On This Page {#jumplink-list} [Markdown](/docs/cybs/en-us/platform/developer/all/rest/rest-getting-started/restgs-sdk-intro/restgs-sdk-mle-intro.md) Filter FILTER BY TAG Create REST--API Response Key {#restgs-sdk-mle-intro} ===================================================== ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-sdk-flow-3-750x200.svg/jcr:content/renditions/original) To enable message-level encryption (MLE) for your SDK integration, you must create a REST--API response key. This section describes how to create and test a REST--API response key. Overview of MLE {#restgs-sdk-mle-intro_section_shd_zsp_s3c} ----------------------------------------------------------- Message-Level Encryption (MLE) enables you to store information or communicate with other parties while helping to prevent uninvolved parties from understanding the stored information. Enabling MLE requires you to create a *P12 certificate* or *shared secret key pair* for encrypting your requests and a *REST -- API Response MLE* key for decrypting received responses. If your organization is using meta keys, your security keys must be created by the same portfolio or merchant account. Step 3A: Create or Submit a REST---API Response MLE Key {#restgs-sdk-mle-create} ================================================================================ Before you can enable your system to support MLE, you must create or upload a *REST---API response MLE* certificate. After creating or uploading the certificate, you can extract the certificate's key to begin enabling MLE. If your organization is using meta keys, the *shared secret key pair* and *REST -- API response MLE* key must be created by the same portfolio or merchant account. Follow these steps to create or submit an API Response MLE certificate in the `Business Center`: 1. Log in to the `Business Center`: * **Test:** [`https://businesscentertest.cybersource.com`](https://ebc2test.cybersource.com/ebc2/ "") * **Production:** [`https://businesscenter.cybersource.com`](https://ebc2.cybersource.com/ebc2/ "") 2. On the left navigation panel, choose ![](/content/dam/documentation/cybs/en-us/common/images/ebc/ebc-icon-pymt-config.svg/jcr:content/renditions/original) Payment Configuration \> Key Management. ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/left-navigation.png/jcr:content/renditions/original) 3. Click + Generate key on the Key Management page. ![](/content/dam/documentation/cybs/en-us/topics/payments-processing/payment-services/sec-keys/images/generate-key.png/jcr:content/renditions/original) 2. Under REST APIs, choose **REST -- API Response MLE** , and then click **Generate key** . ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-mle-reply.png/jcr:content/renditions/original) 3. Choose one of these options to download your key: * To create a new API response MLE certificate, click **Download key** ![](/content/dam/documentation/cybs/en-us/common/images/ebc/ebc-bttn-download.svg/jcr:content/renditions/original) . * To upload your own certificate, enter your public PEM-formatted certificate in the text box, and then click **Download key** ![](/content/dam/documentation/cybs/en-us/common/images/ebc/ebc-bttn-download.svg/jcr:content/renditions/original) . The *.pem* file downloads to your desktop. If prompted by your system, approve the location to which the file downloads. ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-mle-reply-submit.png/jcr:content/renditions/original) 6. If you are creating a certificate, the Set a Password window appears. Create a password for the certificate by entering the password into the New Password and Confirm Password fields, and then click Generate key. The *.p12* file downloads to your desktop. If prompted by your system, approve the location to which the key downloads. ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-set-pass.png/jcr:content/renditions/original) To create or submit another key, click **Generate another key**. To view all of your created keys, go to the Key Management page. > IMPORTANT > Securely store the *.p12* file and password in your system. These credentials are required in order to implement certain products, and you must be able to access them. 4. Click **Cancel** . The Key Management page appears. 5. Click the **Key Type** filter and choose **REST-API Response MLE**. 6. Click the **Expires At** filter and choose **All Dates**. 7. Click **Search**. 8. Find the REST--API Response key that you created in the Search Results table and save its key ID. The key ID is needed to test and configure your system to use MLE. ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-mle-ebc-key-mgmt.png/jcr:content/renditions/original) **Test Your REST--API Response MLE Key** : To test your REST--API Response key, see [Test Your REST--API Response MLE Key](/docs/cybs/en-us/platform/developer/all/rest/rest-getting-started/restgs-jwt-shared-secret-intro/restgs-jwt-shared-secret-test/restgs-jwt-shared-secret-mle-dev-center.md ""). {#restgs-sdk-mle-create_d61e55} Step 3B: Test Your REST-API Response Key {#restgs-sdk-mle-test} =============================================================== Follow these steps to verify that your API response MLE key is working: 1. Go to the REST API Reference page in the `Cybersource` Developer Center: [`https://developer.cybersource.com/api-reference-assets/index.html#static-home-section`](https://developer.cybersource.com/api-reference-assets/index.md#static-home-section "") 2. On the left navigation panel, choose an API that supports MLE. For testing purposes, you can choose **Intelligent Commerce \> Intelligent Commerce Product \> Enroll a Card** . MLE support is indicated by **Request MLE** and **Response MLE** at the top of the screen. ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-mle-tags.png/jcr:content/renditions/original) 3. Choose the **MLE Configuration** tab. 4. In the Message Level Encryption Credentials section, enter your API response MLE key credentials: * **Response encryption:** Enter the key ID of your REST---API response MLE key. You saved this key ID in Step 10 in the Create or Submit a REST---API Response MLE Key section in [Enable Message-Level Encryption](/docs/cybs/en-us/platform/developer/all/rest/rest-getting-started/restgs-jwt-message-intro/restgs-mle-intro.md ""). * **Response decryption:** Click **Browse** to submit your own private decryption key from your local system. Only *.p12* files are supported. ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-mle-dev-center-upload.png/jcr:content/renditions/original) 5. Click **Update Credentials**. 6. From the **Send** drop-down menu, choose **Send Request with Message Level Encryption**. 7. Click **Send** . ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-mle-dev-center-send.png/jcr:content/renditions/original) 8. If a *Success: HTTP Status Code: 201* message displays in the Response section, your REST---API response MLE key is verified as properly configured. ![](/content/dam/documentation/cybs/en-us/topics/platform/rest/getting-started/images/restgs-mle-ebc-success.png/jcr:content/renditions/original) {#restgs-sdk-mle-test_ol_p54_5tp_s3c} RELATED TO THIS PAGE * [Getting Started with REST](https://developer.cybersource.com/docs/cybs/en-us/platform/developer/all/rest/rest-getting-started/restgs-intro.md) * [Response Codes](https://developer.cybersource.com/api/reference/response-codes.md) * [API Field Reference Guide](https://developer.cybersource.com/docs/cybs/en-us/api-fields/reference/all/rest/api-fields/rest-api-fields-intro.md) * [API Reference Sandbox](https://developer.cybersource.com/api-reference-assets/index.md#static-home-section) * [Business Center Test](https://businesscentertest.cybersource.com/ebc2/) * [Business Center Production](https://businesscenter.cybersource.com/ebc2/) * [Customer Support](https://support.visaacceptance.com/)