Introduction

Revenue uses Digital Certificates to ensure that data is securely transmitted to their servers and that only permitted users can submit information. A digital certificate is a file containing your unique key for logging into ROS. If you try to open it in a text editor, you will only see encrypted text.

Cloudpay uses these files to communicate with ROS. Once this is set up, you will not have to worry about it again until your certificate expires in a couple of years time or if Revenue decide to make the certificates inactive and reissue them.

If you are getting a certificate inactive error, or other problem connecting with your digital certificate, it is likely that Revenue has made you certificate inactive and you'll have to re-load a new certificate following these steps.

 

How to find your certificate

If you already have your ROS digital certificate and password handy, you can skip this part and move onto 'Loading your ROS digital certificate'

Before proceeding with this, you should have registered with ROS and have a ROS account. On the computer and browser you use to log into ROS, open www.ROS.ie.

Click on the 'Manage My Certificates' link.

Saving your certificate

To save your certificate.

Click the circular arrow next to the certificate name that you log in with to save the certificate file. It will be saved as a .bac file. You will need this file for the next step.

Upload your certificate to CloudPay

Select the Digital Cert menu option under Revenue at the left of the screen

 

If you have not yet loaded any digital certificates, then the screen will look like it does opposite.

Otherwise your previously loaded digital certificates will be listed in the familiar grid format. Click the 'Add New Certificate' button if this is the case.

Load Certificate File

Click the Next>> button and the screen opposite will appear.

Use this screen to select your digital certificate file you downloaded from ROS.ie (Saving your certificate)

Click the 'Load Certificate' button and select the correct file when prompted.

 

Click the 'Next>>' button when you have finished.

Enter Password

Now it is time to enter your password. You must enter the correct password to successfully add a certificate.

The password is usually the same as you use to log into ROS.ie. Note that the password is case sensitive, eg 'MypaSSworD' is not the same as 'mypassword'

Description is optional. Entering something here may help you identify your certificates. You can enter your own description here.

TAIN Certificates and Standard Certificates

Some Digital certificates also need a TAIN. TAIN stands for Tax Advisor Identity Number.

If you process payroll for multiple companies (like a Bookkeeper, Accountant or Payroll Bureau) then it is likely you have a TAIN digital certificate.

If you only process payroll for your own company, then you probably have a Standard digital certificate, and you can ignore the TAIN.

 

(In some instances there are also 'Sub-Certs' that also require a TAIN)

TAIN Certificate

If your Certificate requires a TAIN, then tick the 'Tick if this certificate requires a TAIN' check box.

You'll be able to enter your TAIN in the boxes provided. A TAIN is five numbers followed by a letter.

 

If your certificate requires a TAIN and you do not enter one here, your certificate will not work.

Link your company

If using a Standard digital certificate (not a TAIN one) then the next step will allow you to link your new digital certificate to your company.

Select your company name in the drop down and click the 'Link Company' button.

 

(If you skip this step, you digital certificate will not work. However, you can still link it a later stage)

Successfully Linked

When you link your company to your digital certificate, a green message will appear:

'This company has now been successfully linked to your Revenue digital certificate'

 

Click the 'Next>>' button again.

TAIN Linked

If you entered a TAIN, instead of a drop down appearing with your companies listed, a yellow message appears like the one opposite.

The message is to inform that you that you can link your companies to your new digital certificate when you have finished adding your new certificate.

Finished

You should now see a screen like the one opposite. 

Your Revenue digital certificate has now been successfully loaded into Cloudpay. Click the 'Finish' button to exit and return to the Digital Certificate Manager screen.

Changing Links

Once you have loaded your certificate, it is possible to change which companies your certificates are linked to by selecting the Digital Certificate in the Digital Certificate grid and selecting the appropriate companies. TAIN certificates can be assigned to multiple companies.

At the bottom of the certificate manager screen is a list of all the companies you have set up in Cloudpay.

  1. Make sure the correct digital certificate is selected in the main certificate grid
  2. Click the slider next to the Company so that it turns blue. This means that the certificate has been assigned to this company.

IMPORTANT: If you do not assign a cert to your company, then your RPNs and Submissions will not work!

Wrong Password

If a screen like the one opposite appears when you were attempting to load your certificate, this means that you have entered the incorrect password.

You should use the same password as you use to log into ROS.ie, at it is case sensitive.

If you believe that your password is correct, then you might be using the wrong certificate file. The password has to match the correct certificate file. Sometimes browsers cache old versions of files. Use an Incognito or In-private web browser window to download your digital certificate file again.

If this is still not working for you, you should go to ROS.ie and click 'Reset Login' where is says 'Cannot find certificate or forgot password'

Corrupt certificate

If you see a screen like the one opposite, it means there is something wrong with the file you downloaded from ROS.ie. It might not be a digital certificate file, or it might be corrupt.

To fix this you need to download the certificate again from ROS. Sometimes digital certificates can become corrupt when downloaded.

Some users have also downloaded the incorrect item, like the ROS html webpage.

There is also a known Revenue bug where certificates are corrupt. If your file is corrupt even after multiple attempts to download it, please contact Revenue.

 

Troubleshooting

If you have successfully loaded your digital certificate, but are having problems with it please check the Digital Certificate Trouble Shooter

 

https://www.payback.ie/cloudpay/digital-certificate-troubleshooter/

 

Important Notes

  • If you use the wrong certificate for your company, the certificate will load but your submissions will fail.
  • Attempting to load a file that is not a Digital Certificate file or does not have the file extension 'P12' or 'bac' will cause an error message saying "This is not a valid P12 Digital certificate"
  • If you certificate expires or you used an incorrect certificate, click the 'Add New Certificate' button at the top of the screen to load a new certificate.
  • When you certificate expires, you will need to obtain a new certificate from ROS and re-import it into CloudPay by clicking the 'Add New Certificate' button.
  • You must enter the correct password for the certificate and click the Update button to successfully import a certificate
  • Dragging a certificate onto the box will not move the certificate from your computer. CloudPay makes a copy of it.
  • You only need to load the the certificate from one computer. The certificate is securely stored in the Cloud so all other computers and location will have access to it

If there is a problem with your certificate, please contact Revenue's employer helpdesk at 01-7383638