Here you will find general information on the topic of TLS / SSL certificates (SeverPass / Server ID). We provide you with the following information at a central location:

• Terms of service, service descriptions, pricelists
• PKI Repository: Root- and SubCA Certificates, CP/CPS

For some use cases you need forms or authorizations that you can load on this page.
Only the original powers of attorney are to be used. The text of a power of attorney may not be changed. Changes will not take effect.

Here you will find all downloads on the subject of eIDAS and qualified signatures. We provide you with the following information at a central location:

• Terms of service, service descriptions, pricelists

• PKI Repository: Root- und SubCA-Zertifikate, CP/CPS 

To use the PostIdent procedure, please click on the following link:

• PostIdent

Program SignLive! Toolbox. The program supports you when using your signature card for the first time. An assistant will guide you through the assignment of the PINs. At the end of commissioning, the content of your certificates will be displayed and you can carry out the electronic activation.

Please note the license and usage conditions for the following downloads:

• Download: SignLive! Toolbox Windows
• Download: SignLive! Toolbox MAC

SecCardAdmin is a locally installed application for the administration of signature cards. With SecCardAdmin, the initial PIN of the signature card can be set (zero PIN procedure) or changed (transport PIN procedure, PIN letter) and thus the signature card can be activated for further use. Furthermore, the existing PIN can then be changed as often as required using SecCardAdmin. The certificates stored on the signature card can be read out, viewed and saved as a file. 

• > More details

Die Software wird für den Folgeauftrag und für künftige weitere Anwendungen für die Chipkarte aus einem gängigen Browser heraus genutzt und kann ohne Admin-Rechte installiert werden.

Eine genaue Anleitung zur Nutzung findet man auf der Seite des neuen Folgeauftrages.

Here you will find all downloads for the Business.ID. We provide you with the following information at a central location:

• Terms of service, service descriptions, pricelists
• PKI Repository: Root and SubCA Certificates, CP/CP

As a certified PKI service provider, we provide the following test certificates with status (valid, blocked and expired) for users, mail gateways and servers on this website to meet the baseline requirements and ETSI requirements. You will find the user and gateway certificates as separate downloads. For the server certificates, please follow the below Url / links.

Here you can find all downloads for the OneTimePass. We provide you with the following information at a central location:

• Terms of service, service descriptions, pricelists

Here you will find all downloads for our product secure elements & smartcards. Some information are provided at a central location:

• Terms of service, service descriptions and pricelists

Depending on the operating system Telekom Security provides up to two PKCS#11 modules:

The SigG module supports the SigG application for qualified signatures on the TCOS 3.0 Signature Card V2.0.

The NetKey module supports the advanced smart card applications on the TCOS 3.0 Signature Card V2.0 and TCOS 4.0 IDKey.

The latest version of the TCOS PKCS#11 includes the respective modules and the accompanying release notes with important information on the updates. 

License confirmation

With your download you agree to the Nutzungsbedingungen für die Treiber- und Managementsoftware zur TCOS Chipkarte.

With the TCOS4 Card Module, the TCOS 4.0 IDKey chip card is integrated into the Microsoft® Windows operating system via the Microsoft® Smartcard BaseCSP. The Microsoft® Smartcard BaseCSP has been a part of the operating system since Windows 7®.

A dedicated read-only card module is provided for the advanced card application (Netkey application) on the Signature Card V2.0.

When the respective TCOS 3/4 Card Module is correctly installed, the inserted TCOS chip card will be displayed, e.g., in the Device Manager.

CardManager.net is required for managing the PIN/PUK and certificates on the TCOS chip cards. With CardManager.net, the PIN1 of the respective applications on the chip card can be individually assigned, and PIN2/PUK can be reset.

A known PIN2 can be used as a PUK with CardManager.net. Download the free software "TCOS CardManager.net" in the next section.

Licence confirmation

With your download you agree to the Nutzungsbedingungen für die Treiber- und Managementsoftware zur TCOS Chipkarte.

For the management of TCOS Smartcards, TCOS CardManager.net is available. It assists in managing certificates and PINs.

With TCOS CardManager.net, the default PIN (chip card in delivery state) can be personalized with an individual PIN, and existing PIN2 can be reassigned with a known sequence of digits to later use the PUK functionality of PIN2.

The certificate manager can be run under Windows® in User Mode or as "Run as Administrator." As a user, PINs can be changed and reset, but certificates are only displayed. As an administrator, for which the user must have admin rights, certificates on the TCOS chip card can also be deleted or imported.

Additionally, TCOS CardManager.net displays detailed information about the chip card, such as card type, card number, PIN status, or available memory.

TCOS CardManager.net is provided as a standard version for Windows® 10 and as a portable version (with/without runtime) for workstations where an installer cannot be run. 

TCOS CardManager.net supports the TCOS 3.0 Signature Card V2.0, TCOS 3.0 IDKey, and TCOS 4.0 IDKey. The installation of .NET 6 is required (except for the portable version including runtime).

Licence confirmation

With your download you agree to the Nutzungsbedingungen für die Treiber- und Managementsoftware zur TCOS Chipkarte.

The TCOS SecureToken driver integrates the TCOS Smartcard into the macOS operating system and provides the functionality of TCOS chip cards through the TCOS SecureToken driver in applications such as Microsoft Office and ADOBE Reader.

TCOSNetkeyPlusTokenApp*.dmg supports the NetkeyPlus application on the TCOS 4.0 IDKey chip card. 

TCOSNetkeyTokenApp*.dmg supports the IDKey application on the TCOS 3.0/4.0 IDKey chip card and the Netkey application on the TCOS 3.0 Signature Card V2.0. 

TCOSSigGTokenApp*.dmg supports the SigG application for qualified signatures on the TCOS 3.0 Signature Card V2.0 chip card.

License confirmation

With your download you agree to the Nutzungsbedingungen für die Treiber- und Managementsoftware zur TCOS Chipkarte.