You need to generate a key-pair file that holds the public
and private keys for the card processor. These keys are used during
SSL communications to the bank card gateway. The private key is stored
in encrypted form on the server machine using a password you specify.
- A public key is usually used to exchange session keys. It is also
used to verify the authenticity of digital signatures and to encrypt data.
- A private key is usually used to decrypt session keys.
You always keep your private key secure.
The key file password protects the key, but for additional
security you shouldn't keep the key file in a directory where people have
access to it. The private key is also used to create a digital signature
when you first request a certificate.
To generate a key pair file:
- From the system command line, Change your directory to the server root:
cd
- Run the key file generation program. It is in the bin directory of your serv
er root. Type:
bin/livepayment/admin/bin/sec-key
- When prompted, type a location for the new key pair file. Usually,
the key pair file is stored in the server root, under the directory
/config
, with the name CCPD-Key.db
.
On your system, it would be:
/config/CCPD-Key.db
- A screen with a progress meter appears. Type any random keys at different sp
eeds until the progress meter is full. The time between each of your keystrokes will be used to create a unique key pair file.
- When prompted, type in a password for your key pair.
Any time the card processor is started, you must type the password to
decrypt the key file and extract the public and private keys.
The password must be at least eight characters in length. It is required that
the password have at least one non-alphabetical character (a number or
punctuation mark) somewhere in the middle. Make sure you memorize this
password.
- Retype the password.
- In the Key Pair File form, for the Key File Path field,
type the path (either absolute or relative
to the LivePayment config directory) and file name of the key file.
This directory should be safe from other users. For example,
use a directory that only you have read and write access to.
- Click OK. A key pair file is generated and placed in
the directory you specified.
Continue by requesting a certificate.