Delete and extend SUA certificate

In the Payroll Setup - Domain setup - Swissdec Setup - General, a separate certificate must be stored for all clients.

 

When ordering the certificate, the information in the company data is sent along with it. Therefore, the information on the ELM insurance profile must match the company data. If there are any discrepancies, this information must not simply be overwritten. Contact the insurance company and change the information there. It may be necessary to contact the FSO so that the data in the UID register can be corrected.

 

If all the information is stored correctly, the following must be set up in the Swissdec setup menu:

-        Enter KLE & SUA URL Distributor => Swissdec Setup => Restore default Values KLE & SUA

-        Renew certificates => General – Certificates – Process - Update certificates => KLELIVECLIENT is added

-        Get SUA UID certificate (SUA) => Swissdec settings – General – Get SUA UID certificate (SUA) => Password dispatch is triggered, term        1-2 days.

 => new certificate SUAxxxx was provided in Certificates with assigned client name for later entry of the password

 

 

After receiving the password, proceed as follows:

Acquire SUA password with hyphen => Swissdec Setup - General Certificates (select password to retrieve certificate on the letter).

Get UID certificate (SUA) again => General

Successful process is confirmed => column Certificates is checked.

 

The ordering process description is very technical and serves for information purposes only. It describes the processes behind the order.

 

With the Get UID certificate (SUA) feature, the client to be set up sends a certificate template to Swissdec with our PrivateKey. Swissdec accepts it and records your PrivateKey. The unsigned certificate is then sent back and saved in the certificate table. A password is emailed at the same time. As soon as the password is entered, the certificate template can be signed with Swissdec.

The password must be entered with a hyphen and resent using the Get UID certificate feature.  The certifi-cate is sent back to Swissdec, with the password. Only now does the signed certificate template return. A correct UID PKCS12 certificate is created from it. Only from this point on can the certificate be used for communication with ELM V5.0, KLE and SUA.

 

The SUA certificate is valid for one year. SwissSalary notifies early enough about its expiration and that it must be renewed. If a new case is reported during this time, it is automatically extended by one year. If a SWS KLE management task queue is set up, it prevents the certificate from expiring.

 

IMPORTANT: If the passwords are set up in multiple clients, the password must always be stored in the relevant client via the Swissdec settings.

 

Renewal can be carried out a maximum of twice. A new certificate must be applied for after three years at the latest.

The details of a deputy can be stored in the system as additional information. As a rule, this is a fiduciary office. The delegate (representative) is a third party appointed by the company (e.g. trustee, broker, etc.) who transmits the event report on behalf of the company using a Swissdec-certified ERP system and, depending on the order and agreement with the company, acts as the contact for all matters relating to the event.