Frequently asked questions about Vault, the website and the Client Area

This page gathers the questions we receive most often. It is updated regularly: if yours is not here, write to us at contact@sigalion.fr.

On the home page I can only buy the Vault licence. Is that right?

The public website sells only the Vault licence, because it is bought without an account: you receive a code by email, and you then create your account with that code.

Everything else is tied to your account, so you need to be signed in to your Client Area (client.sigalion.fr, same user name and password as the application). SMS credits, eIDAS timestamping credits and plans for larger transfers are available there.

I have a new email address. Can I change it?

Yes. In the Client Area, top right, click the pencil next to your current address: a change form appears. You will need to enter your password, then confirm the new address by clicking the link sent to it. That link is valid for one hour.

Adobe Acrobat is asking me for an API key for timestamping. Can I use my credits?

Yes. In your Client Area, the My API keys section lets you generate one. Then set the server in Acrobat to https://api.sigalion.fr/tsa/qualified/auto, which selects a qualified authority itself and switches to another one if the first is unavailable, and paste your key into the user name field. Our server ignores the password, but Acrobat will not accept an empty field: type any characters there. Each timestamp uses one eIDAS credit.

For free, non-qualified timestamping, the server https://api.sigalion.fr/tsa requires no key.

Do the eIDAS timestamp tokens I buy expire?

No, they have no expiry date: you use them whenever you need them. They are attached to your account, which is their only limit: if you delete it, any remaining tokens are lost.

I have lost the password of an encrypted file. Can you recover it?

No, and that is the whole point: encryption happens in the Vault application, on your own device. The password is never stored on our side, and nothing makes it possible to reconstruct it.

Should I keep the token on its own or the ASiC-S proof container?

The .asics container holds the document and the token together in a standardised file (ASiC-S). The .tst token is lighter, but the proof only holds if the document stays identical down to the byte: a program that reopens and resaves it, changing one piece of metadata along the way, is enough for the fingerprint to stop matching. Prefer the container, unless you are in full control of how the original document is kept.

Can everything be done from the Client Area?

No. The Vault desktop application is the only way to encrypt and transfer files from your computer (macOS, Windows or Linux). Optional purchases are made in your Client Area. Mobile applications are also available on the App Store and Google Play, where purchases are made directly in the app.