Register your branches and POS terminals with ZATCA

ZATCA issues a separate certificate to every unit that issues invoices: each branch and each POS terminal. Each unit also keeps its own invoice counter and chain. The Device onboarding screen takes you through the five steps for every unit, one card per device, so a fully registered branch never hides a till that is not ready yet.

Before you start

• The Tax authority in Compliance Settings is ZATCA, and the Fiscal Hub connection test succeeds.

• Your implementation team has marked which branches and POS terminals are registered establishments. Each appears here as a card. If you see No registered establishments, ask them to add the units first.

• Every establishment has its tax registration number. A card without one shows a warning, and ZATCA rejects the certificate request until it is set.

• You can sign in to ZATCA's Fatoora portal to generate one-time passwords.

Steps

1. Open More › Tax Compliance › Authority Onboarding. The screen title is Device onboarding, and each card shows the device name, its code, and Not yet onboarded or Ready to file.

2. Register the device. Select Register. This creates the record that owns the device's certificate and invoice chain.

3. Generate the signing request. Select Generate. The system creates the private key and the Certificate signing request. Select Copy CSR and paste the request into the Fatoora portal. The portal gives you a one-time password.

4. Exchange the one-time password. Type it in One-time password and select Get compliance certificate. The password works once and expires quickly, usually within an hour. If it fails, get a new password from the portal; the signing request is still valid.

5. Run the compliance checks. Select Run checks. The system files six sample documents on a separate test chain, so the device's real invoice counter is not touched. You can repeat this step safely.

6. Get the production certificate. Select Go live. From now on this device files real documents with ZATCA, and its card shows Ready to file.

Repeat the steps for every card. Each step shows a green tick once it is done, and the next step becomes available.

What you see after onboarding

• Certificate expires shows the date the device's certificate expires.

• Invoice counter shows the device's current invoice counter.

• If ZATCA returns an error at any step, Last error from the authority shows its message on the card.

Common questions

Can I run a step again? Yes. Every step can be repeated: Re-register and Regenerate appear once a step is done. Regenerating the signing request replaces the private key and cancels the certificate already issued for it, so the system asks you to confirm, and you need a new one-time password from the portal.

The one-time password was rejected. What now? It has almost always expired. Generate a new one in the Fatoora portal and repeat step 4. You do not need a new signing request.

When can I switch e-invoicing to Live? When every device you will invoice from shows Ready to file and the go-live checklist on the Tax Compliance dashboard has no blocking item left.