Managing Encryption Keys
To create a Webhooks Platform subscription, you will need to generate an asymmetric key pair and upload the public key to the Webhooks website during subscription creation.
Note: This public key will be sent to Microsoft Graph during subscription creation and the key will be used to encrypt the data before it is sent to cloud infrastructure, i.e., only Private Key holders will be able to decrypt the notifications sent by Microsoft Graph. does not have access to the private key.
To manage Encryption keys:
-
Obtain a certificate with a pair of asymmetric keys:
-
You can self-sign the certificate, since Microsoft Graph does not verify the certificate issuer, and uses the public key for only encryption
-
The key must be of type RSA
-
The key size must be between 2048 and 4096 bits
-
-
Export the certificate in base64-encoded X.509 format and upload it during Globanet Webhooks subscription creation.
-
Export the private key and install it on the server that will be used to capture data gathered by the Webhooks Platform.
Related information