Appendix A

Generating Security Keys

This appendix describes how to generate security keys for merchants using the Business Center and merchants using the Enterprise Business Center. If you are not sure which type of merchant you are, see Who Should Read This Guide.

Preparing to Generate a Key

Generating a Key

Preparing to Generate a Key

Before generating one or more keys, you need to follow the steps required according to the URL that you use to log in to the Business Center.

Merchants Using the Business Center

The Simple Order API uses a public and private key pair key to prevent others from using your account. This security measure ensures that transactions originate from your web site and that no one, not even CyberSource, can run transactions on your behalf by using your private key.

The Security Keys page in the Business Center allows you to generate a certificate request, which is stored on your computer. The certificate request creates a public and private key pair that is used to encrypt transaction data sent to CyberSource. Your private key is required to generate encrypted data but is never transmitted over the Internet.

A Java applet is used to create your new key (<username>.p12). The applet downloads 1.5 MB of executable code if your browser supports the plug-in.

Note If the applet fails to load properly, we recommend that you download the latest revision of Internet Explorer or Netscape Navigator and try again.

Before communicating with the CyberSource server, the applet encrypts your password by using an SSL certificate. Your password is sent with the key generation request to validate your identity.

To create a security key pair:

1   Log in to the Business Center at https://businesscenter.cybersource.com.

2   Click Settings > Account Info in the navigation pane.

The Account Information page appears.

3   In the Process Payment Transactions section, select Simple Order API.

4   In the Shopping Cart section, select Other.

5   Scroll to the bottom of the page and click Update.

6   In the navigation pane, click Transaction Security Keys.

The Transaction Security Keys page appears.

7   Proceed with Generating a Key.

Merchants Using the Enterprise Business Center

Before you can send requests for ICS services, you must use a Java applet to create a security key for your CyberSource merchant ID. The Java applet is on the Business Center’s Web site. If you have problems creating a key, make sure your Web browser allows you to run Java applets.

Note The Java applet works only if you use version 1.4.1 of Sun's Java plug-in. If the applet fails to load properly, CyberSource recommends that you download the latest revision of your browser and try again.

1   To create a security key, log into the Business Center.

2   In the navigation pane. click the Account Management > Transaction Security Keys.

The Transaction Security Keys page appears.

3   Proceed with the next section.

Generating a Key

This figure shows the Transaction Security Keys page. Follow the instructions below to create a key.

1   Click Generate Key.

A warning message appears.

2   To accept the security warning, click Yes.

The download may take several minutes during which the applet may appear as a large gray box. Another warning message appears.

3   Verify that the certificate is signed by CyberSource Corporation, and click Yes.

Another warning message appears.

4   To accept the certificate, click Yes or Always.

The New Security Key window appears.

When the Generate Certificate Request button appears, the download is complete.

5   Click Generate Certificate Request.

Messages (see Table 1) appear in the Messages box while a new key is generated. Another warning message appears.

6   To accept the certificate, click Yes or Always.

)

Messages continue to appear in the box. Your browser opens its Save As dialog box.

7   Choose a safe location for your key (<username>.p12).

Important If you do not protect your security keys, the security of your CyberSource account may be compromised.

The last line of Table 1 informs you that the process is finished and that a new key is stored in the location that you indicated.

Table 1 Sample message while key is generated

Generating the certificate request.

This may take several seconds.

Certificate request generated successfully.

Encoding the certificate request.

Certificate request encoded successfully.

.

.

Creating the key file contents.

Key file contents created successfully.

Please select a save location for your key file using the popup dialog.

Writing the key file to the file system.

Writing the key file to C:\Full_Path_that_you_chose.

Key file written to the file system successfully.

The password for the key file is your merchant id: <Merchant_ID>.

The Certificate Manager has successfully completed all 0perations.

8   To verify that your key is active, click Transaction Security Keys in the navigation pane. Your new key is listed at the bottom of the table.

You have finished generating your key.