The qualified signature technique follows the same
security guidelines as the advanced signature procedure, but it requires that the signer's identity be verified beforehand and that the signature key be stored in a qualified electronic signature creation device (QSCD). The signer is handed a "token" (smart card, USB key, badge) that allows the certifying authority to validate their identity before signing their documents after entering a personal PIN. This cryptographic key must be exceedingly secure and trustworthy; thus, it must be kept in a secure location.