Why you need it
The Law 14/2013 portal (expinterweb) and the Sede Electrónica require one of two digital identities: Cl@ve or an FNMT digital certificate. Without one, you can't submit the online form, pay the tax, or check the status of your file.
For TIE renewal, an FNMT digital certificate is the recommended option — it also enables Autofirma, which is required to digitally sign the submission.
Option A — FNMT digital certificate (recommended)
The FNMT (Fábrica Nacional de Moneda y Timbre) issues software certificates that install into your browser and keychain. The process:
- Go to sede.fnmt.gob.es and request a "Certificado de Persona Física."
- The site gives you a request code. Don't change browsers or clear cookies after this step — the private key is stored locally in your browser session.
- Book an in-person identity check at an acreditación office (any Agencia Tributaria branch works). Bring your passport and your current TIE.
- After the identity check, return to the FNMT site on the same browser and download the certificate. Export it as a
.p12/.pfxfile and back it up. - Import the certificate into your browser (Safari, Chrome, or Firefox) to use it on the portals.
Back up the .p12 file immediately
Once downloaded, save the .p12 somewhere safe — a password manager or encrypted drive. If you lose it, you have to restart the entire process, including another in-person appointment.
Option B — Cl@ve PIN / Cl@ve Permanente
Cl@ve is a lighter-weight option that doesn't require browser certificate handling. It comes in two levels:
- Cl@ve PIN: a one-off PIN sent via SMS or the Cl@ve app — good for occasional logins but less convenient for repeated use.
- Cl@ve Permanente: username + password with a second factor — better for ongoing access to Sede Electrónica services.
Registration can be done online if you already have an FNMT certificate, or in person at any Agencia Tributaria, Seguridad Social, or SEPE registration office.
Start at clave.gob.es.
Autofirma — the signing tool
For TIE renewal submissions you'll also need Autofirma — the official desktop signing app. It uses your installed FNMT certificate to apply a legally valid digital signature to the submission form.
- Download: firmaelectronica.gob.es/Home/Descargas
- Available for macOS, Windows, and Linux.
- On macOS, allow it in System Settings → Privacy & Security after the first launch is blocked by Gatekeeper (right-click the app → Open).
Quick troubleshooting
- Browser doesn't see the certificate: re-import the
.p12into the browser's certificate store and restart the browser. - Autofirma "no se puede iniciar": reinstall, and on macOS right-click → Open to bypass Gatekeeper the first time.
- Portal says "certificado no válido": the certificate may have expired (FNMT certificates are valid 2–4 years). Renew it before it lapses — the renewal process is faster than the initial one.
- FNMT site won't load the certificate download: disable any browser extensions that block scripts, try a different browser, or check that the same browser session is being used as when the request was generated.
Once authentication is sorted, you're ready to submit — head back to the renewal guide.