Practical tax portal guide

Hong Kong e-Cert (Organisational) with AEOI Functions

Understand the certificate and authorization arrangements for CRS/AEOI financial account reporting, CbCR and Pillar Two, and how an appointed adviser can assist.

Request a compliance assessment

Required certificate

Organisational + AEOI

The ordinary organisational or personal e-Cert does not authenticate CbCR or Pillar Two submissions.

Reuse

One appropriate certificate type

A valid AEOI-enabled organisational e-Cert used for CbCR can also authenticate the Pillar Two Portal for that organization.

Issuer

Hongkong Post

Certificates are issued by the Hongkong Post Certification Authority, not by HKBSCL.

What is an AEOI-enabled organisational e-Cert?

An e-Cert is a digital credential used to authenticate an authorized person acting for an organization and to sign certain electronic transactions. The AEOI Functions variant is required by the IRD CbC Reporting Portal and Pillar Two Portal. Holding a certificate alone does not give a service provider authority to file for a client.

What to prepare before filing

Each authorized user must follow the relevant organization, certificate and portal authorization rules. Do not exchange certificate files or secrets by unencrypted email or website enquiry form.

Check that the certificate is an e-Cert (Organisational) with AEOI Functions and remains valid for the planned filing.
Verify the legal entity, authorized individual and Business Registration Number where required.
For CbCR service-provider portal arrangements, check Form IR1465 and the client's filing engagement.
For Pillar Two, set up the correct BTP/TRP profiles and a Schedule 63 section 13 service-provider engagement where filing on behalf of clients.

Which certificate and when?

Requirements differ by government system; check the receiving authority before using an e-Cert.

Use case	Correct credential / authority	Important distinction
Country-by-Country Reporting Portal	e-Cert (Organisational) with AEOI Functions.	Used to authenticate CbCR account operations and submissions; authorized service providers need their organization's appropriate certificate.
Pillar Two Portal (BTP/TRP)	e-Cert (Organisational) with AEOI Functions.	Ordinary organisational e-Cert and personal e-Cert are not accepted for filing authentication.
CRS / AEOI financial account reporting	e-Cert (Organisational) with AEOI Functions for registering and operating the AEOI Account.	For reporting financial institutions and their duly authorized operators; BIR80 reports financial account information, not multinational-group CbCR or Pillar Two data.
Other e-government/e-tax services	The portal may accept other authentication or e-signature methods.	An AEOI-enabled e-Cert is not universally mandatory for all Hong Kong e-filing.

Common e-Cert questions

A small setup error can prevent a time-sensitive filing.

You already have an ordinary e-Cert

The CbCR and Pillar Two Portals require the AEOI Functions version; ask Hongkong Post about application or renewal options.

Your company already files CbCR

The same valid, suitable AEOI-enabled organizational certificate may also authenticate the Pillar Two Portal for that entity.

Your accountant files for multiple clients

Each client's mandate and portal linkage must be arranged correctly; a firm certificate is not blanket filing authorization.

A reporting financial institution files CRS information

A reporting financial institution uses the AEOI Portal for financial account reporting, including BIR80. Its authorized operator needs an e-Cert (Organisational) with AEOI Functions. This is separate from CbCR and Pillar Two reporting; the institution must establish the appropriate account and authority.

How HKBSCL can help

We provide guidance and authorized reporting support, not certificate issuance.

Check readiness

Identify whether your existing certificate type and organization/authorized-person records are suitable.

Map portal access

Clarify CbC Portal vs Pillar Two Portal, BTP/TRP and the relevant role of a tax representative or service provider.

Coordinate authorizations

Assist with engagement documents, IR1465 or Pillar Two service-provider onboarding where applicable.

Support the underlying filing

Coordinate CbCR, HKMTT, BIR82 or GIR work within the agreed scope, using secure credentials and authorized submission channels.

Secure setup checklist

Protect the certificate and align authorization before the filing deadline.

1
Confirm the certificate type
Check expiry, holder organization, available AEOI functions and the designated user.
2
Confirm authority and portal
Obtain client engagement, correct entity profile, group code where applicable and portal access.
3
Complete a controlled submission
Use the official portal; protect signing credentials, retain evidence of submissions and monitor certificate renewal.

Frequently asked questions

Can I use a personal e-Cert?

No. The IRD CbCR and Pillar Two Portals require the e-Cert (Organisational) with AEOI Functions for relevant transactions.

Can I reuse the e-Cert for CbCR and Pillar Two?

Yes, the IRD confirms the same appropriate e-Cert (Organisational) with AEOI Functions can be used by that organization for both portals.

Does my CPA firm's certificate let it submit every client's return?

No. Separate client engagements, authorizations, portal roles and statutory filing permissions must be checked.

Does HKBSCL issue or receive certificates?

No. Apply through Hongkong Post. Never send private-key files, certificate passwords or signing secrets through our public enquiry form.

Do ordinary account holders need an AEOI e-Cert for CRS self-certification?

No. Providing a CRS tax-residence self-certification to a bank is different from registering or operating a reporting financial institution’s AEOI Account. A self-certification request alone does not mean that the customer must obtain an AEOI-enabled e-Cert.

Discuss your cross-border filing obligations

Tell us about your group structure and reporting year. We can review the applicable Hong Kong obligations and scope an appropriate engagement.

Useful information for an initial assessment

Ultimate parent jurisdiction and reporting year-end
Consolidated group revenue and group entity list
Hong Kong, Mainland China and overseas entities
Existing CbCR, GIR or top-up tax filings abroad