Manage Tokens and Certificates

Many banks require a bank certificate or token to authenticate the web service connection between Business Central and the bank in order to use direct communication. In case your bank requires a certificate or token for direct communication, you must authenticate the connection from Payment Management using the assisted Bank Account Setup guide.

If you already have authenticated the connection, you can share the authentication access key between companies or banks without having to export the certificate or token from Business Central.

To share authentication access keys between companies

  1. Use the Search for page or report icon and search for Banks, and then select the related link.

  2. In the Banks overview, choose the bank from which you want to share an authentication key.


    You can share an authentication key from any bank or company that shares the authentication.

  3. On the action bar, select Connection > Authentication Access Key.

  4. In the Authentication Access Key overview, on the action bar, select either Related Banks or Related Companies. Depending on your selection, this will open a list of banks or companies that share the authentication.

  5. Add the relevant banks or companies to the list.

  6. When you add a new company, run the assisted Bank Account Setup guide for the companies that you added. In addition, please double check the following:

    • For all the banks set up in the newly added company, make sure the information specified on the bank card (in the Communication Agreement FastTab) is the same as the information specified for the banks in the company from where you shared the authentication.
    • If there are variations of the bank codes used across the companies that share the authentication, ensure that the bank codes on the Bank Authentication Access Key Setup page of the newly added company, are also added to the other companies that share the authentication.

To renew an authentication

Bank certificates and tokens expire after a certain period depending on your bank. 3 months before the authentication expires, Payment Management sends a request to the bank regarding the renewal of the authentication. This all happens in the background and the authentication will then automatically be renewed.

To delete an authentication

Before deleting an authentication you should control if the authentication is shared between companies or banks, as the authentication will be deleted in all companies and banks to which the authentication is shared. If you just wish to remove the authentication for a single company or bank, see the section To manage authentications shared between companies.

  1. Use the Search for page or report icon and search for Banks, and then select the related link.
  2. On the Banks overview, choose the bank for which you want to delete an authentication.
  3. On the bank card, choose Connection > Authentication.
  4. On the Authentication page, select the authentication key that you want to delete.
  5. In the action bar, choose the Delete action. The authentication has now been deleted.
  6. Run the Bank Account assisted setup guide for the companies that used the deleted authentication.

To import or export an authentication

  1. Use the Search for page or report icon and search for Banks, then select the related link.
  2. Open the bank card for which an authentication must be exported or imported.
  3. On the bank card choose Connection > and select the Import Authentication action to import an authentication into the bank card, or select the Export Authentication action to export an authentication from the bank card to a local folder.


It is not possible to export a certificate from Microsoft Dynamics NAV and reuse it in Microsoft Dynamics 365 Business Central.