CASH BOX SIGNING

Further information on the RKSV:

+ Cash RKSV regulation and detailed specification

+ BMF cash register manual

+ WKO cash register information

When registering your signature creation device, Finanzonline reads the order term ("Ordnungsbegriff" such as UID, tax number or GLN) from the chosen certificate to assign the certificate to the registered company. If this assignment fails with the above error message, this may have the following causes:

1. The order term ("Ordnungsbegriff") specified in the certificate is incorrect. Please check that your details are correct when purchasing the certificate.
2. The order term ("Ordnungsbegriff) specified in the certificate is not present in Finanzonline.

The RKSV certificates issued by PrimeSign GmbH for receipt signatures within the framework of the Austrian Cash Register Security Regulation (RKSV) are valid for 6 years from the date of issue. Thus, at the end of this year (December 2022), the first RKSV certificates will exceed their validity and expire. The following information serves as preliminary information regarding the continued use of expired RKSV certificates.

The following applies to all RKSV certificates issued by primesign:

1. Continued use after expiration possible
   RKSV certificates may continue to be used after the expiration date, provided that the certificate in question was registered as a security device for manipulation prevention in FinanzOnline before its validity expired. Whether a certificate may continue to be used after its validity has expired is ultimately at the discretion of the customer or the cash register manufacturer. 
   
   For cash register manufacturers:
   Please ensure that your application supports the use of expired certificates!
   
   For users:
   Please contact your cash register manufacturers to find out whether your cash register software supports the use of expired certificates!
   
   
2. New RKSV certificate required for new registration or recommissioning of a security device for manipulation prevention in FinanzOnline
   

   The validity of the RKSV certificate is verified when a security device for manipulation prevention is newly registered or reactivated in FinanzOnline. An expired certificate cannot be used in this case. A new RKSV certificate must be ordered and issued. Depending on where you obtain your cash register, you can order the certificate directly from your cash register manufacturer or via our online store. You will receive your new RKSV certificate, including new access data.
   

   Note:
   This only applies to the new registration or recommissioning of a security device for manipulation prevention (and not the cash register itself) in FinanzOnline.

   For users:
   If you no longer need your expired certificate, please cancel it via your cash register manufacturer, or if you have obtained the certificate directly from us, using the contact details provided at our online store.

The legal basis for continued use is § 15 (3) RKSV:
"[...] Eine Verwendung des Zertifikates über das Ende seiner Gültigkeit hinaus ist zulässig, sofern der im Zertifikat vorhandene Signaturalgorithmus laut Z 2 der Anlage als sicher gilt."

The cryptographic keys as well as the signature algorithm that are used by primesign meet the necessary standards and are considered to be secure.

See also: RKSV customer information

At the following address you will find a status page for our RKSV Remote Signing Service, which gives you an overview of the availability and mean response times of the primesign RKSV Remote Signing Service: https://status.prime-sign.com/

The quality of primesign RKSV Remote Signing service is defined by compliance with agreed response times for the execution of signing requests (signature creation). Since third-party systems that are not within primesign's sphere of influence are also involved in the creation of remote signatures, the quality of service is measured using primesign's reference systems. The respective QoS level can be found in the description of the ordered product.

The measurement of the specified throughput times begins upon receiving the signing request at the primesign RKSV remote signing service and ends when the correct response is sent by the service. The measurement of the contractually agreed response times therefore only takes into account the signature process. The guaranteed processing time does not include any other system-related processing times, such as those caused by additional communication protocols, e.g. by the SSL/TLS connection setup ("handshake") or authorization measures, etc., or any network latency times in the connection path to our system, such as due to low or fluctuating connection speeds or load situations, etc., as these are not or only partially within primesign's sphere of influence.

The measured values shown are current and taken from the productive system. We show the mean response time of the last 60 minutes and 24 hours for all signing requests processed on the system. All announced outages (e.g. maintenance windows etc.) are not taken into account and are therefore excluded.

In the event of a complaint, a corresponding log of the response times of a client (customer) is started for the contractually agreed observation period of 30 calendar days. The result of this 30-day logging is used to determine our actual QoS for the client and for further processing of the complaint.

With the credentials for our primesign RKSV Remote Signing service, you have received a Base URL, a user ID and a shared secret (= password). You can test your credentials below.

The Base URLs differ depending on where you purchased your product (EFSTA or via our Cryptoshop). Please select the correct link to create a test signature according to your Base URL.

If the text "Test successful!" appears after entering and confirming the credentials, then your credentials are correct. If a window with the text "User ID / Shared Secret not accepted" appears, please contact support.

a. EFSTA customers (base URL: https://rs-1f9e614c.ps.prime-sign.com)

Create test signature

For demonstration purposes, you can also use the following access data for a demo company:

1. UserId: user123
2. Shared-Secret: a4cfdc96-d083-4236-befc-64fa4cd9e6bb

b. Customers from the Cryptoshop (base URL: https://rs-fc8349ca.ps.prime-sign.com)

Create test signature

For demonstration purposes, you can also use the following access data for a demo company:

1. UserId: user123
2. Shared secret: KNJOJ-BLZDB-2QR2L-XPUUY-JR5Z6

c. Customers who use our Remote Signing Service via other distributors/partners etc.

Please contact your cash register manufacturer or cash register supplier.

a. For EFSTA customers

• Base URL: https://rs-1f9e614c.ps.prime-sign.com
• This means, for example, that the URL for the interface for creating a RAW signature is: https://rs-1f9e614c.ps.prime-sign.com/rs/rk/signatures/r1raw

b. For customers from Cryptoshop

• Base URL: https://rs-fc8349ca.ps.prime-sign.com
• This means, for example, that the URL for the interface for creating a RAW signature is: https://rs-fc8349ca.ps.prime-sign.com/rs/rk/signatures/r1raw

More information on the specific URLs for the individual REST services can be found in the documentation in section 2.4. The documentation (primesign Remote Signing API Guide) can be found at the following address here.

1. Please check if our service is available
2. Please check whether your credentials are correct
3. Please check whether the primesign RKSV Remote Signing Service can be reached from your cash register or POS system via the Internet.
4. Please check whether an error in the POS system can be ruled out. If necessary, contact your cash register manufacturer or cash register supplier to find out the exact error.

The firewall rules differ depending on where you obtained your product from (EFSTA or via Cryptoshop).

a. EFSTA customers

1. URL: rs-1f9e614c.ps.prime-sign.com
2. Port: 443
3. IP address (static): 149.154.99.185

b. Customers from the Cryptoshop

1. URL: rs-fc8349ca.ps.prime-sign.com
2. Port: 443
3. IP address (static): 149.154.99.186

1. Please check whether your Smart Card is correctly inserted in the card reader (fully inserted, correct insertion direction, inserted in the correct card reader, etc.).
2. Please check that the card reader is correctly connected and plugged into the correct cash register. Disconnect the card reader once and then reconnect it.
3. Please check that your cash register successfully recognizes the card reader and the inserted card.
4. Please check whether an error in the cash register system can be ruled out. If necessary, contact your cash register manufacturer or cash register supplier to find out the exact error.
5. If the above reasons can be ruled out and a defect in a card reader and/or smart card supplied by us is suspected, please contact our Cryptoshop