Renewing, backing up and cancelling your digital certificate

Key rules

• Renewal window: Online renewal works only in the last 60 days before expiry; after that you repeat the full process with an in-person identity check.
• Validity: The certificate lasts 4 years from issue, so note the end date when you install it.
• Backup: Export a .pfx or .p12 file with the private key, protect it with a strong password and store it offline.
• Compromise: If the certificate or its key is lost or stolen, revoke it at once; revocation is effective immediately.

Renew before it expires

Your FNMT personal software certificate is valid for 4 years from the date of issue. Put a reminder in your calendar well before the end date.

You can renew online only in the last 60 days before it expires. Do it from the same browser and computer where the certificate is installed, because the renewal needs your still-valid certificate. You request the renewal on the FNMT website, receive an application code, and use that code to download the new certificate.

If you miss the window, you repeat the full process: an online request, then an in-person identity check at an accreditation office. These include some tax office, Seguridad Social, police and town hall offices.

Renewal is also not allowed if your identity data has changed, for example a new NIE or a new name. In that case you start again with a new request and an identity check.

Make a backup now

A certificate lives inside one browser or computer. If that computer breaks or is wiped, the certificate is gone unless you saved a copy. Make the backup as soon as you install it, and again after each renewal.

1. Open the certificate manager. In Firefox, go to Settings, Certificates, View certificates, Your certificates, then Backup. In Chrome or Edge on Windows, open certmgr.msc, go to Personal, find the certificate and choose Export.
2. Choose "Yes, export the private key". Without the private key, the backup cannot sign or identify you.
3. Pick the PKCS#12 format (.pfx or .p12).
4. Set a strong password. It protects the file.
5. Save the file on a USB drive or encrypted storage that is not connected to your computer. Keep the password somewhere else.

Never share the file or its password. Anyone who has both can act as you with the administration.

To use the certificate on another computer, import this file there and enter the password.

If it is lost, stolen or compromised

Revoke it straight away. You have three options:

• Online on the FNMT website, using your certificate or your revocation data.
• By phone, through the FNMT revocation line.
• In person at an accreditation office, after identifying yourself.

Revocation takes effect immediately once it is processed. After that you can request a new certificate. Phone numbers and online options change, so check the current channels on the FNMT website.

The timeline, documents and questions below cover the steps in more detail.

Timeline and deadlines

• Download the new certificate with your application code: after the renewal request, on the same computer and browser

• Repeat the full process: online request, then in-person identity check at an accreditation office: if the certificate has already expired

Documents you need

• Your current FNMT certificate, still valid and installed in the same browser and computer. You need it to renew online during the last 60 days before it expires.

• The application code you get when you request the renewal on the FNMT website. You use it to download the new certificate.

• A backup file of your certificate in .pfx or .p12 format, exported with the private key and protected by a strong password. Keep it on a USB drive or encrypted storage.

• Your revocation data, or your certificate itself, to cancel the certificate online if it is lost or compromised. You can also cancel by phone or in person at an accreditation office after identifying yourself.

Frequently asked questions

What if my certificate has already expired?

You can no longer renew online. You repeat the full process: request it online, then verify your identity in person at an accreditation office, such as a tax office (AEAT), a Social Security office or some police and town hall offices.

Can I renew if my name or NIE has changed?

No, Renewal is not allowed when your identity data has changed, such as a new NIE or name. Request a new certificate instead.

Can I use my backup file on another computer?

Yes, if you exported it with the private key. Without the private key, the backup cannot be used to sign or log in. You also need the password you set, so keep it apart from the file.

How fast does a revocation take effect?

A revocation takes effect immediately once it is processed. Revoke at once if the certificate or its private key is lost, stolen or compromised.