# Request MTLS certificate for Production
source: https://developer.mastercard.com/identity-insights-for-transactions/documentation/tutorials-and-guides/mtls-certificate-prod-tutorial/index.md

## Introduction {#introduction}

This tutorial explain the necessary steps to complete before requesting Production access and starting integration with the Identity Insights for Transactions (IIT) API in Production.

## Pre-Requisites to Requesting Production Access {#pre-requisites-to-requesting-production-access}

The following pre-requisites must have been satisfied in order to proceed to requesting access to production:

* Commercial Contract is in place to use Identity Insights for Transactions.
* Your Mastercard Representative has signed off on your Sandbox Integration.
* Within your Developer Zone Project, you have specified the commercial countries that your service will operate in.

## Requesting Production Access {#requesting-production-access}

* Confirm the ICA , CID and Country associated to the project ![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/service_details_new.png)
* Select whether you wish to have Mastercard generate a new key and CSR and when creating your MTLS Certificate, or whether you wish to supply your own CSR.

**Note** : If you have your own MTLS Certificate, you should click the "Skip This Step" button. Your MTLS certificate can then be added to the project directly on the Project's Credentials Screen.
![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/manage_project_key.png)

## Populate certificate details {#populate-certificate-details}

If you have chosen to have Mastercard generate the key and CSR to be used when creating your MTLS Certificate, provide a certificate alias value and password, taking note of the password that you have created.
![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/create_certificate.png)
If you have chosen to use your own CSR when creating your MTLS Certificate, specify the alias for the Certificate and upload your CSR by either selecting the appropriate file (p10, pem, crt, csr) within the selection window, or pasting the PEM form of the CSR into the text box, confirming the derived Distinguished name values are correct.

## Download credentials {#download-credentials}

On selection of the "Update Project" button, your certificates will be generated and you will be presented with the option to Download key file.
![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/updating_project.png)
Selection of this option will trigger the zipped key file containing the key, MTLS cert and a PEM file encrypted with the MTLS cert containing a cert that is to be used for payload encryption, to be downloaded to your browser's default download location.

**Note**: The encryption certificate can be extracted from the PEM file using Open SSL command and the MTLS cert and key