Step 1 - Exchanging public keys
Generating a public/private key pairCopied!
The Public/Private key-pair can be generated using ssh-keygen using the following command:
ssh-keygen -t rsa -b 4096 -m PEM -f ./ockto_open_banking_request_signing_key
It is not required to supply a password at this stage.
It is critical to keep your private key(s) in a secure digital vault at all times and never share it via a public interface or with a third party
A successful key generation will look like this:

Converting the RSA public keyCopied!
Once your key is generated, you will need to convert the public key into PEM format. This can be done via one the following openssl/keygen commands:
openssl rsa -in ockto_open_banking_request_signing_key -pubout -out ockto_open_banking_request_signing_key.pem
or
ssh-keygen -e -f ockto_open_banking_request_signing_key -m PEM
An example of a generated public key is then as follows:
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzJwMUMj2HcrDs798zHWj
e/d7+i10nduKeOEgVHxKyTMe2etwCD7Gzt7rQiTmhHlc32JhPnEsYMzdSmUFcF+w
pFpJHNa4TzRZhfOdz+i6sGqNUDdws9zXen4zaVpcoiEHFHK6/YIFl9X7/8HwC01v
0blhg91KUEZ41iCNetd8ht/FkaL4PENiXuqhKH6MwX00qdfDh6MiLgphWMyuOY90
aXa/j0hN3IRnEoh/Qqyrh3+hbPz3pqatWaXoF/4D989jyvhrqCnfZWQJlyF63cCh
GkhH/n0NR2MbCF3rO4YMOIcznA+zrt2GaDDENkfs+n6fZgReiMwJad2bevRjBdX5
U0M43fenu6qcq0bAsKr0wpFKpWCdKgrO8I5DrBq6+cJlBLxP11pFVS3Zv5cTuoEj
efqRDXzsi/BawkQbAKEWEbOsv5ninWdk7DIBGAAQF6FoL8GgPHOWJve4RhVZGBtQ
VJaWEeFH3EQXirquxhHZfy/IeF5e+DKcrE4Jl/1ibXIGJLy6Gn+Iy7hy4Pv07PbJ
xPybblYpLFQ+G/d67/Bf/jg6VQL9nk1B7WA08ywtHEciNKrxM/LdGUU9hcVKJI++
BoaX2rOwLhTqeKebiAZ6V6I7O8s1z/pr8m72w4Qc9ClgLdNFkr3yj/e1HhoJPrVt
Fz8xN4f4NvCogjI9+kuDwrECAwEAAQ==
-----END PUBLIC KEY-----
Exchanging keys with OcktoCopied!
After converting to the PEM format, the generated public key (i.e. ockto_open_banking_request_signing_key.pem) can be shared with Ockto. The exchange of keys will be coordinated by your account or implementation manager. Ockto will configure the public key and only then it will be possible to start making requests to the APIs.