# Malaysia v2: Get a digital signature certificate

How to buy a digital signature certificate from a licensed certification authority, the documents it needs and the letter of authorization, for Malaysia API v2 (legacy).

> **Legacy API v2**
>
> This page documents API v2 for Malaysia, which is no longer developed. Start new integrations on the current API: see the [Unify API reference](https://docs.complyance.io/api-reference/unify/) and the [Malaysia guide](https://docs.complyance.io/countries/my/).

To use e-invoicing, you need a digital signature certificate (DSC) from a licensed certification authority (CA). This guide explains how to buy one and set it up.

## Buy a digital signature certificate

### Step 1: Request a quotation

- Email a licensed certification authority to request a quotation for a digital signature certificate.

### Step 2: Pay

- Issue a purchase order (PO) or payment advice for the quotation you received.

### Step 3: Submit documents

- Submit the required documents to the certification authority. Processing usually takes 3 to 5 working days.

### Step 4: Verification

- The certification authority contacts your administrative contact to verify the information you provided.

### Step 5: Certificate issued

- After verification, the certificate is issued and sent to your administrative contact.

### Step 6: Configure the certificate

- Work with your ERP provider to configure the certificate in your ERP.

## Licensed certification authorities

Complyance recommends this certification authority, licensed under the Digital Signature Act (DSA) 1997:

**Pos Digicert Sdn Bhd (457608-K)**

| Detail | Value |
| - | - |
| Address | No 8-3A-02 Star Central, Lingkaran Cyberpoint Timur, 63000 Cyberjaya, Selangor Darul Ehsan |
| Licence number | LPBP-1/2020 (4) |
| Issuing date | 25 December 2020 |
| Expiry date | 24 December 2025 |
| Telephone | +603 8800 6000 |
| Website | [www.posdigicert.com.my](http://www.posdigicert.com.my) |

Under subsection 12(3) of the DSA 1997, a licensed certification authority can keep operating after its licence expires while its renewal application is under review.

## Documents Pos Digicert needs

### Application form

The application form for a digital signature asks for:

- **Certificate type**: soft certificate, for a single system that issues invoices.
- **Certificate validity**: 1 year.
- **Company details**: Business Registration Number (BRN), Taxpayer Identification Number (TIN), address, organization email and similar.

### Administrative contact

Give these details for the administrative contact:

- Applicant’s name
- NRIC or passport number
- Designation
- Contact numbers
- Applicant’s email address

### Invoicing information

For invoicing, give:

- Person in charge (PIC)
- PIC’s email address
- PIC’s office phone number
- Mode of payment

### Signing the application form

The administrative contact and a director of the company must both sign the application form by hand.

## Letter of authorization (LOA)

For Complyance to apply for the certificate on your behalf, you complete and sign a letter of authorization (LOA).

The LOA needs:

- The name of the PIC at Complyance
- Complyance’s registered name
- The PIC’s passport number
- Complyance’s BRN
- The signature of your company’s director

Write the LOA on your company’s official letterhead.

## Payment

- Once you confirm payment, Complyance pays Pos Digicert.
- Payment follows the quotation you received.

## Templates

Download the templates here:

- [Application form](https://drive.google.com/file/d/1A9MgHHHqS3ReoF6CTZ8pSwJm7sEENuR5/view)
- [Letter of authorization (LOA)](https://docs.google.com/document/d/1o5BK9yhan7JIoLRyhd1H3Kp8VyaBVX6p/edit)

If you have questions or problems, contact your ERP provider or Complyance support at <support@complyance.io>.

Source: https://docs.complyance.io/legacy/v2/malaysia/onboarding-digital-signature/