You need a ROS digital certificate to do your payroll in Ireland if you are submitting payroll information to the Revenue Commissioners  electronically through the Revenue Online Service (ROS).

Here’s why:

Legal Requirement

Since the introduction of PAYE Modernisation (January 2019), Irish employers are required to report payroll information to Revenue in “real time”—every time employees are paid. All this reporting must be done online via ROS.

Secure Access

A ROS digital certificate provides secure, authenticated access to Revenue’s online services. It ensures that only authorised individuals can view or submit your company’s payroll reports, safeguarding sensitive employee and financial data.

File Submissions

Payroll submissions (Payroll Submission Requests (PSRs), Revenue Payroll Notifications (RPNs), etc.) must be filed through ROS by law. Your digital certificate acts as your electronic signature on these submissions.

Certificate Expiry & Renewal

BrightPay Cloud clearly alerts you when a ROS digital certificate has expired.  

The expiry is highlighted both when uploading a certificate and when a certificate already on file has expired, making it easier to identify and renew before your next Revenue submission is due.

Keeping your certificate in date is essential – once it expires, ROS submissions from BrightPay will fail until a valid certificate is uploaded.

What Does the Digital Certificate Do?

Verifies your identity to Revenue

Encrypts your data to protect it in transit

Enables you to submit, amend, or view payroll data

Required to use payroll software connected to ROS

Who needs a Digital Certificate?

Employers running payroll and reporting directly to Revenue

Payroll agents/accountants doing it on behalf of clients

Anyone needing access to tax clearance, P30 returns, P60s, etc.

Summary

You need a ROS digital certificate because Irish payroll process **is now fully online** and **must be authenticated and protected**. Without it, you cannot legally or securely submit payroll reports to Revenue.

Useful links

Revenue: ROS Digital Certificates explained here. 

Revenue: PAYE Modernisation here. 

The ROS certificate does not need to be re-uploaded at the start of each tax year.

In BrightPay Ireland, once the ROS digital certificate has been imported into the software, it is stored and remains valid until:

• The certificate itself expires, or
• It is manually removed or changed.

You only need to upload a new ROS cert if:

• Revenue has issued you a new certificate,
• The old cert has expired or been revoked, or
• You’re changing to a different ROS login (e.g. new employer registration / agent cert).

FAQs

Q. I need to be set up as a sub-user on ROS / I need to apply for a ROS Access Number. Can you do this for me?

A. We’re not able to set this up on your behalf. You’ll need to contact Revenue directly, as they are the only ones who can create sub-users and issue ROS Access Numbers.

Q. What does the 'certificate has no permission' Revenue error code mean when retrieving RPNs, and how do I fix it?

A. This error means that the ROS certificate does not have the appropriate permissions to retrieve RPNs for this employer. Check that this is the most up to date cert - you may want to go to ROS and download the latest digital certificate and upload it into BrightPay and try again. If the error persists, check on ROS that the certificate has permissions to retrieve RPNs / submit PSRs etc. Also check when adding the certificate that you are choosing the correct user type on BrightPay - agent or employer. If everything looks correct and you have uploaded a brand new certificate into BrightPay but Revenue are still giving you this error message - you will need to contact Revenue directly for more advice.

Q. How do I fix an 'invalid date header' error when running RPNs for the first time on a new computer?

A. This error is usually in relation to the date and time format on the PC. Please make sure the date and time format on your PC is set to Dublin, Edinburgh, Lisbon, London and Regional settings are set to Ireland and English (Ireland) and Calendar is set to Gregorian Calendar. You will find these under Settings on your PC.