# Encryption Configuration
source: https://developer.mastercard.com/transactions-service/documentation/api-basics-options/e2e-encryption-config/index.md

## Encryption Configuration {#encryption-configuration}

Use this process when your Loyalty Transactions Service integration requires JWE payload encryption, as described in [API Basics](https://developer.mastercard.com/transactions-service/documentation/api-basics/index.md#encryption).

1. Download the encryption key material for the selected environment from your [Developer Dashboard](https://developer.mastercard.com/dashboard). The [Sandbox access tutorial](https://developer.mastercard.com/transactions-service/documentation/tutorials-and-guides/sandbox-access-tutorial/index.md#download-encryption-keys) and [Production access tutorial](https://developer.mastercard.com/transactions-service/documentation/tutorials-and-guides/production-access-tutorial/index.md#download-the-encryption-key) describe where to find it.
2. Confirm the required payload mapping and certificate with your Product Delivery or CIS Implementation Manager. The published transaction search schema uses `userId` and `userIdType`; do not reuse field paths or certificates from another API.
3. Configure a supported [Mastercard client encryption library](https://developer.mastercard.com/platform/documentation/security-and-authentication/securing-sensitive-data-using-payload-encryption/#client-libraries) using the confirmed configuration and the certificate for that environment.
4. Authenticate the final outgoing request using the project's [authentication method](https://developer.mastercard.com/transactions-service/documentation/api-basics/index.md#client-authentication). Keep private keys and keystore passwords outside source control and shared request collections.

## Next Steps {#next-steps}

Use [Integration and Testing](https://developer.mastercard.com/transactions-service/documentation/tutorials-and-guides/api-testing-tutorial/index.md) to validate the request and [Code and Formats](https://developer.mastercard.com/transactions-service/documentation/code-and-formats/index.md) to investigate failures. The [Quick Start Guide](https://developer.mastercard.com/transactions-service/documentation/quick-start-guide/index.md) demonstrates a transaction search using an opaque RANAC identifier.