What is a key identifier and how to use it

When registering a cashier to work with a software-based cash register, an entrepreneur must fill out Form No. 5-ECR on the STS website in the "Electronic Cabinet" and indicate the key identifier in a separate column.

What is a key identifier, what is it for, and where can I get one?

What is a key identifier?

The entrepreneur's key identifier is a unique number of the security certificate. This document is generated upon receipt of the QES. It contains information about the owner of the electronic signature and his/her details. In fact, using the key identifier, you can check whether the security certificate really belongs to a particular person.

The key ID value consists of a combination of Latin letters and numbers.

How do I get a key identifier?

To determine the key ID, you must first download a security certificate.

How to get a key identifier through the State Tax Service?

If an entrepreneur received a QES through the State Tax Service, you should follow the following instructions:

1. Go to the tax website.

2. Select the certificate search tab.

3. In a special field, indicate the TIN of the individual.

4. In the Additional details field, you must select the status of the certificate: valid, blocked, revoked, or expired.

5. The search window displays information about the security certificate owner and the Download option.

6. Download the document to your mobile device and select the folder where the file was uploaded.

7. Open the certificate and go to the "Details" tab.

8. Find the field "Key usage" and then "Digital signature, Irrefutability".

9. In the list, we find the name "Subject key identifier".

10.  The lower window will display a set of numbers and letters. This will be the key identifier to be used when filling out Form 5-ECR.

How to get a key ID via Privat24?

The key identifier can be obtained via PrivatBank as follows:

1. Go to PrivatBank website.

2. Select the "Certificates" tab, then "Customers".

3. Enter the individual's TIN.

4. If the security certificate has been revoked, check the box next to this option.

5. We see our data, the certificate number, its status, validity period, and click "Download".

6. Open the uploaded file and click "Details".

7. In the list, find the entry for the key identifier, copy its number, and paste it into the application for registration of the cashier's EDS.

Similar instructions apply to other ACSKs. If you are unable to determine the key identifier of Oschadbank, UkrSibbank, etc., please contact the branch of the financial institution directly. The support service of the bank where the key certificate was issued will help you resolve this issue.