Qualified signature from a file: sign in your provider's program

How it works

1. In the “e-Deklaracje” tab choose a document and click “Prepare the submission”.
2. In the “Sign the document” step choose what you sign with (Szafir, Certum, EuroCert, Sigillum, CenCert or another provider) and click “Download the file to sign”.
3. Open the file in your provider's program. Choose the XAdES format (basic, XAdES-BES), the SHA-256 digest and the signature type Zaksio suggests: enveloped for JPK, enveloping for returns.
4. Sign the file with your certificate (PIN or a code from the app) and upload the signed file to Zaksio.
5. Zaksio checks that exactly the file it prepared was signed. If so, you go on to sending to the Ministry of Finance gateway.

What to watch out for

• Do not change the file before signing. Zaksio rejects a signature under a different document and shows what to do.
• A one-time mSzafir certificate is valid for 15 minutes and, according to the offer, covers PDF files. For an XML file choose a certificate with a longer validity.
• Certum SimplySign is used to log in to the cloud signature. You sign the XML file itself in the signing program that uses it.
• Not every Sigillum variant signs XML files in the XAdES format. Ask the provider before you buy.
• If the certificate does not show a PESEL or NIP number, the JPK gateway may reject the submission. Zaksio warns you about this before sending.

What about Trusted Profile?

Signing with a Trusted Profile inside Zaksio will be added later. For now you can file the JPK in the e-Tax Office and sign it with a Trusted Profile there.