This is the third part of the MyGovID overview. In the first part we looked at the process of applying for MyGovID and linking your ABN to it. In the second part we became familiar with the Relationship Access Manager (RAM) and giving access to other people within your organisation.
In this third part we are going to look at the machine credentials. This is the way third party software communicates with the ATO. This part is most relevant to the tax accountants and advisers rather than businesses. So if you use MYOB AccountRight, Xero, QuickBooks, or similar software to manage your day to day activities, you can skip this and wait for the fourth article. However, if you are using advanced versions of MYOB, Sage, etc to perform lodgements via SBR, this article is applicable to you. Please note, the machine credentials are NOT required to process your everyday STP (single touch payroll) reporting.
A little bit of information about the ATO machine credentials. This works very similarly to AUSkeys. There is a keystore XML file with the security certificate and a browser extension which needs to be installed on the computer. It is even installed in almost the same location as the AUSkey keystore. The difference with the AUSkey is that this machine credentials is used ONLY by your practice management software to communicate with the ATO to perform SBR lodgements.
As usual, we will start with the prerequisites.
- You have your mobile phone with MyGovID opened.
- You have enough permissions to access the machine credentials section in the authorisation manager.
- On the computer you can use Chrome or Firefox. Other browsers (Internet Explorer [IE], Edge are NOT supported).
In addition, we need to download and install the Chrome / Firefox extension for machine credentials. This can be downloaded from the ATO website. There are versions available for Windows, MAC and even Linux operating systems.
Once you have all ready, you can proceed to the authorisation manager RAM:
- Once you install the extension, restart your browser and make sure that the extension is enabled.
- Navigate to the authorisation manager and logon with your MyGovID application.
- Go to the entity you would like to get the machine credentials issued.
- On the top of the page click on “manage credentials”
- If there are any problems with the extension, you will be asked to install it again.
- If all OK, click on “Create machine credential” button
- You will be asked to make a password – it needs to be at least 10 characters long with number upper and lowercase letters. Please remember the password as it is not possible to reset it. In case you forget your password, you would need to create and install new machine credentials.
- Under credentials name put the name of the computer or a user who is going to to lodgements.
- Accept terms and conditions and click on Download.
- This will install files into your user directory on the computer: C:/Users/username/AppData/Roaming/ATOMAS/keystore-new.xml
You would need to repeat the above steps on every computer which would be doing SBR lodgments.
The next step really depends on your practice management software. You need to show the software, the path and the password for the new keystore.
A few notes:
- You can nominate other users to be machine credential administrators, so they can install it themselves.
- MYOB Insolvency application currently does NOT support machine credentials yet and you would need to continue to use AUSkey. MYOB promised to implement it in the next release which is due in a couple weeks’ time.
- Core IPS (insolvency package) and MYOB AE do not require it as SBR is being processed by Core and MYOB respectively.
If you have any technical questions you can contact Yuri by phone on 07 3266 7701 or 0406 145 901, or by email at firstname.lastname@example.org.
Or contact the ATO helpline for AusKey and MyGov ID on 1300 287 539.
Date of Issue: 9 March 2020 Author: Yuri Sherbakov
Disclaimer: The contents herein are intended for general information only and should not be construed as legal or accounting advice. Vicca Chartered Accountants Brisbane bears no responsibility for any loss that might occur from reliance on information contained in this publication. Please do not reproduce, transmit or distribute the contents herein in any form without prior permission from Vicca Chartered Accountants, Taxation Accountants Brisbane Australia.