.svg)
QSCD (Qualified Signature Creation Device)
QSCD (Qualified Signature Creation Device) is a certified hardware or software module used to generate and store the cryptographic keys required to create a qualified electronic signature (QES). It must comply with the rigorous security requirements set out in Annex II of eIDAS.
What is a QSCD?
The purpose of a QSCD is to ensure that the signing key remains under the user’s exclusive control and is protected against duplication or forgery. Examples of QSCDs include physical smart cards, USB tokens, or cloud-based Hardware Security Modules (HSMs) managed by a certified service provider. Without a QSCD, a signature can never achieve the legal status of a QES.
FAQ
What makes a QSCD unique compared to regular hardware?
A QSCD is a specialized and certified device that ensures the private signing key can never be copied or compromised, which is a technical requirement for creating a QES.
Do I as a user need to own a QSCD device?
No. Thanks to modern cloud-based solutions (Remote Signing), a certified Trust Service Provider (TSP) can securely manage the required QSCD infrastructure on behalf of the user.
Why is QSCD important for compliance?
Without the use of an approved QSCD, an electronic signature can never achieve “Qualified” status, which is essential for documents where legal equivalence to a handwritten signature is required.
