On This Page
FILTER BY TAG
Deprecating September 2026: HTTP Signature Messaging

Set Up an HTTP Signature Message

To set up HTTP signature messaging, you must complete the tasks described in this section.
WARNING
By
September 2026
, all merchants using HTTP signature messaging must migrate to JSON Web Token (JWT) messaging in order to support message-level encryption (MLE). You risk transaction failures if you do not implement this update. If you are setting up your system to be REST-compliant for the first time,
Cybersource
 recommends using JWT messaging.
To update your system to support JWT messaging, use one of these methods:

Figure:

Set Up HTTP Signature Messaging
  1. Sign up for a test account. See Sign Up for a Sandbox Account.
  2. Create a shared secret key. See Create a Shared Secret Key Pair.
  3. Construct a message using HTTP signature security. See Construct Messages Using HTTP Signature Security.
  4. Test your REST transaction messages. See Test Your Setup.
  5. Go live by transitioning your sandbox account into a production account. Going Live.
RELATED TO THIS PAGE