← Back to blog

Managing Digital Certificates for LHDN Invoice Submission

Digital certificates are required for signing and submitting e-invoices to MyInvois. Learn how to upload, track expiry, and avoid submission failures.

E-invoice submission to MyInvois requires a digital certificate issued by a recognized Certificate Authority. This certificate is used to sign your invoices, proving they came from your organization and haven't been tampered with.

Certificate lifecycle

Digital certificates have a lifecycle: they're issued, they're active, and they expire. Managing this lifecycle is critical because an expired certificate means you can't submit invoices until you renew it.

  • Upload: Upload your certificate file (typically .p12 or .pfx) with its password. The system stores it securely.
  • Track expiry: The system monitors your certificate's expiration date and warns you well in advance.
  • Renewal: When you receive a renewed certificate, upload it and it takes over from the expiring one.
Issued 2024-05-01 Warning 60 days out Expires 2026-05-01 Failing Active · signing & submitting OK ~22 months of normal operation Renewal window Submissions reject First warning email
A typical two-year certificate lifecycle. The first warning fires 60 days before expiry — long enough to chase down a renewed certificate from the CA, upload it, and let the old one age out without a single failed submission.

What happens when it expires

An expired certificate means rejected submissions. Every invoice you try to submit will fail. If you don't notice for a few days, you'll have a backlog of unsubmitted invoices and potentially non-compliant with LHDN's submission timeline requirements.

This is why expiry tracking matters more than the initial upload. The upload is a one-time event. Expiry is a recurring risk that needs automated monitoring.