# Reporting API Error : Invalid signed properties hashing, SignedProperties with id='xadesSignedProperties'

**URL:** <https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667>\
**Category:** Clearance and Reporting\
**Created:** [October 15, 2024, 1:59pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667 "2024-10-15T13:59:00Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![hassan.fayyaz](https://avatars.discourse-cdn.com/v4/letter/h/94ad74/32.png) [@hassan.fayyaz](https://zatca1.discourse.group/u/hassan.fayyaz)\
**Post date:** [October 15, 2024, 1:59pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/1 "2024-10-15T13:59:00Z")

</div>

I am encountering an error while using the reporting API in the ZATCA sandbox environment.

The technology stack I’m using consists of **PHP/Laravel.**

**BASE URL**

> [https://gw-fatoora.zatca.gov.sa/e-invoicing/developer-portal](https://gw-fatoora.zatca.gov.sa/e-invoicing/developer-portal)

Everystep is working fine expect reporting api giving me an error.

Everything is functioning properly, except when calling the Reporting API, I receive the following error:

```php
{
  +"validationResults":
    +"infoMessages": array:1 [▶]
    +"warningMessages": []
    +"errorMessages": array:1 [▼
      0 => {
        +"type": "ERROR"
        +"code": "signed-properties-hashing"
        +"category": "CERTIFICATE_ERRORS"
        +"message": "Invalid signed properties hashing, SignedProperties with id='xadesSignedProperties'"
        +"status": "ERROR"
      }
    ]
    +"status": "ERROR"
  }
  +"reportingStatus": "NOT_REPORTED"
}

```

The error appears under the `CERTIFICATE_ERRORS` category with a message indicating an issue with the “Invalid signed properties hashing” related to the `SignedProperties` element.

Here are the steps I am following:

1. Create an EGS object with the unit’s details.
2. Set the environment to non-production (test mode).
3. Generate private keys and a CSR for the EGS.
4. Request and obtain a compliance certificate using the CSR.
5. Sign the invoice in test mode using the compliance certificate.
6. Verify the invoice for compliance.
7. Generate a production certificate (CSID) once compliance is confirmed.
8. Sign the invoice in production mode.
9. Report the signed production invoice to the authorities.

### Code Explanation:

1. **Create EGS Object** :  
Initialize an `EGS` object using the unit details. This object manages Electronic General System (EGS) operations related to invoices.

2. **Set Test Mode** :  
The system is switched to non-production by setting the production mode to `false`.

3. **Generate Keys and CSR** :  
Generate new private keys and a CSR for the EGS. These are needed to securely sign invoices.

4. **Request Compliance Certificate** :  
A compliance certificate is requested using the CSR, and the system returns a `request_id`, `binary_security_token`, and `secret` for further operations.

5. **Sign Invoice (Test Mode)**:  
Sign the invoice in test mode using the private key, unit details, and `binary_security_token`. The signed invoice, hash, and QR code are generated.

6. **Verify Invoice Compliance** :  
Check the invoice for compliance using the signed invoice string, hash, compliance certificate, and `secret`.

7. **Generate Production CSID** :  
After confirming compliance, generate a production certificate (CSID) using the `binary_security_token`, `secret`, and `request_id`. This returns production tokens and keys.

8. **Sign Invoice (Production Mode)**:  
Re-sign the invoice in production mode using the production token and private key. This is required for officially issuing the invoice.

9. **Report Invoice** :  
Report the signed production invoice to the authorities using the invoice details and production certificate.

**Here is my XML of invoice:**

```auto
<?xml version="1.0" encoding="UTF-8"?>
<Invoice xmlns="urn:oasis:names:specification:ubl:schema:xsd:Invoice-2" xmlns:cac="urn:oasis:names:specification:ubl:schema:xsd:CommonAggregateComponents-2" xmlns:cbc="urn:oasis:names:specification:ubl:schema:xsd:CommonBasicComponents-2" xmlns:ext="urn:oasis:names:specification:ubl:schema:xsd:CommonExtensionComponents-2">
    <ext:UBLExtensions>
        <ext:UBLExtension>
            <ext:ExtensionURI>urn:oasis:names:specification:ubl:dsig:enveloped:xades</ext:ExtensionURI>
            <ext:ExtensionContent>
                <sig:UBLDocumentSignatures xmlns:sac="urn:oasis:names:specification:ubl:schema:xsd:SignatureAggregateComponents-2" xmlns:sbc="urn:oasis:names:specification:ubl:schema:xsd:SignatureBasicComponents-2" xmlns:sig="urn:oasis:names:specification:ubl:schema:xsd:CommonSignatureComponents-2">
                    <sac:SignatureInformation>
                        <cbc:ID>urn:oasis:names:specification:ubl:signature:1</cbc:ID>
                        <sbc:ReferencedSignatureID>urn:oasis:names:specification:ubl:signature:Invoice</sbc:ReferencedSignatureID>
                        <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="signature">
                            <ds:SignedInfo>
                                <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
                                <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
                                <ds:Reference Id="invoiceSignedData" URI="">
                                    <ds:Transforms>
                                        <ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
                                            <ds:XPath>not(//ancestor-or-self::ext:UBLExtensions)</ds:XPath>
                                        </ds:Transform>
                                        <ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
                                            <ds:XPath>not(//ancestor-or-self::cac:Signature)</ds:XPath>
                                        </ds:Transform>
                                        <ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
                                            <ds:XPath>not(//ancestor-or-self::cac:AdditionalDocumentReference[cbc:ID='QR'])</ds:XPath>
                                        </ds:Transform>
                                        <ds:Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
                                    </ds:Transforms>
                                    <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                    <ds:DigestValue>tN/EtqU9sI2p92WijIuRQ0a5aTNBsrXha+OEcSX6q8w=</ds:DigestValue>
                                </ds:Reference>
                                <ds:Reference Type="http://www.w3.org/2000/09/xmldsig#SignatureProperties" URI="#xadesSignedProperties">
                                    <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                    <ds:DigestValue>MGM2Nzc3Y2Y1MmFkZDJkMjQ3YzI2MTk2M2I5MmI1ZGNjMjkyOTNjMzgzYTI2Njc3YWIyNTIyNmI4YzZiNDY1Mg==</ds:DigestValue>
                                </ds:Reference>
                            </ds:SignedInfo>
                            <ds:SignatureValue>MEUCIB4eFTEkehWSeckGAWRpXyYDqsvmB1cdkUt1xRpyHmb4AiEAmt+ji+hUSNWhIUgQhB6v/Ayr4GgoPqPO2sRTRJvSCgE=</ds:SignatureValue>
                            <ds:KeyInfo>
                                <ds:X509Data>
                                    <ds:X509Certificate>MIID3jCCA4SgAwIBAgITEQAAOAPF90Ajs/xcXwABAAA4AzAKBggqhkjOPQQDAjBiMRUwEwYKCZImiZPyLGQBGRYFbG9jYWwxEzARBgoJkiaJk/IsZAEZFgNnb3YxFzAVBgoJkiaJk/IsZAEZFgdleHRnYXp0MRswGQYDVQQDExJQUlpFSU5WT0lDRVNDQTQtQ0EwHhcNMjQwMTExMDkxOTMwWhcNMjkwMTA5MDkxOTMwWjB1MQswCQYDVQQGEwJTQTEmMCQGA1UEChMdTWF4aW11bSBTcGVlZCBUZWNoIFN1cHBseSBMVEQxFjAUBgNVBAsTDVJpeWFkaCBCcmFuY2gxJjAkBgNVBAMTHVRTVC04ODY0MzExNDUtMzk5OTk5OTk5OTAwMDAzMFYwEAYHKoZIzj0CAQYFK4EEAAoDQgAEoWCKa0Sa9FIErTOv0uAkC1VIKXxU9nPpx2vlf4yhMejy8c02XJblDq7tPydo8mq0ahOMmNo8gwni7Xt1KT9UeKOCAgcwggIDMIGtBgNVHREEgaUwgaKkgZ8wgZwxOzA5BgNVBAQMMjEtVFNUfDItVFNUfDMtZWQyMmYxZDgtZTZhMi0xMTE4LTliNTgtZDlhOGYxMWU0NDVmMR8wHQYKCZImiZPyLGQBAQwPMzk5OTk5OTk5OTAwMDAzMQ0wCwYDVQQMDAQxMTAwMREwDwYDVQQaDAhSUlJEMjkyOTEaMBgGA1UEDwwRU3VwcGx5IGFjdGl2aXRpZXMwHQYDVR0OBBYEFEX+YvmmtnYoDf9BGbKo7ocTKYK1MB8GA1UdIwQYMBaAFJvKqqLtmqwskIFzVvpP2PxT+9NnMHsGCCsGAQUFBwEBBG8wbTBrBggrBgEFBQcwAoZfaHR0cDovL2FpYTQuemF0Y2EuZ292LnNhL0NlcnRFbnJvbGwvUFJaRUludm9pY2VTQ0E0LmV4dGdhenQuZ292LmxvY2FsX1BSWkVJTlZPSUNFU0NBNC1DQSgxKS5jcnQwDgYDVR0PAQH/BAQDAgeAMDwGCSsGAQQBgjcVBwQvMC0GJSsGAQQBgjcVCIGGqB2E0PsShu2dJIfO+xnTwFVmh/qlZYXZhD4CAWQCARIwHQYDVR0lBBYwFAYIKwYBBQUHAwMGCCsGAQUFBwMCMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwMwCgYIKwYBBQUHAwIwCgYIKoZIzj0EAwIDSAAwRQIhALE/ichmnWXCUKUbca3yci8oqwaLvFdHVjQrveI9uqAbAiA9hC4M8jgMBADPSzmd2uiPJA6gKR3LE03U75eqbC/rXA==</ds:X509Certificate>
                                </ds:X509Data>
                            </ds:KeyInfo>
                            <ds:Object>
                                <xades:QualifyingProperties xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Target="signature">
                                    <xades:SignedProperties xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Id="xadesSignedProperties">
                                    <xades:SignedSignatureProperties>
                                        <xades:SigningTime>2024-10-15T13:37:27Z</xades:SigningTime>
                                        <xades:SigningCertificate>
                                            <xades:Cert>
                                                <xades:CertDigest>
                                                    <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                                    <ds:DigestValue>ZDMwMmI0MTE1NzVjOTU2NTk4YzVlODhhYmI0ODU2NDUyNTU2YTVhYjhhMDFmN2FjYjk1YTA2OWQ0NjY2MjQ4NQ==</ds:DigestValue>
                                                </xades:CertDigest>
                                                <xades:IssuerSerial>
                                                    <ds:X509IssuerName>CN=PRZEINVOICESCA4-CA, DC=extgazt, DC=gov, DC=local</ds:X509IssuerName>
                                                    <ds:X509SerialNumber>379112742831380471835263969587287663520528387</ds:X509SerialNumber>
                                                </xades:IssuerSerial>
                                            </xades:Cert>
                                        </xades:SigningCertificate>
                                    </xades:SignedSignatureProperties>
                                </xades:SignedProperties>
                                </xades:QualifyingProperties>
                            </ds:Object>
                        </ds:Signature>
                    </sac:SignatureInformation>
                </sig:UBLDocumentSignatures>
            </ext:ExtensionContent>
        </ext:UBLExtension>
    </ext:UBLExtensions>
    <cbc:ProfileID>reporting:1.0</cbc:ProfileID>
    <cbc:ID>EGS1-886431145-1</cbc:ID>
    <cbc:UUID>6f4d20e0-6bfe-4a80-9389-7dabe6620f12</cbc:UUID>
    <cbc:IssueDate>2024-09-09</cbc:IssueDate>
    <cbc:IssueTime>09:00:00</cbc:IssueTime>
    <cbc:InvoiceTypeCode name="0211010">388</cbc:InvoiceTypeCode>
    <cbc:DocumentCurrencyCode>SAR</cbc:DocumentCurrencyCode>
    <cbc:TaxCurrencyCode>SAR</cbc:TaxCurrencyCode>
    <cac:AdditionalDocumentReference>
        <cbc:ID>ICV</cbc:ID>
        <cbc:UUID>1</cbc:UUID>
    </cac:AdditionalDocumentReference>
    <cac:AdditionalDocumentReference>
        <cbc:ID>PIH</cbc:ID>
        <cac:Attachment>
            <cbc:EmbeddedDocumentBinaryObject mimeCode="text/plain">NWZlY2ViNjZmZmM4NmYzOGQ5NTI3ODZjNmQ2OTZjNzljMmRiYzIzOWRkNGU5MWI0NjcyOWQ3M2EyN2ZiNTdlOQ==</cbc:EmbeddedDocumentBinaryObject>
        </cac:Attachment>
    </cac:AdditionalDocumentReference>
    <cac:AdditionalDocumentReference>
        <cbc:ID>QR</cbc:ID>
        <cac:Attachment>
            <cbc:EmbeddedDocumentBinaryObject mimeCode="text/plain">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</cbc:EmbeddedDocumentBinaryObject>
        </cac:Attachment>
    </cac:AdditionalDocumentReference>
    <cac:Signature>
      <cbc:ID>urn:oasis:names:specification:ubl:signature:Invoice</cbc:ID>
      <cbc:SignatureMethod>urn:oasis:names:specification:ubl:dsig:enveloped:xades</cbc:SignatureMethod>
    </cac:Signature>
    <cac:AccountingSupplierParty>
        <cac:Party>
            <cac:PartyIdentification>
                <cbc:ID schemeID="CRN">454634645645654</cbc:ID>
            </cac:PartyIdentification>
            <cac:PostalAddress>
                <cbc:StreetName>King Fahahd st</cbc:StreetName>
                <cbc:BuildingNumber>0000</cbc:BuildingNumber>
                <cbc:PlotIdentification>0000</cbc:PlotIdentification>
                <cbc:CitySubdivisionName>West</cbc:CitySubdivisionName>
                <cbc:CityName>Khobar</cbc:CityName>
                <cbc:PostalZone>31952</cbc:PostalZone>
                <cac:Country>
                    <cbc:IdentificationCode>SA</cbc:IdentificationCode>
                </cac:Country>
            </cac:PostalAddress>
            <cac:PartyTaxScheme>
                <cbc:CompanyID>399999999900003</cbc:CompanyID>
                <cac:TaxScheme>
                    <cbc:ID>VAT</cbc:ID>
                </cac:TaxScheme>
            </cac:PartyTaxScheme>
            <cac:PartyLegalEntity>
                <cbc:RegistrationName>Wesam Alzahir</cbc:RegistrationName>
            </cac:PartyLegalEntity>
        </cac:Party>
    </cac:AccountingSupplierParty>
    <cac:AccountingCustomerParty>
        <cac:Party>
         <cac:PartyLegalEntity>
             <cbc:RegistrationName>Wesam Alzahir</cbc:RegistrationName>
          </cac:PartyLegalEntity>
        </cac:Party>
    </cac:AccountingCustomerParty>
    <cac:TaxTotal>
        <cbc:TaxAmount currencyID="SAR">10.00</cbc:TaxAmount>
        <cac:TaxSubtotal>
            <cbc:TaxableAmount currencyID="SAR">50.00</cbc:TaxableAmount>
            <cbc:TaxAmount currencyID="SAR">7.50</cbc:TaxAmount>
            <cac:TaxCategory>
                <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5305">S</cbc:ID>
                <cbc:Percent>15.00</cbc:Percent>
                <cac:TaxScheme>
                    <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5153">VAT</cbc:ID>
                </cac:TaxScheme>
            </cac:TaxCategory>
        </cac:TaxSubtotal>
        <cac:TaxSubtotal>
            <cbc:TaxableAmount currencyID="SAR">50.00</cbc:TaxableAmount>
            <cbc:TaxAmount currencyID="SAR">2.50</cbc:TaxAmount>
            <cac:TaxCategory>
                <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5305">S</cbc:ID>
                <cbc:Percent>5.00</cbc:Percent>
                <cac:TaxScheme>
                    <cbc:ID schemeAgencyID="6" schemeID="UN/ECE 5153">VAT</cbc:ID>
                </cac:TaxScheme>
            </cac:TaxCategory>
        </cac:TaxSubtotal>
    </cac:TaxTotal>
    <cac:TaxTotal>
        <cbc:TaxAmount currencyID="SAR">10.00</cbc:TaxAmount>
    </cac:TaxTotal>
    <cac:LegalMonetaryTotal>
        <cbc:LineExtensionAmount currencyID="SAR">50.00</cbc:LineExtensionAmount>
        <cbc:TaxExclusiveAmount currencyID="SAR">50.00</cbc:TaxExclusiveAmount>
        <cbc:TaxInclusiveAmount currencyID="SAR">60.00</cbc:TaxInclusiveAmount>
        <cbc:AllowanceTotalAmount currencyID="SAR">0</cbc:AllowanceTotalAmount>
        <cbc:PrepaidAmount currencyID="SAR">0</cbc:PrepaidAmount>
        <cbc:PayableAmount currencyID="SAR">60.00</cbc:PayableAmount>
    </cac:LegalMonetaryTotal>
    <cac:InvoiceLine>
        <cbc:ID>1</cbc:ID>
        <cbc:InvoicedQuantity unitCode="PCE">5</cbc:InvoicedQuantity>
        <cbc:LineExtensionAmount currencyID="SAR">50.00</cbc:LineExtensionAmount>
        <cac:TaxTotal>
            <cbc:TaxAmount currencyID="SAR">10.00</cbc:TaxAmount>
            <cbc:RoundingAmount currencyID="SAR">60.00</cbc:RoundingAmount>
        </cac:TaxTotal>
        <cac:Item>
            <cbc:Name>TEST NAME 1</cbc:Name>
            <cac:ClassifiedTaxCategory>
                <cbc:ID>S</cbc:ID>
                <cbc:Percent>15.00</cbc:Percent>
                <cac:TaxScheme>
                    <cbc:ID>VAT</cbc:ID>
                </cac:TaxScheme>
            </cac:ClassifiedTaxCategory>
            <cac:ClassifiedTaxCategory>
                <cbc:ID>S</cbc:ID>
                <cbc:Percent>5.00</cbc:Percent>
                <cac:TaxScheme>
                    <cbc:ID>VAT</cbc:ID>
                </cac:TaxScheme>
            </cac:ClassifiedTaxCategory>
        </cac:Item>
        <cac:Price>
            <cbc:PriceAmount currencyID="SAR">10</cbc:PriceAmount>
        </cac:Price>
    </cac:InvoiceLine>
</Invoice>

```

---

<div class="post-metadata">

**Author:** ![hassan.fayyaz](https://avatars.discourse-cdn.com/v4/letter/h/94ad74/32.png) [@hassan.fayyaz](https://zatca1.discourse.group/u/hassan.fayyaz)\
**Post date:** [October 15, 2024, 2:09pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/2 "2024-10-15T14:09:06Z")

</div>

@idaoud Do I have to register on the Fatoora portal, and then use simulation or production OTP? Will it work fine?

> [@Issue with Invalid Signed Properties Hashing in Simulator Mode (SignedProperties with id='xadesSignedProperties')](https://zatca1.discourse.group/t/issue-with-invalid-signed-properties-hashing-in-simulator-mode-signedproperties-with-id-xadessignedproperties/3631/3):
>
> Dear @mubashirpalakkan Thanks for reaching out, Please note that the Data in sandbox portal it’s a dummy data, and it’s only to clarification the steps that you need to follow to ensure a successfully onboarding, To ensure successfully onboarding you can do it through production or simulation environments only, during the fatoora portal, or fatoora simulation portal. Knowing that you will need your RM access to the fatoora portal to be able to get the OTP even for simulation or production po…

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [October 15, 2024, 2:31pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/3 "2024-10-15T14:31:46Z")

</div>

Dear @hassan.fayyaz

Thanks for reaching out,

Correct, to ensure a successfully onboarding you need to do it on simulation or production env.

After login to fatoora portal (for production), or fatoora simulation portal (for simulation) you will find box for (APIs documentation) when you click on it the APIs will be in ordered (compliance API to get the CCSID, Compliance Checks API to send test invoices for security, PCSID API to get production certificate rather for production or simulation env, Clearance API to send your actual slandered invoices, and Reporting API to send your actual simplified invoices).

If you faced any further concerns, please do not hesitate to reach out with our support team via email, to schedule meeting if needed.

SP email: [sp\_support@zatca.gov.sa](mailto:sp_support@zatca.gov.sa)

Thanks,  
Ibrahem Daoud.

---

<div class="post-metadata">

**Author:** ![eCloud](https://dub1.discourse-cdn.com/flex013/user_avatar/zatca1.discourse.group/ecloud/32/629_2.png) [@eCloud](https://zatca1.discourse.group/u/eCloud)\
**Post date:** [October 15, 2024, 4:45pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/4 "2024-10-15T16:45:29Z")

</div>

> [@hassan.fayyaz](#):
>
> The error appears under the `CERTIFICATE_ERRORS` category with a message indicating an issue with the “Invalid signed properties hashing” related to the `SignedProperties` element.

Maybe this

 ![image](https://europe1.discourse-cdn.com/flex013/uploads/zatca1/original/1X/a34d324bcfc345f318d6e16ba27d64ddef521d30.png)

---

<div class="post-metadata">

**Author:** ![AhmedTarekYA](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@AhmedTarekYA](https://zatca1.discourse.group/u/AhmedTarekYA)\
**Post date:** [October 27, 2024, 7:39am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/5 "2024-10-27T07:39:57Z")

</div>

@hassan.fayyaz i’m using the same code … all is ok in test mode but in the simulation i get this error Invalid signed properties hashing, SignedProperties with id=‘xadesSignedProperties’ , can you help me ?

---

<div class="post-metadata">

**Author:** ![hassan.fayyaz](https://avatars.discourse-cdn.com/v4/letter/h/94ad74/32.png) [@hassan.fayyaz](https://zatca1.discourse.group/u/hassan.fayyaz)\
**Post date:** [October 28, 2024, 6:27am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/6 "2024-10-28T06:27:15Z")

</div>

I am unsure about the simulation. I was waiting for my managers to provide the Footra portal credentials so I can test it in the simulation.

---

<div class="post-metadata">

**Author:** ![AhmedTarekYA](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@AhmedTarekYA](https://zatca1.discourse.group/u/AhmedTarekYA)\
**Post date:** [October 28, 2024, 6:29am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/7 "2024-10-28T06:29:15Z")

</div>

unfortunately it doesn’t work in simulation nor production mode

---

<div class="post-metadata">

**Author:** ![hassan.fayyaz](https://avatars.discourse-cdn.com/v4/letter/h/94ad74/32.png) [@hassan.fayyaz](https://zatca1.discourse.group/u/hassan.fayyaz)\
**Post date:** [October 28, 2024, 6:33am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/8 "2024-10-28T06:33:15Z")

</div>

I will update you if I encounter the same issue in simulation or production. If you find any solution, please share it here, as it will be helpful for others.

---

<div class="post-metadata">

**Author:** ![mubashirpalakkan](https://avatars.discourse-cdn.com/v4/letter/m/41988e/32.png) [@mubashirpalakkan](https://zatca1.discourse.group/u/mubashirpalakkan)\
**Post date:** [November 2, 2024, 2:24pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/9 "2024-11-02T14:24:21Z")

</div>

also i am stuck on here

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [November 3, 2024, 2:27pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/10 "2024-11-03T14:27:16Z")

</div>

Dear @mubashirpalakkan

Can I kindly ask you to collaborate more, to ensure comprehensive support as usual.

Thanks,  
Ibrahem Daoud.

---

<div class="post-metadata">

**Author:** ![mubashirpalakkan](https://avatars.discourse-cdn.com/v4/letter/m/41988e/32.png) [@mubashirpalakkan](https://zatca1.discourse.group/u/mubashirpalakkan)\
**Post date:** [November 4, 2024, 8:26am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/11 "2024-11-04T08:26:16Z")

</div>

I’m facing an issue in the simulation phase where I get an error indicating an invalid signed `SignedProperties` with `id='xadesSignedProperties'`. I’ve tried submitting the CSR with the private key in the simulator portal, and I notice that the issuer name is showing as `CN=eInvoicing`. However, I expected the issuer name to be `CN=PRZEINVOICESCA4-CA, DC=extgazt, DC=gov, DC=local`. This mismatch could be causing the issue, but I’m not certain and am currently stuck.

Below is the CSR generation code I’m using for the simulator:

# ------------------------------------------------------------------

# Default section for “req” command options

# ------------------------------------------------------------------

[req]

# Password for reading the existing private key file

# input\_password = SET\_PRIVATE\_KEY\_PASS

# Prompt for DN field values and CSR attributes in ASCII

prompt = no  
utf8 = no

# Section pointer for DN field options

distinguished\_name = my\_req\_dn\_prompt

# Extensions

req\_extensions = v3\_req

[v3\_req]

# basicConstraints = CA:FALSE

# keyUsage = digitalSignature, keyEncipherment

# Production or Testing Template (TSTZATCA-Code-Signing - ZATCA-Code-Signing)

1.3.6.1.4.1.311.20.2 = ASN1:PRINTABLESTRING:PREZATCA-Code-Signing  
subjectAltName = dirName:dir\_sect

[dir\_sect]

# EGS Serial number (1-SolutionName|2-ModelOrVersion|3-serialNumber)

SN = 1-Behighcare|2-1.0|3-312000000000003

# VAT Registration number of Taxpayer (Organization identifier [15 digits, starts with 3 and ends with 3])

UID = 312000000000003

# Invoice type (TSCZ)(1 = supported, 0 = not supported) (Tax, Simplified, future use, future use)

title = 0100

# Location (branch address or website)

registeredAddress = —company address hidden—

# Industry (industry sector name)

businessCategory = Health

# ------------------------------------------------------------------

# Section for prompting DN field values to create “subject”

# ------------------------------------------------------------------

[my\_req\_dn\_prompt]

# Common name (EGS Taxpayer PROVIDED ID [FREE TEXT])

commonName = —company name hidden—

# Organization Unit (Branch name)

organizationalUnitName = Dammam

# Organization name (Taxpayer name)

organizationName = —company name hidden—

# ISO2 country code (required, default is US)

countryName = SA

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [November 4, 2024, 8:39am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/12 "2024-11-04T08:39:29Z")

</div>

Dear @mubashirpalakkan

Thanks for reaching out,

Can I kindly ask you to share your concerns via email to our SP support email, you will find the mail below, Kindly share your full concerns ensure to provide the following:

1- Your config file, .cnf file.  
2- Your CSR.  
3- Private key that generated with the CSR.

One more thing please, are you using our SDK tool? If yes, what is the version?

SP email: [sp\_support@zatca.gov.sa](mailto:sp_support@zatca.gov.sa)

Thanks,  
Ibrahem Daoud.

---

<div class="post-metadata">

**Author:** ![eCloud](https://dub1.discourse-cdn.com/flex013/user_avatar/zatca1.discourse.group/ecloud/32/629_2.png) [@eCloud](https://zatca1.discourse.group/u/eCloud)\
**Post date:** [November 4, 2024, 1:04pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/13 "2024-11-04T13:04:51Z")

</div>

> [@mubashirpalakkan](#):
>
> and I notice that the issuer name is showing as `CN=eInvoicing`. However, I expected the issuer name to be `CN=PRZEINVOICESCA4-CA, DC=extgazt, DC=gov, DC=local`.

`<ds:X509IssuerName>CN=eInvoicing</ds:X509IssuerName>`  
This means Invoice is signed with a **Certificate from Compliance CSID**.  
This certificate can only be used on Compliance Check api.

`<ds:X509IssuerName>CN=PRZEINVOICESCA4-CA, DC=extgazt, DC=gov, DC=local</ds:X509IssuerName>`  
This means Invoice is signed with a **Certificate from Production CSID**.  
This certificate should be used on Clearance and Reporting Api.

---

<div class="post-metadata">

**Author:** ![AhmedTarekYA](https://avatars.discourse-cdn.com/v4/letter/a/9fc29f/32.png) [@AhmedTarekYA](https://zatca1.discourse.group/u/AhmedTarekYA)\
**Post date:** [November 6, 2024, 7:24am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/14 "2024-11-06T07:24:10Z")

</div>

did it work with you ? i was facing the same problem and now i’m using new way

---

<div class="post-metadata">

**Author:** ![mubashirpalakkan](https://avatars.discourse-cdn.com/v4/letter/m/41988e/32.png) [@mubashirpalakkan](https://zatca1.discourse.group/u/mubashirpalakkan)\
**Post date:** [November 6, 2024, 12:00pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/15 "2024-11-06T12:00:39Z")

</div>

Not yet …i sent email but not get reply from support , i am stuck… i tried lot of stage

---

<div class="post-metadata">

**Author:** ![mubashirpalakkan](https://avatars.discourse-cdn.com/v4/letter/m/41988e/32.png) [@mubashirpalakkan](https://zatca1.discourse.group/u/mubashirpalakkan)\
**Post date:** [November 27, 2024, 3:14pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/16 "2024-11-27T15:14:36Z")

</div>

i fixed this issue from my codes

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [November 28, 2024, 7:17am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/17 "2024-11-28T07:17:23Z")

</div>

Morning @mubashirpalakkan

Thanks for reaching out,

Can I kindly ask you to share the email that you sent your concerns from?

Thanks,  
Ibrahem Daoud.

---

<div class="post-metadata">

**Author:** ![MosaabBleik](https://avatars.discourse-cdn.com/v4/letter/m/65b543/32.png) [@MosaabBleik](https://zatca1.discourse.group/u/MosaabBleik)\
**Post date:** [December 21, 2024, 11:26am UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/18 "2024-12-21T11:26:14Z")

</div>

please can you tell us what was the issue and how you solved it?

---

<div class="post-metadata">

**Author:** ![mubashirpalakkan](https://avatars.discourse-cdn.com/v4/letter/m/41988e/32.png) [@mubashirpalakkan](https://zatca1.discourse.group/u/mubashirpalakkan)\
**Post date:** [December 21, 2024, 2:28pm UTC](https://zatca1.discourse.group/t/reporting-api-error-invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/3667/19 "2024-12-21T14:28:51Z")

</div>

contact by [pro.mubashir@outlook.com](mailto:pro.mubashir@outlook.com)