the signing certificate by going to the “Manage your signature” page, clicking “Revoke the certificate”, then issue a new certificate using one of the methods described on the intranet page dedicated to the service.

If you chose the APP token

• install the UniboPass APP on the new phone
• open the UniboPass APP and log in with your @unibo.it account
• tap Settings (bottom right on iOS devices, top right on Android devices)
• tap the IMPORT button in the Migration section
• select the device from which to migrate the services
• tap OK to confirm the operation.

If you chose the SMS token:

• connect to the Intesi platform with your institutional @unibo.it credentials. Go to the “Strong Authentication” menu and select “Edit”. This operation is only possible if you have access to both numbers, the old and the new one.
  
  If you no longer have access to the old number (e.g., you no longer have the SIM with the old number or it is no longer working), revoke the signing certificate by going to the “Manage your signature” page, clicking “Revoke the certificate”, then issue a new certificate using one of the methods described on the intranet page dedicated to the service.

If you chose the APP token:

• no action is required because the token is linked to the device, not to the phone number.

If the following screen is displayed on your phone, it means you do not have a valid signing certificate.
To issue a new certificate, consult the Guide.

No, the APP cannot be installed on more than one device.

The APP can be installed on a tablet, but it will become the only device from which you can retrieve the single-use code (OTP).

Install the UniboPass APP and log in with your institutional @unibo.it credentials.

The following prompt will appear, click OK:

The procedure is complete.
If the prompt does not appear on screen, follow the procedure described in the I WANT TO CHANGE/HAVE CHANGED MY SMARTPHONE: WHAT SHOULD I DO? section, following the APP token instructions.

You can change the OTP reception method (SMS/APP and vice versa) chosen during remote signing certificate issuance by going to the “Manage your signature” page and selecting “Change token”.

Switching from SMS to APP:
Install the UniboPass APP and log in with your institutional @unibo.it credentials, then click “Next”:

Confirm the phone number associated with the SMS Token; the following screen will appear:

Open the UniboPass APP on your smartphone, tap the + button, enter a “Label” to identify your certificate (optional, you can leave the default label), tap “Confirm”, and return to the APP home page.

The following screen will appear:

Enter your PIN, the OTP received via SMS to the indicated number, and the OTP generated by the APP, then click “Next”

The procedure is complete.

Switching from APP to SMS:
Enter the phone number where single-use OTP codes should be sent.

Enter your PIN, the OTP received via SMS to the indicated number, and the OTP generated by the APP, then click “Next”.

The procedure is complete.
Remove the “Qualified Cloud Signature” service by tapping the icon in the APP:

Go to the “Manage your signature” section. The system displays the active certificate data. Verify the certificate data and press the “Revoke the certificate"

Press “Confirm":

Certificate revocation is immediate.

You can proceed with a new issuance using one of the methods described on the intranet page dedicated to the service.

A timestamp is a service offered by an accredited certifier that associates a legally valid date and time with an electronic document, enabling temporal validation of the document that is enforceable against third parties (AGID definition)

The digital signature grants validity to the document.
To ensure its validity over time, a reliable temporal reference must be added to the document.
This reference is already automatically ensured for documents that are:
1. registered (protocolled), or
2. sent via certified email (PEC), or
3. sent to digital preservation,
otherwise, where explicitly required, timestamping is used.

The digital signature is sufficient to grant validity to the document.
A graphic signature can be applied as additional visible information in the document text or when explicitly required.