How to get Compliance Certificate

Clearance and Reporting
1

We created config file and generated csr, private key, public key.
We have the default pIH value, otp from zatca site.
We need the secret key to proceed.
Secret key is obtain from compliance certificate from zatca,
Steps we followed to obtain secret key :
we logged in to zatca to get the certificate using csr
on zatca.gov.sa–> e-invoicing → upload csr to get compliance certificate and secret key. But no option available to get the compliance certificate and secret key.

please guide to get the secret key.

2

Dear @aljabri

Thank you for reaching out.

To provide comprehensive support as usual, can I kindly ask you to mention the steps that you followed to generate the CSR?

Thanks,
Ibrahem Daoud.

3

Thank you for reply,

the following is the config file and commands used to generate csr

oid_section = OIDs
[ OIDs ]
certificateTemplateName= 1.3.6.1.4.1.1311.20.2
[ req ]
default_bits = 2048
emailAddress = aljabri@aljabrisoft.com
req_extensions = v3_req
x509_extensions = v3_ca
prompt = no
default_md = sha256
req_extensions = req_ext
distinguished_name = dn
[ dn ]
C=SA
ST= Jeddah
L = Jeddah
O=Establishment SALEH OUMAR SALEH AL-JABRI For IT Systems
OU=IT Department
CN=TST-2050012095-300589284900001
emailAddress = aljabri@aljabrisoft.com # Email Address (Optional)
[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment
[req_ext]
certificateTemplateName = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing
subjectAltName = dirName:alt_names
[alt_names]
SN = 1-ALJ|2-ALJ|3-ed22f1d8-e6a2-1118-9b58-d9a8f11e445f
UID=300097233700003
title=1100
registeredAddress=Jeddah
businessCategory = IT Services
DNS.1 = https://aljabrisoft.com # Subject Alternative Name (SAN)

In Command prompt–> following commands to create private key, public key and my.csr

1- Create private key
openssl ecparam -name secp256k1 -genkey -noout -out ec-secp256k1-priv-key.pem

2- Create public key
openssl ec -in ec-secp256k1-priv-key.pem -pubout > ec-secp256k1-pub-key.pem

3- Create CSR
openssl req -new -sha256 -key ec-secp256k1-priv-key.pem -extensions v3_req -config config.cnf -out my.csr

4- Convert my.csr to Encode to Base64 format