# Generate CyberSource Security Keys

CyberSource requires a security key be sent with each transaction for authentication purposes.

1. Go to the appropriate Business Center and log in with your Username and Password.
    - [CyberSource Test Business Center](https://ebctest.cybersource.com/ebctest/login/Login.do)
    - [CyberSource Live Business Center](https://ebc.cybersource.com/ebc/login/Login.do)

2. In the left navigation menu, select "Payment Configuration" and then "Key Management".

    ![CyberSource Business Center showing Payment Configuration and Key Management navigation](https://isupport.katointegrations.com/cti/cs_keys/securitykeys1.png "Key Management navigation")

3. Click the Generate Key button.

    ![CyberSource Key Management page with Generate Key button](https://isupport.katointegrations.com/cti/cs_keys/securitykeys2.png "Generate Key button")

4. Select "Transaction Processing" as the type of key, then click "Next Step".

    ![CyberSource Generate Key page with Transaction Processing selected](https://isupport.katointegrations.com/cti/cs_keys/securitykeys3.png "Select key type")

5. Select "SOAP" as the key type, then click "Submit".

    ![CyberSource key type selection with SOAP selected](https://isupport.katointegrations.com/cti/cs_keys/securitykeys4.png "Select SOAP key type")

6. Download the generated key and save the file on your computer. This will be the only time you can view this key in the Business Center. You can also copy the text of the key from this screen.

    ![CyberSource generated security key download screen](https://isupport.katointegrations.com/cti/cs_keys/securitykeys5.png "Download generated key")

Once generated, you will need to add this value to the WSPASS field in the [CTICFGMCH](https://isupport.katointegrations.com/cti/configuration.md) DB2 file along with the merchant ID. You can do this using the UPDDTA command, or any other utility you may be comfortable with for direct DB2 file modification. 

The record you create or modify should look similar to the below. You will need to do this for each merchant ID you have, for each environment (test or live/production).

| MERCHANTID | WSUSER | WSPASS |
|------------|---|--------|
| `ikrengel` | `ikrengel` | `9uU+8Ob9S+V+z0s6TotF6Jx4VyKpkSOAiNA6Mm...`|