iDsaya by Pos Digicert: The Complete Guide to Secure Digital Identity & Verification

Electronic Know Your Customer (eKYC) | Multi-Factor Authentication (MFA) | Secure Digital Signatures

✅ Built on Public Key Infrastructure (PKI)[cite: 1] | ⏱️ 60-Second TOTP Refresh[cite: 1] | 🎯 Certified by Pos Digicert[cite: 1]

eKYC

Advanced Identity
Verification[cite: 1]

MFA

Multi-Factor
Authentication[cite: 1]

TOTP

Time-based One-Time
Passwords[cite: 1]

OCR

Optical Character
Recognition[cite: 1]

🛡️ What is iDsaya?

iDsaya is a comprehensive digital identity platform developed by Pos Digicert[cite: 1]. Built on robust Public Key Infrastructure (PKI), it allows verified users to securely perform digital signatures using Multi-Factor Authentication (MFA)[cite: 1]. It serves as a secure, device-bound digital companion for online verification, though it does not replace your physical ID card[cite: 1].

📱 Device Compatibility & Registration

The iDsaya application is free to download and use[cite: 1]. To ensure seamless operation, your device must meet the following minimum requirements:

iOS Users: Requires iOS 12.4 or newer[cite: 1].
Android/Huawei Users: Requires SDK version 24, supporting Android 7.0 (Nougat) or higher[cite: 1].

Registration requires a valid phone number, and users must select their country code (supported codes include Malaysia +60, China +86, Taiwan +886, and Japan +81)[cite: 1]. Malaysian citizens MUST use their MyKad, while non-Malaysians MUST use their Passport for registration[cite: 1].

📸 eKYC & Identity Verification Guidelines

To generate a digital certificate, users must undergo the eKYC process, which includes ID capture, document verification, facial verification, and liveness detection[cite: 1]. Following the correct guidelines ensures a smooth approval process by the Pos Digicert Registration Authority[cite: 1].

🪪

MyKad & Passport Scanning Rules

Only original documents are accepted; printed copies or photos on screens are strictly prohibited[cite: 1].
Remove any plastic covers or protective casings to avoid glare[cite: 1].
Tilt the card slightly to reduce hologram reflection, which can affect OCR accuracy for names and ID numbers[cite: 1].
Avoid dark, patterned backgrounds, or backgrounds that match the blue tone of the ID card[cite: 1].

🤳

Facial Verification (Selfie) Rules

Your actual face must be captured; screen recordings or printed photos are not allowed[cite: 1].
Face the camera directly ensuring key facial features (eyes, eyebrows, nose, mouth) are clearly visible and unhidden[cite: 1].
Do not wear face masks during the selfie[cite: 1].
Ensure even, moderate lighting to avoid overexposed, too dark, or two-toned shadows on the face[cite: 1].

⚠️ Note on Manual Verification: If the automated MyKad eKYC fails after three (3) attempts, or if the Passport verification fails after one (1) attempt, the app will redirect you to the Manual Verification process[cite: 1]. This requires you to manually take photos of your ID, record a 4-second video selfie, and submit your details for review[cite: 1].

🔐 Security Features: MFA, Logins, and PINs

iDsaya is built with comprehensive security checkpoints to protect your digital identity.

Feature	Functionality & Rules
Log In Credentials	Malaysians log in using their MyKad number (without dashes), while Non-Malaysians use the ID Number sent to their registered email[cite: 1].
6-Digit PIN	Once eKYC is completed, a 6-digit PIN is required to unlock the app when returning from other applications[cite: 1].
MFA (TOTP)	Used during the digital signing process. The Time-based One-Time Password (TOTP) refreshes automatically every 60 seconds[cite: 1].
Document Verification	Users can scan QR codes generated by the Pos Digicert Digital Signing Solution (DSS) to verify documents, triggering a 6-digit PIN prompt[cite: 1].

❓ Frequently Asked Questions (FAQ)

Q: What happens if I uninstall and reinstall the app?

A: If you uninstall the app *before* completing the eKYC process, you will need to register for a new account[cite: 1]. However, if you uninstall the app *after* eKYC is completed, your data remains intact and you can simply log in with your existing account credentials[cite: 1].

Q: When do I need to re-verify my identity?

A: You must re-verify your identity if your previous eKYC is more than 2 years old, or if your passport has expired and you need to generate a new digital certificate or integrate with a system using your latest passport number[cite: 1].

Q: What happens if I choose to Delete my Account?

A: Deleting your account will permanently remove your data[cite: 1]. If you choose to use the service again, you will be required to completely redo the identity verification process and wait for a new approval from Pos Digicert[cite: 1].