How to Request SPID Level 3: A Comprehensive Guide
SPID, the Sistema Pubblico di Identità Digitale (Public Digital Identity System), is Italy’s digital identity system that allows citizens to access online services offered by the Public Administration and participating private entities with a single username and password. While SPID Level 1 and Level 2 offer basic authentication, SPID Level 3 provides the highest level of security, crucial for sensitive transactions and services. This comprehensive guide will walk you through the process of requesting SPID Level 3, highlighting the requirements, providers, and necessary steps.
## Understanding SPID Levels
Before diving into the specifics of requesting SPID Level 3, let’s briefly outline the differences between the SPID levels:
* **SPID Level 1:** This is the basic level and requires a username and password. It’s suitable for simple online services.
* **SPID Level 2:** This level adds an extra layer of security with a one-time password (OTP) sent via SMS or generated through an authenticator app. It’s suitable for services requiring a moderate level of security.
* **SPID Level 3:** This is the highest security level and involves the use of a digital certificate stored on a smart card, USB token, or through a qualified remote signature service. It offers the strongest authentication and is required for sensitive transactions, such as signing contracts or accessing highly confidential data.
## Why Choose SPID Level 3?
SPID Level 3 offers several advantages over lower levels:
* **Enhanced Security:** The use of a digital certificate and a physical device or remote signature service makes it significantly more difficult for unauthorized individuals to access your identity.
* **Legally Binding Signatures:** SPID Level 3 allows you to create legally binding digital signatures, equivalent to handwritten signatures.
* **Access to Sensitive Services:** Many government and private services requiring a high degree of trust and security mandate the use of SPID Level 3.
* **Professional Use:** It’s essential for professionals who need to digitally sign documents, access legal portals, or interact with public administration systems requiring advanced authentication.
## Requirements for SPID Level 3
To request SPID Level 3, you will generally need the following:
* **A Valid Italian ID:** This can be your Carta d’Identità (Identity Card), Passaporto (Passport), or Patente di Guida (Driver’s License).
* **Tessera Sanitaria (Health Card) with Codice Fiscale:** This card contains your tax identification number, which is crucial for identification.
* **An Active Email Address:** You will need a valid email address to receive notifications and communications related to your SPID request.
* **A Mobile Phone Number:** A mobile phone number is required for identity verification and potentially for receiving OTPs during the activation process.
* **A Digital Signature Device or Qualified Remote Signature Service:** This is the core requirement for SPID Level 3. You’ll need a compatible smart card reader, USB token, or a subscription to a qualified remote signature service. The specific type of device or service depends on the provider you choose.
* **Residence Permit (Permesso di Soggiorno) – for Non-EU Citizens:** If you are not a citizen of the European Union, you will also need a valid residence permit.
## Choosing a SPID Identity Provider (Gestore dell’Identità Digitale)
Several accredited identity providers (Gestori dell’Identità Digitale, or IdPs) offer SPID Level 3. Some of the most common providers include:
* **Poste Italiane (PosteID):** Poste Italiane is a popular choice, and you can activate SPID Level 3 using their PosteID service. They offer various options, including activation at a physical post office or online through their website.
* **Aruba:** Aruba is a well-known provider of digital services, including SPID. They offer various SPID levels and digital signature solutions.
* **InfoCert:** InfoCert is another reputable provider specializing in digital trust services, including SPID and digital signatures.
* **Namirial:** Namirial provides a range of digital solutions, including SPID Level 3, focusing on digital transaction management.
* **Register.it:** Register.it is another option.
When choosing a provider, consider the following factors:
* **Cost:** SPID Level 1 and Level 2 are generally free for citizens. SPID Level 3 usually involves a cost due to the digital signature device or remote signature service. Compare the pricing plans of different providers.
* **Ease of Use:** Some providers may have a more user-friendly interface or activation process than others. Consider reading reviews and comparing the user experience.
* **Type of Digital Signature Device/Service:** Evaluate the type of digital signature device or service offered. Do you prefer a physical smart card, a USB token, or a remote signature service? Ensure it meets your specific needs.
* **Customer Support:** Check the provider’s customer support options and reviews. Ensure they offer adequate assistance if you encounter any issues during the activation or usage process.
* **Integration with Your Existing Systems:** If you plan to use SPID Level 3 with specific software or systems, ensure the provider’s solution is compatible.
## Step-by-Step Guide to Requesting SPID Level 3 (Example with PosteID)
This section provides a general example using PosteID, but the specific steps may vary slightly depending on the provider you choose. Always refer to the provider’s official instructions.
**1. Choose PosteID and Select the Right Product:**
* Go to the Poste Italiane website (poste.it) and navigate to the SPID section.
* Choose the SPID service that provides digital signature capabilities (usually labeled as “SPID Professionale” or similar).
* Review the different plans and choose the one that best suits your needs. Pay attention to the included digital signature features and costs.
**2. Gather Required Documents and Information:**
* Make sure you have your Carta d’Identità, Tessera Sanitaria, email address, and mobile phone number ready.
* You’ll need a valid form of payment to purchase the SPID Level 3 service.
**3. Initiate the Online Registration:**
* Click on the “Registrati” (Register) or “Attiva SPID” (Activate SPID) button on the Poste Italiane website.
* You will be redirected to the PosteID registration portal.
**4. Fill in the Required Information:**
* Enter your personal information, including your name, surname, date of birth, Codice Fiscale, email address, and mobile phone number.
* Carefully review the information before submitting it.
**5. Identity Verification:**
* You will need to verify your identity. PosteID usually offers several options:
* **Via Webcam:** You can use your computer’s webcam to verify your identity through a video call with a Poste Italiane operator.
* **Via CIE (Carta d’Identità Elettronica):** If you have the electronic identity card (CIE) and a compatible NFC reader, you can use it for identity verification.
* **At a Post Office:** You can schedule an appointment at a post office and verify your identity in person.
* Follow the instructions provided by PosteID to complete the identity verification process.
**6. Purchase the Digital Signature Device or Service:**
* After successful identity verification, you will be prompted to purchase the digital signature device or subscribe to the remote signature service.
* PosteID usually offers different options, such as a smart card and reader, a USB token, or a remote signature service.
* Choose the option that best suits your needs and complete the purchase.
**7. Activate Your Digital Signature Device/Service:**
* Follow the instructions provided by PosteID to activate your digital signature device or service. This usually involves downloading and installing specific software or apps.
* For a smart card or USB token, you will need to install the necessary drivers and middleware on your computer.
* For a remote signature service, you will need to configure the service and set up your authentication credentials.
**8. Complete the SPID Level 3 Activation:**
* Once your digital signature device/service is activated, you can complete the SPID Level 3 activation process.
* This may involve linking your digital signature to your SPID account.
* Follow the instructions provided by PosteID to finalize the activation.
**9. Test Your SPID Level 3:**
* After completing the activation process, test your SPID Level 3 by accessing a service that requires it.
* Ensure that you can successfully authenticate using your digital signature device or service.
## Troubleshooting Common Issues
* **Identity Verification Problems:** If you encounter issues during the identity verification process, ensure that you have all the required documents and that your webcam or NFC reader is working correctly. If the problems persist, contact the provider’s customer support.
* **Driver Installation Issues:** If you have trouble installing the drivers for your smart card reader or USB token, consult the device’s documentation or the provider’s website for troubleshooting tips.
* **Software Compatibility Issues:** Ensure that the software required for your digital signature device or service is compatible with your operating system. Check the provider’s website for system requirements.
* **Activation Problems:** If you encounter issues during the SPID Level 3 activation process, carefully review the provider’s instructions and contact their customer support for assistance.
* **Forgotten PIN/Password:** If you forget the PIN or password for your digital signature device or service, follow the provider’s instructions for resetting it. In some cases, you may need to contact their customer support for assistance.
## Alternative Providers: A Quick Look
While the example above uses PosteID, the core process remains similar across different providers. Here’s a brief overview of how to approach SPID Level 3 requests with other common providers:
* **Aruba:** Aruba offers SPID Level 3 through their “Aruba Firma Digitale” (Aruba Digital Signature) service. You’ll need to purchase a compatible device (smart card, token, or remote signature) and follow their activation process, which includes identity verification and software installation.
* **InfoCert:** InfoCert’s SPID Level 3 solution is integrated with their digital signature services. You’ll typically purchase a digital signature device or remote signature service and then link it to your SPID account following their specific instructions.
* **Namirial:** Namirial provides SPID Level 3 in conjunction with their digital signature products. Their process involves identity verification, device/service purchase, and linking the signature to your SPID.
* **Register.it:** The process with Register.it follows similar steps. You need to purchase the appropriate service with digital signature, verify your identity, and follow the steps to link the signature to your SPID account.
Always consult the official documentation of your chosen provider for the most accurate and up-to-date instructions.
## Maintaining Your SPID Level 3
* **Keep Your Software Updated:** Regularly update the software and drivers for your digital signature device or service to ensure optimal performance and security.
* **Protect Your PIN/Password:** Keep your PIN or password for your digital signature device or service safe and secure. Do not share it with anyone.
* **Renew Your Digital Certificate:** Digital certificates have an expiration date. Ensure that you renew your certificate before it expires to avoid any interruption in service.
* **Report Lost or Stolen Devices:** If your smart card or USB token is lost or stolen, immediately report it to your SPID provider to prevent unauthorized use.
## Conclusion
Requesting SPID Level 3 requires more steps than the lower levels, but it offers enhanced security and access to a wider range of online services. By following this comprehensive guide and carefully selecting the right provider, you can successfully obtain and utilize SPID Level 3 for secure and legally binding digital interactions with the Italian Public Administration and participating private entities. Remember to consult the specific instructions provided by your chosen identity provider for the most accurate and up-to-date information. Consider the cost, ease of use, customer support, and compatibility with your existing systems when making your decision. With SPID Level 3, you can confidently navigate the digital landscape in Italy with the highest level of security and trust.