ChipNet FIDO2: what it is, how it works, and how to use your digital certificate
The ChipNet FIDO2 is a Spanish security key that combines passwordless authentication (FIDO2 standard) with support for digital certificate — the same one you use to file your tax return or sign documents in the Electronic Headquarters. No drivers to install. No need for administrator permissions.
In this guide we explain what models exist, what each one is for, and how to import your FNMT certificate step by step.
What is ChipNet FIDO2?
ChipNet is a Spanish company that distributes FIDO2 security keys under its own brand. The hardware is manufactured by Feitian — one of the world's leading manufacturers of authentication devices — adapted and sold with Spanish-language post-sale support.
There are two main models:
ChipNet FIDO2 Basic
FIDO2 + U2F security key. USB-A and USB-C. No NFC, no digital certificate. For those who only need to protect accounts like Google, Microsoft, or GitHub.
ChipNet FIDO2 NFC Plus
FIDO2 + U2F + NFC + OTP + PIV (X.509 digital certificate). Stores up to 3 certificates. Works without drivers on Mac and Windows. The recommended model if you need the FNMT certificate.
What is the digital certificate used for in Spain?
The FNMT digital certificate (National Mint and Stamp Factory) is the electronic document that proves your identity to Spanish public administration. With it you can:
- File your tax return with the Tax Agency
- Check and manage your work history with Social Security
- Carry out procedures at the State Electronic Headquarters
- Sign documents with legal validity
- Encrypt emails
Normally the certificate is installed in the browser or on the computer — which means it is tied to that machine. Storing it on a physical key like the ChipNet NFC Plus makes it portable and more secure: the private key never leaves the device.
How to import your FNMT certificate on the ChipNet NFC Plus
You need to have your FNMT certificate exported in .pfx or .p12 format from the browser where you have it installed. If you don't have the certificate yet, you can request it at sede.fnmt.gob.es.
Available on their official website (chipnet.es). It's the free tool for managing certificates on the key.
The installation process is straightforward and doesn't require administrator permissions on most systems.
From the Token Manager select "Import certificate" and locate your file. Enter the certificate password when prompted.
The ChipNet NFC Plus protects certificates with a local PIN. If you enter it incorrectly more than 3 times, the Token Manager allows you to unlock it.
Connect the key, open your browser (Safari, Chrome, Firefox, Edge, or Brave) and access the Electronic Headquarters or Tax Agency. The system recognizes it automatically.
The ChipNet NFC Plus organizes certificates by use — one slot for authentication, another for signing — just like the electronic ID. You may need to import the same certificate in more than one slot depending on what you use it for.
ChipNet FIDO2 vs YubiKey — comparison
| Feature | ChipNet NFC Plus | YubiKey 5 NFC |
|---|---|---|
| FIDO2 / WebAuthn | ✅ | ✅ |
| NFC | ✅ | ✅ |
| OTP | ✅ | ✅ |
| Digital certificate (PIV / X.509) | ✅ up to 3 | ✅ up to 4 |
| No drivers on Mac and Windows | ✅ native | ⚠️ sometimes requires minidriver |
| OpenPGP / SSH | ❌ | ✅ |
| Spanish support | ✅ Spanish company | ⚠️ global support in English |
| Estimated price | ~30€ | ~55€ |
Which one to buy?
ChipNet FIDO2 NFC Plus — if your priority is the digital certificate for dealings with Spanish administration, you want to do it without installing drivers, and you're looking for Spanish support at a reasonable price.
YubiKey 5 NFC — if in addition to the certificate you need SSH, OpenPGP, advanced compatibility with enterprise services, or you're looking for the most documented ecosystem on the market.
View recommended security keys →Frequently asked questions
Does ChipNet FIDO2 need drivers on Mac?
No. The ChipNet FIDO2 NFC Plus works natively on macOS with Safari, Chrome, Firefox, Edge, and Brave without needing to install any driver or additional software.
Does it work on Windows without being an administrator?
Yes. For FIDO2 and Smart Card functions, administrator permissions are not required. The Token Manager for managing certificates does require installation, but it's a standard process with no special dependencies.
Is it compatible with the FNMT certificate?
Yes. The ChipNet FIDO2 NFC Plus supports FNMT, CAMERFIRMA, CAT, and other Spanish certificate authorities in .pfx or .p12 format.
How many certificates can I store?
Up to 3 X.509 digital certificates simultaneously on the ChipNet NFC Plus.
What's the difference between the Basic and NFC Plus?
The Basic only includes FIDO2 and U2F — it serves to protect online accounts but doesn't support digital certificates or NFC. The NFC Plus adds NFC, OTP, and full support for PIV digital certificates.
What if I lose the key?
The digital certificate is protected by PIN — without it, it cannot be used even if someone has the key. For procedures with the administration, you can request a new certificate from FNMT and import it again on a new key.
A solid option for digital procedures in Spain
The ChipNet FIDO2 NFC Plus covers the most common use case in Spain: carrying your digital certificate with you at all times without depending on a specific browser or a fixed computer. The import process requires some patience the first time, but the result is practical.
For technical profiles that need SSH, OpenPGP, or greater compatibility ecosystem, the YubiKey 5 NFC remains the most complete option on the market.
