PGP Keys

Cybersource
uses PGP encryption for Account Updater response files and Notice of Change (NOC) reports. For information about Account Updater, see the
Account Updater User Guide
. For information about NOC reports, see
Electronic Check Services Using the Simple Order API
.
A PGP public/private key pair enables you to use encryption to protect payment data. You exchange the public part of this key pair with
Cybersource
, which uses the public key to encrypt response files or NOC reports. You use the private part of the key pair to decrypt the response files or NOC reports. Only the private key can decrypt files that are encrypted with the public key.
PGP keys expire after 3 years.
Security keys can be used to make any call, including payments. Treat your security keys as you would any secure password.
You must use separate keys for the test and production environments.