Install the MYOB SSL Certificate

Overview

To maintain security between MYOB PayGlobal and the MYOB Agency API, a Secure Socket Layer (SSL) Certificates must be installed.

By using SSL Certificates:

• We can protect your data (encryption)
• MYOB Agency API can verify the identity of the MYOB PayGlobal database
• MYOB PayGlobal customers can verify the identity of the MYOB STP Service

  IMPORTANT: To get the certificate please contact PayGlobal Support. It is NOT part of the PayGlobal install package.

Installing the PayGlobal Certificate

Key points:

• The certificate file is supplied in secure '.pfx' form, which will require a password to install.

  You must contact PayGlobal Support for the password.

• Remove any certificates that have been previously installed for MYOB PayGlobal.

  This is because the first certificate found will be used even if it has expired.

• Every machine that runs hr.exe will need it's own certificate; i.e. the certificate must be installed where the hr.exe process is running.
• The certificate can either be installed into the Local Machine or User's certificate store locations.
• Allow Windows to automatically select a certificate store based on the type of certificate being installed.
• The Private key must be non-exportable.

  IMPORTANT: Don't forget to go to the Certificate Manager to set the Private key permissions. Every PayGlobal user that is expected to submit STP data to the ATO must have read-only access to the private key on the PayGlobal certificate

Who issues the certificates?

• MYOB STP Service Server certificate is issued by Digi-Cert
• MYOB PayGlobal Client certificate is issued by Digi-Cert

As with standard SSL, only the public key is sent over HTTPS.

Topic: 44408