02/10/2026
One passport a month, one token, one person at a desk. That works fine.
Now make it a hundred a month. Every sealing needs someone with the token in the reader, with the right PIN, on a day they are in the office. The passport waits for that person. :hourglass_flowing_sand:
The DPP registry user guide (v1.02, 24 August 2026) accepts a qualified seal from either a token you hold or a qualified remote service run by a trust service provider. Both are qualified. What differs is who has to be present at the moment of sealing.
Our expectation, which we have not measured: the more often your passports change, the more likely you are to want sealing to happen inside your own system instead of at one person's desk.
So before choosing a route, work out how many seals a month you expect, and who covers when the token holder is away.
How many people in your company could seal a passport today?