# Request Prod Access
source: https://developer.mastercard.com/benefit-allocation-service-mtls/documentation/tutorials-and-guides/prod-access-tutorial/index.md

## What you will learn {#what-you-will-learn}

* Obtain the keys required for the PROD environment.
* Get access to the PROD environment.

<br />

Click **Next** to begin.

### Step 1 - Access API Project {#step-1---access-api-project}

Once you are logged into [Mastercard Developers](https://developer.mastercard.com/), go to the My Projects section and click **the project you created for Sandbox access**.

![My Projects screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/dashboard.png)

### Step 2 - Finding where to request access {#step-2---finding-where-to-request-access}

Click **Request Production Access**
![Project Summary screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/projectView.png)

### Step 3 - Upload Certificate {#step-3---upload-certificate}

If you don't have a certificate, click "**Learn more** " to create one. Once you have a certificate, upload it and add a name. Then click **Proceed**

![Request Production access flow - Enter certificate alias](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/cert.png)

### Step 4 - Client keys {#step-4---client-keys}

As the client encryption key is required, the most straightforward way to proceed is to provide a keyalias and password.
In order to provide your own CSR file (Signing) you do not need to skip this step.

![Request Production access flow - Enter create client encryption and client signature verification keys](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/additionalCredentials.png)

If you choose to provide keyalias and password make sure to store this information somewhere safe as you will not be able to access or change it later, then go to **Step 5** .
If you choose to **Skip this step** go to **Step 6**.

### Step 5 - Mastercard generated keys {#step-5---mastercard-generated-keys}

Download the files and store them in a safe place. You can also download the client encryption key from the **Production credentials** tab in your project dashboard, but this is the only time you'll be able to download the client verification key.

![Request Production access flow - Confirmation screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/prod-creating-proj.png)

Once ready, click **Open Project**.

![Project Summary screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/prodDashboard.png)

To view the keys click **Production Credentials** on the left menu. Your client certificate will be at the top followed by your generated keys.

![Project Production credentials screen - MTLS certs](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/prodTab.png)

![Project Production credentials screen - API keys](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/apiKeyFingerprint.png)

If you're interested in providing your own csr file for client signature verification, i.e. Signing, skip to **Step 8** for more information on how to add that to your project.

Otherwise, you now have the certificates for authentication and encryption necessary to invoke Benefit Allocations Service(MTLS) API on the Production environment. Please contact your Mastercard Representative/Account Manager to get test data and to configure your API key on our platform.

### Step 6 - Skipping client keys, client encryption {#step-6---skipping-client-keys-client-encryption}

If you still choose to skip click **Proceed** after reading the text carefully.

![Skip add credentials confirmation modal](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/textBox.png)

Because the client encryption key is required, on the project dashboard click on **Production Credentials** . Your client certificate will be at the top followed by a section called **API Keys**.

![Project Summary screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/projReviewSkipStep.png)
![Project Production credentials screen - MTLS certs](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/prodTab.png)
![Project Production credentials screen - API keys](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/apiKeysEmpty.png)

In order to generate a client encryption key click on **Add Key** . On the menu that shows up select **Client Encryption Key** and then click **Proceed**.

![Create client encryption key screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/clientEnc.png)

Download the key file and store it in a safe place. You can also download the client encryption key from the **Production credentials** tab where you just went to generate this key.

![Create client encryption key confirmation screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/clientEncDownload.png)

Once you click **Open Project** and go back to **Production Credentials** you should now see the fingerprint there.

![Project Production credentials screen - client encryption key](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/apiKeyFingerprint.png)

Because client signature verification is required you still have to add another key to your project. If you want to use Mastercard generated keys go to the **next step** . If you'd like to use Signing and provide your own CSR file go to **step 8**.

### Step 7 - Mastercard generated client verification {#step-7---mastercard-generated-client-verification}

In order to generate a client signature verification key, from within your project, click **Production credentials** and scroll past your certificate to the **API Keys** section and click on **Add Key** . On the menu that shows up select **Client Signature Verification Key** and then click **Proceed**.

![Create client signature verification key screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/clientSignature.png)

When selecting a method click **Generate a new private key** and click proceed.

![Create client signature verification key - generate a new private key](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/clientSigGenerate.png)

Provide a keyalias and password and make sure to store this somewhere safe as you will not be able to access or change it later, then click **Generate Keys** .
![Create client signature verification key - Enter key alias and password](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/clientSigKeyalias.png)

Your client signature verification key will now be generated. Make sure to download and store the key file somewhere safe along with all the other files generated during this tutorial. You will not be able to download this file again. Once ready click **Open Project**
![Create client signature verification key confirmation screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/downloadClientSignature.png)

![Project Production credentials screen - client signature verification key](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/signInAdded.png)

If you're interested in providing your own csr file for client signature verification, i.e. Signing, go to **Step 8** for more information on how to add that to your project.

Otherwise, you now have the certificates for authentication and encryption necessary to invoke Benefit Allocations Service(MTLS) API on the Production environment. Please contact your Mastercard Representative/Account Manager to get test data and to configure your API key on our platform.

### Step 8 - Signing {#step-8---signing}

In order to provide your own csr for client signature verification, from within your project, click **Production credentials** and scroll past your certificate and click on **Add Key** . On the menu that shows up select **Client Signature Verification Key** and then click **Proceed**.

![Create client signature verification key screen](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/clientSignature.png)

When selecting a method click **Use an existing private key** and click proceed.

![Create client signature verification key - use an existing private key](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/addClientSignature.png)

Provide a keyalias and upload the corresponding CSR file. Once ready click **Create Key**
![Create client signature verification key - Enter key alias](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/provideClientSignature.png)

You now have added your own csr file to the project, but if you already had another key, which would be the case if you opted to have mastercard generate your during step 4 or 5, then you must activate your new key. To do so, go back to the **Production credentials** tab from within your project, scroll down to the **API Keys** section. Here find the keyalias you provided earlier when uploading and click on **Manage** to show a dropdown. On this menu click activate and now you'll be able to use your own CSR file as your client signature verification key.

![Activate client signature verification key](https://static.developer.mastercard.com/content/benefit-allocation-service-mtls/uploads/prod-tutorial/activateSignIn.png)

You now have the certificates for authentication and encryption necessary to invoke Benefit Allocations Service(MTLS) API on the Production environment. Please contact your Mastercard Representative/Account Manager to get test data and to configure your API key on our platform.