# Create a Sandbox Project
source: https://developer.mastercard.com/identity-insights-for-transactions/documentation/tutorials-and-guides/sandbox-access-tutorial/index.md

This guide walks through the steps required to create a new Identity Insights for Transactions project and how to gain access to the sandbox environment.

#### What you will learn {#what-you-will-learn}

* How to create Mastercard Developers sandbox project
* How to configure it

## Create a Project {#create-a-project}

1. To begin you should go to your dashboard, you can do this by clicking on the [My Projects](https://developer.mastercard.com/dashboard) option in the menu.
2. You can create a new project by clicking the **Create New Project** button, in the upper right portion of the screen. ![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/create_project.png)

## Add Identity Insights for Transaction API to Your Project {#add-identity-insights-for-transaction-api-to-your-project}

1. Enter a descriptive name for your project in **Project name**.
2. Select the "No" option if you are directly employed by the company that the project is being created for. If you are creating it on another company's behalf then select the "Yes" option and add the appropriate details for that company.
3. Select **Identity Insights for Transactions** from dropdown list.
4. Click **Proceed** . ![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/select_project.png)

## Configure Service details {#configure-service-details}

1. Add **Interbank Card Association number** , **company id** and country. The Mastercard assigned ICA is used for customer identification when sending a transaction to Mastercard Identity Insights for Transactions API. The ICA will also be used for billing of usage of Identity Insights for Transactions.

* For country please enter Head quarters of the customer.
* Please reach out to your [Mastercard Representative](https://developer.mastercard.com/identity-insights-for-transactions/documentation/support/index.md#how-can-i-find-who-is-my-mastercard-representative) for ICA and CID related questions.

Note: Please ensure the veracity of these details as they cannot be changed after Project Creation

2. Click **Proceed** . ![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/service_details.png)

## Project credentials {#project-credentials}

Project credentials for Sandbox can be generated during project creation, or after the project has been created. If you wish to use a pre-existing CSR then this can only be done after the project has been created.

To generate credentials as part of the project creation flow:

1. Enter the Certificate alias along with the Keystore password, taking note of the values used as these will be needed later in this workflow.
2. Click **Proceed**.

![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/project_credentials.png)

To add credentials after the project has been created, click the "Skip this step" button and confirm that you wish to create a project with no certificate associated to it.
Note: If at some point in the future you wish to add a certificate to the project you can click on the "Add Sandbox Credentials" link within the banner on the Summary page of the project or within the "Sandbox Credentials" page. See [Adding a new mTLS Client Certificate](https://developer.mastercard.com/platform/documentation/authentication/using-mtls-to-access-mastercard-apis/#adding-a-new-mtls-client-certificate) for a direction on how to achieve this.

## Additional credentials {#additional-credentials}

Additional credentials are required to facilitate payload encryption. These can be created as part of the create project
flow or added after the project has been created by clicking "Skip this step".  

If you choose to skip this step the project will be created without the certificate needed for payload encryption being
added, requiring you to add this key after the project has been created via the "Sandbox Credentials" page.

To create the credential required for payload encryption as part of the project creation:

1. Click **Create project** and wait for the steps to complete.
2. Click the **Download key file** button and save the zip file containing:
   1. \*-signing.crt file containing the **mTLS certificate**.
   2. \*-private-key.key file containing the **mTLS private key**, which is secured by the Keystore password specified earlier in the flow.
   3. identity-insights-for-transactions-clientenc-\*-client-encryption-key.pem file containing the **client encryption certificate**.
3. Click **Open project**.
4. You will be redirected to the Project Summary Page from where you can access the various keys generated.

Note: To encrypt a JSON payload with the downloaded keys, use a tool (such as Open SSL) to first extract the public key from the CRT file as a PEM file, and then utilise this PEM file within your encryption operation

![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/additional_credentials.png)
![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/confirm_and_download_keys.png)
![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/open_project_sandbox.png)
![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/project_dashboard_sandbox.png)

**Note**: Please follow the below instructions to convert crt file to pfx file

* Go to Project Summary and Select "Sandbox" under credentials.
* Select the certificate created and click download.

![](https://static.developer.mastercard.com/content/identity-insights-for-transactions/uploads/convert_crt2pfx_format.png)

* Once the certificate is downloaded in the crt format use the below command to convert the crt file to pfx file

openssl pkcs12 -export -out certificate.pfx -inkey keyfile.key -in certificate.crt
