Using the electronic identity card with a card reader

Last update 25.03.2021

Acquiring a card reader

To use the electronic certificates on the electronic ID card for applications such as MyGuichet.lu or e-banking services, you will need to purchase a compatible contactless card reader.

The following readers are compatible:

Reiner SCT cyberJack RFID basis;
Gemalto Prox-SU / Prox-DU.

Card readers can be purchased from:

the Guichet.lu reception desk;
participating communes.

A card reader costs EUR 30.

Downloading the required middleware

You will need to download and install an application (known as 'middleware') on the computer you are using.

It is recommended that you install the latest version of the middleware on your computer to ensure that it functions properly, is up to date and, where applicable, includes the latest patches.

Downloading the middleware: Middleware on the LuxTrust website

Once the software is installed on your computer, provided the electronic ID card is detected by the reader, the screen will ask for a secret code (PIN) to be entered. This code is sent by post to all users who requested the activation of the the electronic certificates on their ID cards.

Changing your PIN

When you use your certificates for the first time, you will be asked to replace the initial PIN you were sent with one of your choice.

You will be asked to enter your PIN whenever you use the certificates on your ID card to authenticate your identity when using an online service, or to sign a document electronically.

You will choose your own new PIN that meets the conditions listed on the right-hand side – namely that:

it must be at least 6 characters long;
it must be less than or equal to 8 characters long;
it must contain only numeric characters;
it must not reuse last PIN code;
it must not be in the weak PIN list.

Please note: If you forget your PIN, you will need the PUK code that you received with the initial PIN and the "Challenge".

You have the possibility to request a reprint of the mail containing the original PIN and PUK codes. The request can be made by telephone to the Guichet.lu Helpdesk. For more information on the practical details of the application, see the explanatory information page on Guichet.lu.

To change your PIN on a Windows computer, follow the steps below:

Run the "Classic Client Toolbox" middleware from the "Start" menu – "Programs" – "Gemalto".
Click on "Card Administration".
Select "PIN Management".
Check the box marked "Change PIN" and click "Next".
Make sure that "User" (not "Admin") is displayed in the drop-down list, and then enter the "Current PIN".
Enter a new PIN in the "New PIN" box.

You will choose your own new PIN that meets the conditions listed on the right-hand side – namely that:

it must be at least 6 characters long;
it must be less than or equal to 8 characters long;
it must contain only numeric characters;
it must not reuse last PIN code;
it must not be in the weak PIN list.

You should memorise your new PIN. It will be required when using compatible online services (e.g. MyGuichet.lu) or to sign documents electronically.

Enter the new PIN once more in the "Confirm new PIN" box.

Click the "Change PIN" button to confirm the change. Click "OK" to complete the process of changing your PIN.

Security recommendations

A few recommendations for choosing a good PIN:

Avoid a string of figures that may be easily guessed, such as your date of birth or telephone number.
Avoid logical series, such as 123456 or 102030.
Avoid repeating the same numerical character several times, such as 222888 or 555555.
Avoid using repetitive or symmetrical patterns, such as 010101 or 456745.
Avoid using well known series of figures, such as 112112 or 925925.

To improve the security of your equipment, it is essential:

to never keep your PIN in the same place as your card, as a person who finds the card will also find the PIN and be able to use it;
to never communicate the PIN to another person: the card with your certificates is strictly personal and must not be given to anyone else.