How to renew existing CSIDs in KSA e-Invoicing?

Zakat, Tax and Customs Authority (ZATCA) has published the complaint e-invoice solution features. A cryptographic stamp is one of them. It is created to ensure the authenticity of origin and integrity of the electronic invoices and related Credit and Debit Notes (CDNs). You need to renew the CSID once every five years, and this article explains how to renew the existing CSID under KSA e-invoicing.

The process for renewing a CSID is similar to obtaining CSID for the first time. However, it involves the revocation of the existing CSID and issuing a new one. There are two ways in which you can renew an existing CSID. Firstly, you have to enter the OTP manually, whereas, in a second way, the system will automatically read the OTP.

Latest Updates

Steps to renew existing CSID for one or more EGS units – Manual OTP Entry

Step 1: You have to access the Fatoora portal through a dedicated website.

Step 2: You have to log in to ERAD.

Step 3: You will be redirected to the Fatoora portal.

Step 4: You have to enter the number of OTP codes you want to generate. You can decide this based on the no. of devices you want to onboard.

Step 5: Fatoora portal display the OTP codes.

Step 6: You must enter the OTP codes in EGS units or devices within one hour from the generation time.

Step 7: Your device will send a request for cryptographic stamp identifiers to the e-invoice platform and OTP from the EGS unit/device.

Step 8: Your EGS units/devices undergo the necessary compliance checks.

Step 9: e-Invoicing platform requests the ZATCA CA to issue new cryptographic stamp identifiers and revocate existing cryptographic stamp identifiers.

Step 10: ZATCA CA revokes the existing cryptographic stamp identifiers and generates new ones for each EGS unit/device.

Step 11: Your EGS units/devices receive a new cryptographic stamp identifier.

Steps to renew existing CSID for one or more EGS units – Automatic OTP Entry 

Step 1: You have to access the Fatoora portal through a dedicated website.

Step 2: You will be logged in to ERAD.

Step 3: You will be redirected to the Fatoora portal.

Step 4: The Fatoora portal generates and displays the OTP.

Step 5: OTP code will be automatically entered into your EGS unit/device.

Step 6: Your devices will send a request for cryptographic stamp identifiers to the e-invoice platform and OTP from the EGS unit/device.

Step 7: Your solution unit/device undergoes the necessary compliance checks.

Step 8: e-Invoicing platform requests the ZATCA CA to issue a new cryptographic stamp identifier and revocate the existing cryptographic stamp identifier.

Step 10: ZATCA CA revokes the existing cryptographic stamp and generates a new cryptographic stamp identifier for each EGS unit/device.

Step 11: Your EGS unit/device receives a new cryptographic stamp identifier.