Electronic Reporting to FINTRAC: Batch

Obtain a public key infrastructure (PKI) certificate and download the batch transmission software.

Batch reporting requires a PKI certificate. This certificate acts as a digital signature that is attached to each batch - enabling FINTRAC to authenticate the identity of the sender. Entities have to apply for a PKI certificate from FINTRAC.

How to apply for PKI

There are four steps in applying to FINTRAC for a PKI certificate.

Step 1: Complete the FINTRAC PKI subscriber agreement

Step 2: Send the completed agreement to FINTRAC

Step 3: Await application approval

Step 4: Create and download a PKI certificate and download the batch transmission software.

If you need to install the batch transmission software on other machines, you have to go through the subsequent installation process.

Step 1: Complete the FINTRAC PKI subscriber agreement

To meet the minimum requirements for issuing certificates, FINTRAC must take certain steps to authenticate the identity of those applying for a PKI certificate. FINTRAC must establish that:

  • The organization in question does exist.
    The PKI certificate policy requires an organization to submit documents proving that the organization exists - typically this involves faxing or mailing a photocopy of the incorporation documents.
  • The person requesting a PKI certificate has the authority within that organization to make such a request.
    The client responsible individual (CRI) - a signing officer for the organization - must demonstrate that they have the legal authority to sign agreements on behalf of that organization. A copy of board minutes indicating the person is a signing officer is sufficient. 
  • The individual receiving the certificate has the authority to do so.
    The CRI must identify and authenticate the designated certificate holder (DCH) as the recipient of the certificate. The application must be signed by the CRI, indicating that the DCH is authorized to receive a certificate in the name of the organization.

Prior to using the FINTRAC PKI certificate, the participant must be fully aware of its obligations as outlined in the FINTRAC Certificate Policy.

Step 2: Send the completed subscriber agreement to FINTRAC

Fax or mail the agreement, completed and signed by the CRI, to FINTRAC's registration authority.  Attach the required documents mentioned in step one above (such as the incorporation documents and a document confirming that the CRI has the authority to sign on behalf of the organization).

Mailing address
FINTRAC
24th floor, 234 Laurier Avenue West
Ottawa, ON
K1P 1H7
CANADA
ATTN: Registration Authority

The fax number is
1-866-288-6488.

Step 3: Await application approval

FINTRAC's registration authority will provide confirmation of the subscriber's application within five business days. If the application is accepted, a PKI certificate number will be provided to the CRI by e-mail. A temporary personal identification number (PIN) as well as a Web site address will be provided to the DCH by email. With that information, the DCH will be able to create and download their PKI certificate, and download the batch transmission software. The temporary PIN will expire seven business days from the date it is provided to the DCH.

If the application is denied, FINTRAC will contact the subscriber to explain why.

Step 4: Create and download a PKI certificate and download the batch transmission software

The DCH will have to access the PKI User Creation screen. Enter the PKI certificate number and temporary PIN provided by FINTRAC. Create a PKI password and shared secret, download the FINTRAC PKI certificate, and download the batch transmission software.

The temporary PIN will expire seven business days from the date it is provided to the DCH. If more time is needed, contact FINTRAC's registration authority by calling 1-866-346-8722 to request an extension. In this case, a new temporary PIN will be issued with another seven business days to complete the PKI certificate process.