Certificate guide
You don't need a terminal, OpenSSL, or any technical tools. Vat-app generates your certificate automatically — you just need two codes from a Vero email.
What is a certificate and why is it needed?
Verohallinto requires a production certificate to prove that software filing on your behalf is authorised. Think of it as a digital identity card for Vat-app, issued by the Tax Administration specifically for your company.
The certificate is valid for two years and is stored encrypted in Vat-app's database. You'll receive a reminder before it expires.
How to get one
1
Complete Suomi.fi authorisation first
This must be done before applying for a certificate. Suomi.fi authorisation gives Naapurin Nettishamaani (3010501-4) the right to file on your behalf — the certificate portal checks for this before issuing anything.
2
Go to varmennepalvelu.vero.fi
Click Log in under Production certificates and authenticate with your bank credentials or mobiilivarmennus.
Open varmennepalvelu.vero.fi ↗
3
Request a new certificate
Click Request a new certificate. Select Data provider (Web service). Add a description like "Vat-app", fill in your contact details, and submit.
4
Wait for Vero's email
Within a few minutes, Vero sends an email containing a Siirtotunnus (TransferID) and a Kertakäyttösalasana (TransferPassword). These are valid for 14 days.
5
Paste the codes into Vat-app
Return to the signup flow and paste both codes into the certificate step. Vat-app generates your private key and certificate automatically, retrieves it from Vero, and stores everything encrypted. The whole process takes about 50 seconds.
Frequently asked questions
How long is the certificate valid?
Two years from the date it was issued. You'll receive a reminder before it expires — renewal is the same process.
Is my private key safe?
Yes. Vat-app generates it server-side and immediately encrypts it with a key unique to your company. It is never stored in plaintext and never leaves the encrypted database. See the license & terms page for more detail on how we store your data.
What if the email doesn't arrive?
Check your spam folder first. If it's not there after 15 minutes, the contact details on your certificate application may have been incorrect — submit a new request with the correct email address.
Can I have multiple certificates?
Yes — Vero allows multiple certificates per company. If you need to re-onboard for any reason, request a new one and paste the new codes.
What happens when it expires?
Filing will stop until a new certificate is in place. We'll remind you well in advance.