Malaysia v2: Get a digital signature certificate

To use e-invoicing, you need a digital signature certificate (DSC) from a licensed certification authority (CA). This guide explains how to buy one and set it up.

Buy a digital signature certificate

Step 1: Request a quotation

• Email a licensed certification authority to request a quotation for a digital signature certificate.

Step 2: Pay

• Issue a purchase order (PO) or payment advice for the quotation you received.

Step 3: Submit documents

• Submit the required documents to the certification authority. Processing usually takes 3 to 5 working days.

Step 4: Verification

• The certification authority contacts your administrative contact to verify the information you provided.

Step 5: Certificate issued

• After verification, the certificate is issued and sent to your administrative contact.

Step 6: Configure the certificate

• Work with your ERP provider to configure the certificate in your ERP.

Licensed certification authorities

Complyance recommends this certification authority, licensed under the Digital Signature Act (DSA) 1997:

Pos Digicert Sdn Bhd (457608-K)

Under subsection 12(3) of the DSA 1997, a licensed certification authority can keep operating after its licence expires while its renewal application is under review.

Documents Pos Digicert needs

Application form

The application form for a digital signature asks for:

• Certificate type: soft certificate, for a single system that issues invoices.
• Certificate validity: 1 year.
• Company details: Business Registration Number (BRN), Taxpayer Identification Number (TIN), address, organization email and similar.

Administrative contact

Give these details for the administrative contact:

• Applicant’s name
• NRIC or passport number
• Designation
• Contact numbers
• Applicant’s email address

Invoicing information

For invoicing, give:

• Person in charge (PIC)
• PIC’s email address
• PIC’s office phone number
• Mode of payment

Signing the application form

The administrative contact and a director of the company must both sign the application form by hand.

Letter of authorization (LOA)

For Complyance to apply for the certificate on your behalf, you complete and sign a letter of authorization (LOA).

The LOA needs:

• The name of the PIC at Complyance
• Complyance’s registered name
• The PIC’s passport number
• Complyance’s BRN
• The signature of your company’s director

Write the LOA on your company’s official letterhead.

Payment

• Once you confirm payment, Complyance pays Pos Digicert.
• Payment follows the quotation you received.

Templates

Download the templates here:

• Application form
• Letter of authorization (LOA)

If you have questions or problems, contact your ERP provider or Complyance support at support@complyance.io.