Accessing Italian Online Services: A Comprehensive Guide to Using CIE Instead of SPID

In Italy, accessing online services offered by the Public Administration (Pubblica Amministrazione or PA) has become increasingly streamlined. While the Sistema Pubblico di Identità Digitale (SPID) has been a widely adopted digital identity system, the Carta d’Identità Elettronica (CIE), or Electronic Identity Card, provides an alternative and often more secure and versatile method for authentication. This comprehensive guide will walk you through the process of using CIE to access Italian online services, covering everything from initial setup to troubleshooting common issues.

What is CIE (Carta d’Identità Elettronica)?

The CIE is the Italian national electronic identity card. It’s a multi-functional document that serves not only as proof of identity but also as a digital key for accessing online services. It contains a microchip that securely stores your personal information and digital certificates. This chip allows you to authenticate yourself online, sign digital documents, and much more. The CIE offers several advantages over SPID, including:

• Higher Security: The CIE relies on cryptographic certificates embedded in the chip, providing a higher level of security compared to SPID’s username and password based authentication, even with two-factor authentication.
• Multiple Authentication Levels: CIE supports different authentication levels (Level 1, Level 2, and Level 3, aligning with the European eIDAS standards), catering to various service requirements.
• International Recognition: CIE is recognized within the European Union as a valid form of electronic identification under the eIDAS regulation, facilitating cross-border access to online services.
• Physical Document: Unlike SPID, which is purely digital, CIE provides a physical proof of identity, which can be useful in various situations.

Prerequisites for Using CIE

Before you can start using your CIE to access online services, ensure you have the following:

1. A Valid CIE: You need a valid CIE (the electronic version, not the old paper one). Check the expiration date on the card.
2. CIE PIN Codes: When you received your CIE, you should have received two PIN codes: one 8-digit PIN (PUK) was given upon application and the other (PIN) was delivered with the card. Keep these PIN codes safe, as you will need them for authentication. If you’ve lost them, you’ll need to request a new CIE.
3. NFC-Enabled Smartphone or a Smart Card Reader: To use your CIE, you’ll need either an NFC (Near Field Communication)-enabled smartphone or an external smart card reader connected to your computer. NFC is a technology that allows devices to communicate wirelessly over short distances. Most modern smartphones have NFC. A smart card reader can be purchased online or at electronics stores.
4. CIE Software/App: Depending on whether you’re using a smartphone or a computer with a card reader, you’ll need to install the appropriate software or app. The official app is called “CieID”.
5. Internet Connection: A stable internet connection is required to communicate with the authentication servers.

Step-by-Step Guide to Setting Up CIE on Your Smartphone

This section outlines the steps to set up and use your CIE on your smartphone (Android or iOS). The official CIE app is called “CieID”.

1. Download and Install the CieID App

• Android: Go to the Google Play Store and search for “CieID”. Download and install the app developed by the Istituto Poligrafico e Zecca dello Stato (IPZS), the Italian State Printing Works.
• iOS: Go to the Apple App Store and search for “CieID”. Download and install the app from IPZS.

2. Initial Setup and CIE Registration

1. Open the CieID App: Launch the CieID app on your smartphone.
2. Accept Terms and Conditions: Read and accept the terms and conditions of use.
3. Enable NFC: Ensure that NFC is enabled on your smartphone. The CieID app will typically prompt you to enable it if it’s not already active. The location of the NFC setting varies depending on your phone’s brand and operating system. Common locations are under “Connections,” “Wireless & Networks,” or by searching for “NFC” in your phone’s settings.
4. Register Your CIE: Follow the in-app instructions to register your CIE. This usually involves holding your CIE against the back of your smartphone, near the NFC antenna. The app will attempt to read the information from the CIE chip.
5. Enter PIN Codes: You will be prompted to enter both the 8-digit PUK (initial pin) and the PIN code from the paper delivered with the card. Follow the app’s instructions carefully.
6. Create a New PIN (Optional): The app might prompt you to create a new, more memorable PIN code. This is optional but recommended for easier use in the future. Make sure to choose a strong PIN that you won’t forget but is difficult for others to guess.
7. Complete Registration: Once the PIN codes are entered and verified, the app will complete the registration process. You should see a confirmation message indicating that your CIE is successfully registered.

3. Using CIE for Authentication

1. Visit the Online Service: Go to the website or online service you want to access that supports CIE authentication. Look for the “Entra con CIE” (Enter with CIE) button or a similar option.
2. Select CIE as Authentication Method: Click on the “Entra con CIE” button.
3. Choose Authentication Level: You might be presented with different authentication levels (Level 1, Level 2, Level 3). Choose the level required by the service. Level 1 typically requires only the PIN, while higher levels may require additional security measures.
4. Open CieID App (if not already open): If the CieID app isn’t already running, your browser might prompt you to open it.
5. Hold CIE to Your Phone: The CieID app will instruct you to hold your CIE against the back of your smartphone.
6. Enter Your PIN: Enter your CIE PIN code when prompted by the app.
7. Authentication: The app will communicate with the online service to authenticate you.
8. Access Granted: Once authentication is successful, you will be redirected back to the online service and granted access.

Step-by-Step Guide to Setting Up CIE on Your Computer with a Smart Card Reader

This section details how to set up and use your CIE on your computer using a smart card reader.

1. Install the Necessary Software

Before connecting your smart card reader, you need to install the CIE middleware software. This software allows your computer to communicate with the CIE and access the digital certificates.

• Download the CIE Middleware: Go to the official CIE website (usually the website of the Istituto Poligrafico e Zecca dello Stato) and download the appropriate CIE middleware for your operating system (Windows, macOS, or Linux). The download link is typically found in the section dedicated to CIE authentication or digital signature. Search for terms like “Software CIE”, “Driver CIE”, or “Middleware CIE”. Be *extremely* cautious about downloading software from unofficial sources; always use the official government website.
• Install the Middleware: Follow the instructions provided with the downloaded software to install the CIE middleware on your computer. This usually involves running an installer program and accepting the license agreement. You may need administrator privileges to install the software.

2. Connect the Smart Card Reader

• Connect the Reader: Connect your smart card reader to your computer via USB.
• Install Reader Drivers (if necessary): Your operating system should automatically detect the smart card reader and install the necessary drivers. If not, you may need to download and install the drivers manually from the smart card reader manufacturer’s website.

3. Configure Your Web Browser

You need to configure your web browser to recognize and use the CIE digital certificates.

• Firefox:
  1. Go to Options > Privacy & Security.
  2. Scroll down to the “Certificates” section and click on “View Certificates”.
  3. In the Certificate Manager window, click on the “Import” button.
  4. Browse to the location where the CIE middleware installed the certificate files (usually in a system folder related to the CIE software; the exact location is dependent on the middleware version). Select the appropriate certificate file (it usually has a `.p12` or `.pfx` extension).
  5. Enter the password for the certificate, if prompted (usually the default password is provided in the CIE middleware documentation).
  6. Click “OK” to import the certificate.
  7. Ensure that the option “Ask me every time” is selected when a website requests your certificate.
• Chrome/Edge (Windows): Chrome and Edge on Windows typically use the Windows certificate store. If the CIE middleware is correctly installed, the certificates should already be available. You can verify this by:
  1. Press Win + R, type `certmgr.msc`, and press Enter.
  2. In the Certificate Manager, navigate to “Personal” > “Certificates”.
  3. Verify that your CIE certificates are listed there.
• Chrome/Edge (macOS): Chrome and Edge on macOS use the macOS Keychain Access. Similar to Windows, if the CIE middleware is correctly installed, the certificates should already be available in the Keychain Access. You can verify by opening Keychain Access (search for it using Spotlight) and looking for the CIE certificates.

4. Using CIE for Authentication

1. Visit the Online Service: Go to the website or online service you want to access that supports CIE authentication. Look for the “Entra con CIE” button or a similar option.
2. Select CIE as Authentication Method: Click on the “Entra con CIE” button.
3. Choose Authentication Level: You might be presented with different authentication levels (Level 1, Level 2, Level 3). Choose the level required by the service.
4. Insert Your CIE into the Reader: Insert your CIE into the smart card reader. Make sure the chip on the card is facing the correct direction (usually indicated on the reader).
5. Enter Your PIN: Your web browser will prompt you to select your CIE certificate and enter your PIN code.
6. Authentication: The browser will communicate with the online service to authenticate you.
7. Access Granted: Once authentication is successful, you will be redirected back to the online service and granted access.

Troubleshooting Common Issues

Here are some common issues you might encounter and how to troubleshoot them:

• CIE Not Recognized:
  • Smartphone: Ensure NFC is enabled and that you’re holding the CIE in the correct position against the back of your phone. Try moving the card around slightly until the app detects it. Also, some phone cases can interfere with NFC; try removing the case.
  • Smart Card Reader: Ensure the smart card reader is properly connected to your computer and that the drivers are installed correctly. Try a different USB port. Verify the card is inserted correctly.
• PIN Code Issues:
  • Double-check that you’re entering the correct PIN code. Remember there are two PINs: the initial 8-digit PUK and the regular PIN. If you enter the PIN incorrectly multiple times, your CIE might be blocked. You’ll need to follow the instructions provided by the issuing authority (usually the Comune) to unblock it. *Do not guess the PIN*.
• Certificate Errors:
  • Ensure that the CIE certificates are properly installed in your web browser. Verify that the certificates are valid and not expired. If necessary, reinstall the CIE middleware and re-import the certificates into your browser.
  • Make sure your browser is up to date.
• App Issues:
  • Ensure that you have the latest version of the CieID app installed. Clear the app’s cache and data in your phone’s settings. Restart your phone. Reinstall the app if necessary.
• Website Compatibility:
  • Some older websites might not fully support CIE authentication. Try using a different web browser or contacting the website’s support team.

Security Considerations

While CIE offers a higher level of security compared to traditional username/password authentication, it’s essential to follow some security best practices:

• Protect Your PIN Codes: Keep your CIE PIN codes safe and secure. Do not share them with anyone. Do not write them down in an easily accessible place.
• Keep Your Software Up to Date: Regularly update your smartphone’s operating system, web browser, and CIE middleware to ensure you have the latest security patches.
• Be Cautious of Phishing: Be wary of phishing emails or websites that attempt to trick you into entering your CIE PIN code. Always verify the legitimacy of the website before entering any sensitive information.
• Report Lost or Stolen CIE: If your CIE is lost or stolen, report it immediately to the appropriate authorities (usually your local Comune or police station).
• Use Strong PINs: When creating or changing your PIN, choose a strong PIN that is difficult for others to guess. Avoid using easily predictable PINs such as your birthdate or phone number.

Benefits of Using CIE

While the setup process might seem a bit involved initially, using CIE offers several significant benefits:

• Enhanced Security: CIE provides a much more secure authentication method compared to SPID, reducing the risk of identity theft and fraud.
• Simplified Access: Once set up, accessing online services with CIE is generally quick and easy.
• EU-Wide Recognition: CIE is recognized throughout the European Union, making it convenient for accessing services in other EU countries.
• Versatile Functionality: CIE can be used for various purposes, including online authentication, digital signatures, and physical identification.

Conclusion

The Carta d’Identità Elettronica (CIE) is a powerful tool for accessing Italian online services securely and efficiently. By following the steps outlined in this guide, you can set up your CIE on your smartphone or computer and start enjoying the benefits of this advanced digital identity system. While SPID remains a viable option, CIE offers a superior level of security and functionality, making it an increasingly attractive choice for Italian citizens.