# Production Access Guide
source: https://developer.mastercard.com/eligibility-api/documentation/tutorials-and-guides/guide-production-access/index.md

After you have tested your implementation in our Sandbox environment, it is time to move to production.

* Initiate production access
  * Within your project, click on "Request Production Access" button as illustrated below.

![Request Production Access](https://static.developer.mastercard.com/content/eligibility-api/images/SandboxKeys.png)

* Complete your profile
  * If you have newly registered in Mastercard Developers Portal, you will need to provide additional details about your company.

![Product Profile](https://static.developer.mastercard.com/content/eligibility-api/images/ProdProfile.png)

* Create production key
  * Create a production key that will be used by Mastercard for OAuth authentication. To do this, use one of the following two methods:

### Method 1 - Mastercard API key generator {#method-1---mastercard-api-key-generator}

* A key pair and [certificate signing request (CSR)](https://en.wikipedia.org/wiki/Certificate_signing_request) are generated inside your web browser.
* Mastercard signs and sends your browser back an [X509 certificate](https://en.wikipedia.org/wiki/X.509) matching your private key.
* Your browser generates a [PKCS#12](https://en.wikipedia.org/wiki/PKCS_12) key store file securing your private key with the provided passphrase.
* Enter a descriptive name for the key that is descriptive of its purpose and environment in the key alias field.
* Enter a password that will be used to encrypt the keys that you receive in the keystore password field.
* Click the next button to generate a new consumer key.

![Product Keys](https://static.developer.mastercard.com/content/eligibility-api/images/ProductionKeys1.png)

### Method 2 - Upload your own CSR {#method-2---upload-your-own-csr}

* Click on Upload existing CSR instead.
* You manually upload a [certificate signing request (CSR)](https://en.wikipedia.org/wiki/Certificate_signing_request) generated in your own system.
* Enter a descriptive name for the key that is descriptive of its purpose and environment in the key alias field.
* Click on "Attach a file" link to find and upload your CSR file.
* Mastercard issues a [X509 certificate](https://en.wikipedia.org/wiki/X.509) matching your private key (you can request this certificate through the "Support" section).
* Click the next button to generate a new consumer key.

![Product Keys](https://static.developer.mastercard.com/content/eligibility-api/images/ProductionKeys2.png)

* Confirm and download Keys
  * You can download the production keys associated with the information provided in the preceding steps. Your key request will undergo review by Mastercard's Key Management team, and an approval email will be sent to the registered email address used for Mastercard Developers.
  * Click the "Submit" button to confirm and download keys.

![Product Confirm](https://static.developer.mastercard.com/content/eligibility-api/images/ProductionConfirm.png)

* The following acknowledgement screen will appear. Click the OK button to complete the Mastercard Eligibility production access request submission.

![Product Access](https://static.developer.mastercard.com/content/eligibility-api/images/ProductionAccess.png)
Note: Production keys are generated instantaneously, but they still need to be approved for production environment access before you can go live. Once your production access request has been reviewed, you will receive a notification confirming your access has been approved or denied.

Until your API service requests have been reviewed and approved, the summary page for your Mastercard developers project will indicate a status of "Pending Production Request". Once the API requests have been reviewed and approved, this status will change to "Approved".

* Ready for production
  * Once your productions keys are approved, you will have everything to start sending requests to Mastercard Eligibility in production.
  * The project summary screen will display the consumer key to the production environment. The consumer key is a 97-character string separated by an exclamation mark. The format is client_id!key_id.
  * The first 48 characters of this key (up to the exclamation mark) will be the Mastercard API client id, which will identify the Mastercard developers project.