That site itself doesn't seem secure. See attached image.
Hi ss1,
Thanks for the response and for providing the screenshot of the page. At MYOB, we take security very seriously and have several measures in place to ensure the safety and reliability of our systems. Your connection is not private, typically due to a problem with the website's security certificate. It's generally advisable not to ignore this warning and not to proceed to the website unless your company's IT is certain it's safe to do so.
For the error message you're receiving, as a workaround, I recommend clicking "yes" to get rid of the warning message and proceed with your file. However, it will still pop up every time you log in, as this is a security alert from your device. To remove this permanently, I recommend seeking the assistance of your company's IT personnel, as this is regarding the internal security of your computer.
Please don't hesitate to reach out or use our online virtual help MOCA in case you still need further assistance.
Kind regards,
Shella
So, the question is, why does a website MYOB recommends for downloading the "trusted" root certificate (that is required for their software) itself be not trusted??
This seems a MYOB issue NOT an issue for us. If we cannot trust the "trusted" cert that MYOB AR uses, who can we trust? Asking us to solve the issue seem very bizare to say the least.
I raised a support ticket with MYOB support but they just referenced this questionable download page too.
Someone in MYOB security needs to address this and at least explain why the site MYOB uses is not secure itself.
BTW the workaround doesn't work when submitting payroll records to the ATO - that still fails probably because the trusted root cert is not found or is invalid.
So yes, we can login, but some functionality still doesn't work (prob for good reason).
We contacted TBS Certificates and this was their response:
Hi
This supplier of yours should not be giving our outdated URLs…
This website has been closed a while ago
Regards,
The MYOB Trusted Root Authority certificate seems to be NOT VALID (at least the one from TBS).
It would be great if the MYOB security team could investigate this at their earliest convinence. As noted, the Trust Auhority seems to be Google and not TBS.
Hi ss1,
Thanks for the response. The issue isn't caused by MYOB and relates to an issue blocking the client computer from downloading or installing the new certificate. Simply means that the Trusted Root certificate is missing. To confirm this:
Open Internet Explorer and enter the web address login.myob.com.
You will need to install the certificate manually. I recommend following the instructions again. Please note that you'll need to follow this with the help of your IT specialist or department.
Let me know if you require any further assistance with this. I'm happy to assist you.
Otherwise, if my response has answered your inquiry, please click "Accept as Solution" to help other users find this information.
Kind regards,
Shella
Our IT have contacted TBS-certificates (see my quote from them above). The URL for the trusted auth cert you provided has been confirmed BY THEM to be invalid and MYOB should not be providing this to its customers.
If you (or someone in the MYOB Security team) could provide us with a valid link to the trusted root auth cert, we can manually install it (that's not the issue here).
BTW The missing cert looks like it is from Google not TBS.
We also don't use IE 11 as that was made obsolete by MS several years ago. We use WIn Pro 11 with Edge and all the latest security patches.
