API Overview

Creating and Using Security Keys User Guide
- Recent Revisions to This Document
- VISA Platform Connect: Specifications and Conditions for Resellers/Partners

Introduction to Creating and Using Security Keys

Create a Security Key
- PGP Keys
  - Creating PGP Keys
  - Adding PGP Keys to Your Account
  - Granting User Permissions
- REST API Keys
  - Create a P12 Certificate
  - Submit a Certificate Signing Request
  - Transacting Merchant User: Create a Shared Secret Key Pair
- REST—API Response MLE Key
  - Create or Submit a REST—API Response MLE Key
  - Test Your API Response MLE Key
- Secure Acceptance Keys
- Simple Order API Keys
- SOAP Toolkit Keys
- Message-Level Encryption Keys

Manage a Security Key
- Deactivate a Key
- Delete a Key
- Search for Keys Using Filters

Meta Key Creation and Management
- Create a Meta Key as a Portfolio User
- Create a Meta Key as a Merchant Account User
- Assign a Meta Key to All Merchants
- Assign a Meta Key to Select Merchants
- Remove a Meta Key from all Merchants
- Remove a Meta Key from Select Merchants
- Convert a Meta Key or Non-Meta Key
- Delete a Meta Key
- Regenerate a Meta Key

Meta Keys in API Requests
- REST API Payment Request with a Meta Key
- Simple Order API Payment Request Using a Meta Key
- SOAP Payment Request Using a Meta Key
- SCMP API Payment Request using a Meta Key

On This Page

PGP Keys

Cybersource uses Pretty Good Privacy (PGP) encryption for Account Updater response files and Notice of Change (NOC) reports.

For information about Account Updater, see the Account Updater User Guide
. For information about NOC reports, see Electronic Check Services Developer Guide
.

A PGP public/private key pair enables you to use encryption to protect payment data. You exchange the public part of this key pair with Cybersource, which uses the public key to encrypt response files or NOC reports. You use the private part of the key pair to decrypt the response files or NOC reports. Only the private key can decrypt files that are encrypted with the public key.

Key information:

PGP keys expire after 3 years.

Security keys can be used to make any request, including payments. Treat your security keys as you would any secure password.

You must use separate keys for the test and production environments.

Back to top