Obtain the merchant Key


The secret key contains a pair of public and private keys. The private key will be kept by the developer; The public key can be made public. The private key is used for signature while the public key is used for signature verification. Developers keep their own private keys, and communicate using public keys provided by the open platform to ensure the integrity of information transmission and the authenticity of the sender's identity.

Preparations for Integration

1. Activate merhcant backend porta

  • For how to use the merchant backend portal, please refer to Merchant Backend Portal
  • When getting official merchant ID, the merchant needs to confirm that an email for activating its merchant back-end portal account has been received in the registered mailbox when being onboarding, and through that email merchant needs to activate its corresponding account in time. The link in the activation email has expired time. If the link expires, please contact the business manager to re-send the activation email.

    2. Download and export the CFCA certificate

  • Please refer to here for uploading certificate
  • Please refer to here for exporting certificate
  • Please contact the business manager to apply for the CFCA certificatein time used for message encryption and decryption for interfaces' interconnection. Merchant will receive two letters after the application, one is for two-code notification and another one is for instruction manual. The validity period of the CFCA two-code email is 14 days. If the email expires or the certificate cannot be downloaded and installed due to other factors, please contact our tech support.

  • The email address for the certificate delivery is ocaraserver@mail.cfca.com.cn. Please download the certificate from the registered email address within 14 days
  • Select CSP when downloading: Please be sure to select soft certificate (Microsoft Enhanced Cryptographic Provider V1.0)
  • When exporting the public key: select Base64, the second item, and keep the default value for the rest; Then click "Next" until the export is complete
  • When exporting a private key: Set the password firs and keep the default value for the rest; Then click "Next" until the export is complete
  • The last thing you need to do when exporting the public and private keys is to select the corresponding storage location and enter the file name (Use letters only, please do not use special characters).