ChipNet FIDO2: what it is, how it works, and how to use your digital certificate
The ChipNet FIDO2 is a Spanish security key that combines passwordless authentication (FIDO2 standard) with support for digital certificate — the same one you use to file your tax return or sign documents on the Electronic Headquarters. According to ChipNet, it does not require drivers or administrator permissions for FIDO and smart card on Windows and Mac.
In this guide we explain what models exist, what each one is for, and how to import your FNMT certificate step by step.
Not sure what 2FA is? Start with this 2FA guide.
What is ChipNet FIDO2?
ChipNet is a Spanish company that distributes FIDO2 security keys under its own brand.
There are two main models:
ChipNet FIDO2 Basic
FIDO2 and U2F security key. USB-A with included USB-C adapter. No NFC, no digital certificate. For those who only need to protect accounts like Google, Microsoft, or GitHub.
ChipNet FIDO2 NFC Plus
FIDO2 + U2F + NFC + OTP + PIV (X.509 digital certificate). Stores up to 3 certificates. According to ChipNet, it works without drivers on Mac and Windows. The recommended model if you need the FNMT certificate.
What is the digital certificate for in Spain?
The FNMT digital certificate (National Mint and Stamp Factory) is the electronic document that proves your identity to Spanish public administration. With it you can:
- File your tax return with the Tax Agency
- Consult and manage your work history with Social Security
- Complete procedures on the State Electronic Headquarters
- Sign documents with legal validity
- Encrypt emails
Normally the certificate is installed in the browser or on the computer — which means it is tied to that machine. Storing it on a physical key like the ChipNet NFC Plus makes it portable: you use it on another computer by connecting the key and entering your PIN. From the key only the public part of the certificate (.crt) can be exported, according to ChipNet's manual.
Does ChipNet FIDO2 need drivers?
According to ChipNet, no. The key does not require drivers or administrator permissions for FIDO and smart card on Windows and Mac (Safari, Chrome, Edge, Firefox, Brave).
The PIV standard used by the smart card comes integrated in Windows and macOS. ChipNet's program is only used to manage the key: import certificates, change PIN, etc.
To use it as a FIDO2 key on websites like Google or Microsoft, you don't need to install anything. ChipNet recommends factory resetting it and creating a PIN before your first registration. On Windows: Settings → Accounts → Sign-in options → Security key → Manage.
Resetting the key removes any saved FIDO2 settings. Do it before registering it with any service, not after.
The FIDO2 function has its own PIN (4 to 63 characters). The certificate function (PIV) has another (6 to 8 digits, numbers only). They are not interchangeable.
How to import your FNMT certificate to ChipNet NFC Plus
You need your FNMT certificate exported with private key in .pfx format, from the browser where you have it installed. If your file is .p12, ChipNet indicates that you need to change the extension to .pfx. If you don't have the certificate yet, you can request it at sede.fnmt.gob.es. That file contains your private key: protect it with a strong password and delete it or keep it encrypted when you're done.
It is ChipNet's management program. It is on the NFC Plus page of chipnet.es, in "Manuals and installation programs" (Windows 10, Windows 11, macOS Intel, and macOS M1–M4).
When the message "Click here to continue" appears, double-click. Then go to "Applications" and select the PIV function.
They come with a default value listed in ChipNet's public manual. Change them before importing anything. Don't change the Management Key: ChipNet indicates to always leave the default value.
First choose the slot (Authentication 9a, Digital Signature 9c, Key Manager 9d, or Card Authentication 9e) and click "Import". Choose your .pfx file and verify the PIN and Management Key. Leave the default value of the Management Key by checking the box. Enter the password for the .pfx and click OK.
Connect the key, open your browser (Safari, Chrome, Firefox, Edge, or Brave) and access the Electronic Headquarters or the Tax Agency. According to ChipNet, to use the smart card you don't need to install software or be an administrator.
Three incorrect PINs lock the PIV function. The PUK allows you to reset the PIN. If you lose it, PIV reset returns the PIN, PUK, and Management Key to factory values and deletes all certificates from the key. That's why it's a good idea to keep the encrypted .pfx.
ChipNet FIDO2 vs YubiKey — comparison
| Feature | ChipNet NFC Plus | YubiKey 5 NFC |
|---|---|---|
| FIDO2 / WebAuthn | ✅ | ✅ |
| NFC | ✅ | ✅ |
| OTP | ✅ | ✅ |
| Digital certificate (PIV / X.509) | ✅ up to 3 (ChipNet datasheet) | ✅ 24 PIV slots (source: Yubico) |
| OpenPGP / SSH | Check the manufacturer's datasheet | ✅ |
| Company | Spanish | Yubico (Sweden and USA) |
| Price on Amazon (26/10/2026) | 49.80 € | 70.18 € |
Which one to buy?
ChipNet FIDO2 NFC Plus — if your priority is the digital certificate for procedures with Spanish administration and you prefer a Spanish company.
YubiKey 5 NFC — if in addition to the certificate you need SSH, OpenPGP, advanced compatibility with enterprise services, or you're looking for the most documented ecosystem on the market.
View recommended security keys →Frequently asked questions
Does ChipNet FIDO2 need drivers on Mac?
According to ChipNet, no. It works on macOS with Safari, Chrome, Firefox, Edge, and Brave without drivers or additional software for FIDO and smart card.
Does it work on Windows without being an administrator?
According to ChipNet, yes. For FIDO and smart card you don't need to install software or have administrator rights. The SK Manager program is only used to manage the key and is downloaded from the product page.
Is it compatible with the FNMT certificate?
The FNMT certificate is X.509 type, which is what the ChipNet FIDO2 NFC Plus stores. It is imported from a .pfx file.
How many certificates can I store?
Up to 3 X.509 digital certificates on the ChipNet NFC Plus, according to ChipNet's datasheet.
What is the difference between the Basic and the NFC Plus?
The Basic only includes FIDO2 and U2F — it serves to protect online accounts but does not support digital certificate or NFC. The NFC Plus adds NFC, OTP, and support for PIV digital certificates.
What happens if I lose the key?
The certificate is protected by PIN, so it cannot be used without it. If you have an encrypted copy of the .pfx, you can import it on another key. If not, request a new certificate from the FNMT. If you think someone may have your key, revoke the certificate with the FNMT.
Can I extract the certificate from the key to make a backup?
Not with the private key. Only the public part of the certificate (.crt) can be exported from the key, according to ChipNet's manual. That's why the backup is the original .pfx.
A solid option for digital procedures in Spain
The ChipNet FIDO2 NFC Plus covers the most common use case in Spain: carry the digital certificate with you without depending on a specific browser or a fixed computer. The import process requires some patience the first time, but the result is practical.
For technical profiles that need SSH, OpenPGP, or greater compatibility ecosystem, the YubiKey 5 NFC remains the most complete option on the market.
As an Amazon Associate, I earn from qualifying purchases.
