---
title: "Generate an RSA signature"
method: POST
path: "/v1/rsa-signatures"
tags: ["RSA Signatures"]
---

# Generate an RSA signature

`POST /v1/rsa-signatures`

The REST API used in Payment Pages 2.0 are CORS (Cross-Origin Resource Sharing) enabled and therefore requires a digital signature. The POST rsa_signatures call generates and returns the required digital signature and token for a Payment Pages 2.0 form. You need to pass the generated signature to your client for it to access Payment Pages 2.0. 
    
This REST service should be used only when you implement Payment Pages 2.0. 

**Note:** To avoid potential credit card fraud attacks, you should secure your Payment Pages from being accessed by fraudulent users before you issue client-side digital signatures and tokens. See [Manage Token Issuance](https://docs.zuora.com?resourceId=payments-paymentpage2.0-digitalsignature-generation) for more information.

**Troubleshooting tip:** After you use this operation to generate an RSA signature, if `signature` returns `null` but `token` is successfully returned, please limit the number of the fields in your request to make sure that the maximum length supported by the RSA signature algorithm is not exceeded. The calculation of the request length is determined by the number of the parameters, and the length of each of the parameter name and its value.

## Headers

- `Idempotency-Key` string
- `Accept-Encoding` string
- `Content-Encoding` string
- `Zuora-Track-Id` string
- `Zuora-Entity-Ids` string
- `Zuora-Org-Ids` string
- `Zuora-Version` string

## Request body

- POSTRSASignatureType
  - `accountId` string — An optional client parameter that can be used for validating client-side HPM parameters. See [Client parameters for Payment Pages 2.0](https://docs.zuora.com?resourceId=payments-clientparameters-for-paymentpage2.0) and [Validate client-side HPM parameters](https://docs.zuora.com?resourceId=payments-paymentpage2.0-digitalsignature-generation) for details.
  - `authorizationAmount` number — An optional client parameter that can be used for validating client-side HPM parameters. See [Client parameters for Payment Pages 2.0](https://docs.zuora.com?resourceId=payments-clientparameters-for-paymentpage2.0) and [Validate client-side HPM parameters](https://docs.zuora.com?resourceId=payments-paymentpage2.0-digitalsignature-generation) for details.
  - `method` string, required — The type of the request. Set it to POST.
  - `pageId` string, required — The page id of your Payment Pages 2.0 form. Click **Show Page Id** next to the Payment Page name in the Hosted Page List to retrieve the page id.
  - `uri` string, required — The URL that the Payment Page will be served from. * For US Cloud 1 Production environment: Use https://na.zuora.com/apps/PublicHostedPageLite.do * For US Cloud 1 Sandbox environment: Use https://sandbox.na.zuora.com/apps/PublicHostedPageLite.do * For US Cloud 2 Production environment: Use https://www.zuora.com/apps/PublicHostedPageLite.do * For US Cloud 2 API Sandbox environment: Use https://apisandbox.zuora.com/apps/PublicHostedPageLite.do * For US Central Sandbox environment: Use https://test.zuora.com/apps/PublicHostedPageLite.do * For EU Cloud Production environment: Use https://eu.zuora.com/apps/PublicHostedPageLite.do * For EU Cloud Sandbox environment: Use https://sandbox.eu.zuora.com/apps/PublicHostedPageLite.do * For EU Central Sandbox environment: Use https://test.eu.zuora.com/apps/PublicHostedPageLite.do

## Response `200`

OK

- POSTRSASignatureResponseType
  - `key` string — Public key generated for this Payment Page.
  - `signature` string — Digital signature generated for this Payment Page. If `signature` returns `null` but `token` is successfully returned, please limit the number of the fields in your request to make sure that the maximum length supported by the RSA signature algorithm is not exceeded.
  - `success` boolean — Returns `true` if the request was processed successfully.
  - `tenantId` string — ID of the Zuora tenant.
  - `token` string — Token generated for this Payment Page.

## Other responses

- `500` — Internal Server Error
- `4XX` — Request Errors

---

[API](https://skmtc.dev/zuora/apis/api-reference.md) · [All operations](https://skmtc.dev/zuora/apis/api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/zuora/api-reference/revisions/d11e237f3e54/schema)