CEI One
RODownload

Docs · Get started

What you need

What you need to use CEI One: your eID and its codes, an iPhone with NFC or a Mac with a card reader, and internet access for signing.

Available on: iPhoneMacUpdated

All pages
On this page

To use CEI One you need your Romanian electronic identity card (eID), its codes, and a compatible iPhone or Mac. For signing, you also need an internet connection.

Your eID and its codes

  • eID, the Romanian electronic identity card.
  • CAN: the 6-digit number printed on the front of the eID.
  • Data PIN: 4 digits, for reading your data and for proof of address.
  • Signing PIN: 6 digits, for signing PDFs.

You don’t need your eID or any code to verify the signatures in a PDF. To find out where each code is, see CAN and PIN codes.

On iPhone

  • An iPhone with NFC.
  • iOS 26.2 or later.

Your iPhone reads the eID over NFC. You don’t need any other accessory.

On Mac

  • macOS 14 or later.
  • A contact smart card reader, connected over USB.

Your Mac doesn’t read the eID over NFC. In short, you need a USB contact card reader (one you insert the card into) that macOS recognizes without a driver.

The details below are for checking a reader’s specifications. The minimum requirements are:

  • Contact card reader, for ISO/IEC 7816 smart cards.
  • USB CCID interface: macOS must recognize it as a smart card reader.
  • ISO 7816 communication: APDU exchanges and at least one of the T=0 or T=1 protocols.

Tip

USB CCID support is included. You don’t need to install any driver.

The app’s Readers page shows whether your reader is detected. You’ll find the details in Card readers on Mac.

Internet

  • Reading your eID doesn’t need internet. The issuer-signed data is checked on your device, using certificates included in the app.
  • Signing needs internet. The app requests a timestamp from DigiCert. Only if DigiCert doesn’t respond does it ask GlobalSign, and then Sectigo. While signing, it also downloads the certificates’ validation data, such as certificate revocation lists (CRLs).
  • Verifying signatures uses the internet for the certificate chain and for revocation checks. On iPhone, the automatic verification of documents in Local history uses only the data inside the document.

Important

Timestamp services use HTTP port 80. If signing stops at the timestamp step, check that your network (an office Wi-Fi network, for example) allows HTTP port 80.

iCloud (optional)

iCloud sync is turned off by default. You only need an iCloud account if you want to sync your library between devices. You’ll find the details in iCloud sync.

See also