Security Keys

Before you can activate a profile, you must create a security key to protect each transaction from data tampering. A security key expires in two years.

You cannot use the same security key for both test and production transactions. You must download a security key for each versions of

Secure Acceptance

for test and production.

Test
: businesscentertest.cybersource.com
Production
: businesscenter.cybersource.com
Production in India
: businesscenter.in.cybersource.com

On the Profile Settings page, click

Security

. The Security Keys page appears. The security script signs the request fields using the secret key and the HMAC SHA256 algorithm. To verify data, the security script generates a signature to compare with the signature returned from the

Secure Acceptance

server. You must have an active security key to activate a profile.