Authentication Keys

Although you can freely explore general API features under the dashboard's Guest Experience method, you will need a dashboard-generated or TPP-uploaded authentication key to produce testable payloads for measuring/calibrating your integration effort. The dashboard can generate an API key for you to facilitate integration testing in the sandbox. For the production environment, you'll need to create a CSR and/or upload your existing PKI certificate to securely connect to Token and Token-connected banks.

So, before taking a deep dive into Token's Sandbox environment, click Settings in the left-hand navigation panel, then click Authentication Keys.

Here, you can let the dashboard generate an API Key for you or you can upload your own public key for signing. In both cases, this unique Authentication Key digitally identifies your application or project and its usage permissions when it calls the API.

To generate an API key:

1. Click the Generate an API key tab under Authentication Keys.

   If you already have one, your current API Key is obscured. To see it, click the "eye" icon on the right. You can generate a new one, but it will replace the current one, which will no longer be valid.

2. If you are a new TPP, click Generate API Key, then click Get Key.
3. Choose an appropriate place to Save the key on your local machine and remember its location. This is now your secret key. Do not share it with anyone outside of your organization.

To upload your public key:

1. Click the Upload your public key tab under Authentication Keys, then click Upload New Key.
2. Enter your Public Key in the field provided, choose a Key Algorithm, then click Save.

   This associates your public key with a KEY ID and KEY TYPE and lists it (example pictured, click to enlarge) among any other public keys you've uploaded.

   

If you decide to delete a key, click on the desired row in the list to select it, then click Delete.

Next, you're ready to build your authorization token payload.