The ROS Cert for retrieving the RPN's should be attached to the account so that if the payroll manager needs to login while away from the desk/office, that the payroll run can be completed by having the cert connected to the account and not being told the cert is not available.