On This Page
Message Level Encryption
Message Level Encryption (MLE) uses certificates to ensure each message is securely
encrypted and tied to the sender's verified identity, without needing to share secret keys
in advance.
MLE provides stronger authentication, easier key management, and better protection
against fraud or tampering.
A shared secret uses the same key for both sending and receiving messages, meaning
both parties must securely exchange and protect that key in advance. While MLE can
be simpler, it offers less identity verification and can be more vulnerable if the
key is compromised.
IMPORTANT
Message Level Encryption requires that
a .p12 certificate to be created.
- Extract and convert the p12 certificate to the .pemformat using this command:openssl pkcs12 -in <key filename>.p12 -cacerts -nokeys -out <key filename>.crtIMPORTANTBe sure to note the serial number of theCybersource_SJC_US certificate.
- Import the certificate, by going to and importing the extracted.crt. Make a note of the alias.
- Enable Message Level Encryption, by going to .
- Enable theEnable Message-Level Encryptionoption.
- In theAlias of the Certificatefield, enter the Alias from when the certificate was imported.
- In theCertificate Serial Numberfield, enter the serial number from theCybersource_SJC_US certificate.