Skip to main content

What Are KSeF Certificates

A certificate is a digital key that enables your company's authorization in the National e-Invoice System (KSeF). Without a certificate, you cannot send or receive invoices from KSeF.

Certificate Types​

TypeEnvironmentSourceUse Case
Test AuthorizationTestGenerated in the appAuthentication
Demo AuthorizationDemoIssued by KSeF / Qualified SealAuthentication
Production AuthorizationProductionIssued by KSeF / Qualified SealAuthentication
Test SigningTestIssued by KSeFOffline invoice signing
Demo SigningDemoIssued by KSeFOffline invoice signing
Production SigningProductionIssued by KSeFOffline invoice signing

Below is an official video explaining how to download the appropriate certificates from the KSeF system. (The video is in Polish but includes English subtitles β€” you can enable them in the YouTube player settings).

Certificate Types by Usage​

TypeDescription
Authorization (authorization)Used to establish a session with KSeF (logging in, online submission, synchronization)
Signing (signing)Used for digital signing of invoices in offline (emergency) mode
info

The same certificate can be used for both authorization and signing β€” simply add it twice with different types selected. Details: Signing Certificate.

How Authorization Works​

  1. The application uses your certificate to sign an authorization request.
  2. KSeF verifies the signature and returns a session token.
  3. The token is used for all operations (sending, fetching invoices).
  4. The token expires after a set period β€” the application refreshes it automatically.

Certificate Storage​

Certificates are securely stored in the application database. The private key is encrypted and accessible only to your account.

0_certificates.png

Certificate Management​

In the certificates view, you can:

  • πŸ“‹ View a list of saved certificates.
  • βž• Add a new certificate (authorization or signing).
  • πŸ”„ Generate a test certificate.
  • ⬇️ Download a certificate or private key.
  • πŸ”— Navigate to the KSeF portal (link available in the context menu).
  • πŸ—‘οΈ Delete a certificate.