FAQs

API Key

How do I generate an API key?

Register at https://portal.fiserv.dev and create a new app. Once the app is created you will find your API credientials (including the API key) under your app.

Do I need to provide pspName and acquirerName?

These fields do not need to be provided by the API consumer, as they will be confirmed during initial setup and pre populated by Fiserv based off the API key.

Headers

Can FSV-Idempotency-Key and FSV-Interaction-Id have the same values?

These values need to be different as they are used for different reasons. The FSV-Interaction-Id is used to track each request that is sent, whereas the FSV-Idempotency-Key is used to check for duplicate requests.

Should FSV-Interaction-Id for POST/sca-exemptions and POST/sca-exemptions-data have the same values or be unique when it relates to the same transaction?

FSV-Interaction-Id should always be unique as it's used for tracking.

Should FSV-Idempotency-Key for POST/sca-exemptions and POST/sca-exemptions-data have the same values or be unique when it relates to the same transaction?

FSV-Idempotency-Key should be unique across these two endpoints because it's used to check for duplicate requests to that specific endpoint.

Is the Message-Signature checked first or is the payload validated first?

The Message-Signature is checked first, to ensure the request has not been tampered with, followed by the validation of the payload against the schema.

Retries

Should FSV-Interaction-Id for retries have the same values or be unique?

For retries the FSV-Interaction-Id should be unique.

Should FSV-Idempotency-Key for retries have the same values or be unique?

For retries the FSV-Idempotency-Key should be the same. The purpose of the idempotency key is to identify when duplicate requests are receieved.

General

Where can I find more information about the EMVCo fields?

You can find more information about the EMVCo specification here: https://www.emvco.com/emv-technologies/3d-secure/

What does PA and NPA mean?

PA and NPA are 3D-Secure 2.0 terms. PA is Payment Authentication. NPA is Non-Payment Authentication.

---