Smart-ID · e-ID mobile eID
05 · e-ID Mongolia · Gerege Systems

Your digital ID, on your phone.

e-ID Mongolia brings passwordless login, legally valid digital signatures and the right to sign on behalf of an organization into one app. Onboarding happens entirely on the phone — no branch visit needed. The RP-API is compatible with Smart-ID v3, so developers with Baltic experience will feel right at home.

iOSAndroidmacOS 14+Windows · beta 1.0.97 languages
Onboarding

Four steps, all on your phone

1

Get the app

App Store or Google Play.

2

DAN or G-Sign

Prove who you are with government login.

3

Selfie

Your face is matched to your ID document photo.

4

Create PINs

PIN1 — 4 digits (login), PIN2 — 6 digits (signature).

Citizens: Mongolian citizens aged 18 and over. Registration number: 2 Cyrillic letters + 8 digits.
Foreign nationals: 18+; the app reads a valid NFC-chip passport and matches your face.
Keys

Split in two, both protected

Phone
Phone sharePIN-locked, on this phone only, never transmitted.
one-time token
If a cloned app is detected,the certificate is revoked
Server
Server shareEncrypted with a key in an HSM. Cannot sign on its own. Counts wrong PINs and locks.

Verification code

The same 5-digit code on your computer and phone at every login. Approve only if they match. It is not your PIN.

Hash only

When you sign, only a digest — not the document — is sent to e-ID.

Oversight

On the web, see your certificates, registered devices, and a history of when and where you logged in and signed.

Trust services

Verifiable signatures

e-ID Mongolia states that its certificates chain up to Mongolia's National Root CA. Standards: X.509 v3, PAdES B-LT, RFC 3161, ETSI EN 319 412, OCSP, CRL.

OCSP · CRL

Open validation

ocsp.eidmongolia.mn · crl.eidmongolia.mn

TSA

tsa.timeserver.mn

An RFC 3161 timestamp on every PDF signature.

Verify

ca.eidmongolia.mn/verify

Check signature, chain, revocation and timestamp online.

Adobe

Add the root once

Adobe Reader does not trust Mongolia's Root CA by default — add it by following the guide at eidmongolia.mn/trust.

For organizations

Signing on behalf, with a seal

  • Signing on behalf of an organization (onBehalfOf: NTRMN-…) — authority is checked against the representative registry.
  • Organization seal (SEAL) and PKI read access.
  • eID Mongolia Organization Issuing CA is the only approved CA on Mongolia's X-Road (instance MN).
  • Uses: government e-services, bank KYC, company contracts.
For developers

RP-API

  • rp.eidmongolia.mn: Bearer secret (rp_sk_…), IP allowlist, optional mTLS.
  • Push, QR · Web2App · App2App, "My QR". Session TTL: login 300 s, signature 600 s.
  • TS and Go SDKs: createEidLogin, decoy sessions, rate limiting, OCSP checks.
  • <eid-login-button> — a web component in 7 languages.
  • Request → operator review → API key issued once.