{"id":3155,"date":"2020-04-17T15:36:23","date_gmt":"2020-04-17T15:36:23","guid":{"rendered":"https:\/\/answers.gurussolutions.com\/answers\/how-to-securely-store-and-use-secret-keys-for-encryption-in-netsuite-apis-2\/"},"modified":"2026-07-28T18:25:32","modified_gmt":"2026-07-28T18:25:32","slug":"comment-stocker-et-utiliser-en-toute-securite-les-cles-secretes-pour-le-chiffrement-dans-les-api-netsuite","status":"publish","type":"qa_entry","link":"https:\/\/answers.gurussolutions.com\/fr\/answers\/comment-stocker-et-utiliser-en-toute-securite-les-cles-secretes-pour-le-chiffrement-dans-les-api-netsuite\/","title":{"rendered":"Comment stocker et utiliser en toute s\u00e9curit\u00e9 les cl\u00e9s secr\u00e8tes pour le chiffrement dans les API NetSuite ?"},"content":{"rendered":"","protected":false},"template":"","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","ga_subtitle":"NetSuite fournit des m\u00e9canismes permettant de g\u00e9rer et d\u2019utiliser en toute s\u00e9curit\u00e9 les cl\u00e9s secr\u00e8tes sensibles pour le chiffrement HMAC dans les appels d\u2019API, garantissant ainsi l\u2019int\u00e9grit\u00e9 des donn\u00e9es et l\u2019authentification.","ga_short_answer":"Pour g\u00e9rer en toute s\u00e9curit\u00e9 les cl\u00e9s secr\u00e8tes destin\u00e9es au chiffrement HMAC dans NetSuite, \u00e9vitez de les stocker en texte clair. Utilisez plut\u00f4t les options de stockage s\u00e9curis\u00e9 de NetSuite, telles que les secrets API ou les champs d\u2019identifiants (GUID), afin de r\u00e9cup\u00e9rer et d\u2019utiliser ces cl\u00e9s avec le module N\/crypto pour le chiffrement.","ga_scenario":"Les organisations ont souvent besoin d\u2019utiliser une cl\u00e9 secr\u00e8te pour chiffrer une cha\u00eene de caract\u00e8res \u00e0 l\u2019aide de l\u2019algorithme HMAC, laquelle est ensuite transmise sous forme d\u2019en-t\u00eate dans un appel d\u2019API \u00e0 des fins de s\u00e9curit\u00e9 ou d\u2019authentification. Le d\u00e9fi consiste \u00e0 stocker et \u00e0 r\u00e9cup\u00e9rer cette cl\u00e9 sensible en toute s\u00e9curit\u00e9 au sein de NetSuite.","ga_solution":"NetSuite ne stocke pas les secrets en texte clair sur ses serveurs. Pour g\u00e9rer et r\u00e9cup\u00e9rer en toute s\u00e9curit\u00e9 les secrets sensibles des clients, les administrateurs peuvent utiliser la fonctionnalit\u00e9 \u00ab API Secrets \u00bb de NetSuite ou cr\u00e9er un GUID dans un champ d\u2019identifiants. La fonctionnalit\u00e9 \u00ab API Secrets \u00bb fournit un coffre-fort s\u00e9curis\u00e9 d\u00e9di\u00e9, tandis que les GUID issus des champs d\u2019identifiants permettent \u00e9galement \u00e0 NetSuite de r\u00e9cup\u00e9rer le secret en toute s\u00e9curit\u00e9. Le processus comporte deux \u00e9tapes principales : 1.  **Stockage s\u00e9curis\u00e9 de la cl\u00e9 secr\u00e8te :** NetSuite recommande d\u2019utiliser les \u00ab API Secrets \u00bb (Configuration > Soci\u00e9t\u00e9 > Pr\u00e9f\u00e9rences > API Secrets) pour un stockage s\u00e9curis\u00e9 d\u00e9di\u00e9, en r\u00e9f\u00e9ren\u00e7ant les secrets par leur identifiant de script. Il est \u00e9galement possible de g\u00e9n\u00e9rer un GUID et de le stocker dans un champ d\u2019identifiants, souvent <a class=\"ga-interlink\" href=\"https:\/\/answers.gurussolutions.com\/fr\/answers\/best-practices-for-redirecting-to-suitelets-in-netsuite-suitescript-2-x\/\">g\u00e9r\u00e9 via un Suitelet<\/a>. En cas d\u2019utilisation d\u2019un GUID, le param\u00e8tre `restrictToScriptIds` doit inclure les identifiants de tous les scripts autoris\u00e9s \u00e0 l\u2019utiliser. Bien que les exemples externes sp\u00e9cifiques ou les noms de r\u00e9f\u00e9rentiels internes puissent varier, le principe fondamental consiste \u00e0 g\u00e9n\u00e9rer et \u00e0 stocker en toute s\u00e9curit\u00e9 une r\u00e9f\u00e9rence \u00e0 la cl\u00e9 secr\u00e8te.2.  **Effectuer le chiffrement :** Une fois la cl\u00e9 secr\u00e8te stock\u00e9e en toute s\u00e9curit\u00e9 et accessible, le module N\/crypto peut \u00eatre utilis\u00e9 pour le chiffrement. Les \u00e9tapes g\u00e9n\u00e9rales du chiffrement sont les suivantes :\n1.  R\u00e9cup\u00e9rez la cl\u00e9 secr\u00e8te \u00e0 l\u2019aide de sa r\u00e9f\u00e9rence s\u00e9curis\u00e9e (par exemple, l\u2019identifiant du script API Secret ou un GUID).\n2.  Cr\u00e9ez l\u2019objet de chiffrement, HMAC ou de hachage souhait\u00e9 et s\u00e9lectionnez l\u2019algorithme appropri\u00e9.\n3.  Transmettez la cha\u00eene d\u2019entr\u00e9e \u00e0 la fonction de chiffrement, HMAC ou de hachage.\n4.  G\u00e9n\u00e9rez la cha\u00eene chiffr\u00e9e. Il est essentiel de s\u00e9lectionner le bon encodage \u00e0 chaque \u00e9tape du processus. Reportez-vous \u00e0 la documentation du module N\/crypto pour obtenir des exemples d\u00e9taill\u00e9s et conna\u00eetre les fonctions disponibles.","ga_source_author":"Geoffrey Wagner","ga_source_author_email":"","ga_date_original":"2020-04-17T08:36:23-07:00","ga_date_verified":"2026-07-05","ga_source_subject":"Secret Keys, Encryption & Decryption","ga_ans_id":"ANS-1416","ga_publish_decision":"publish_with_edits","ga_staleness_risk":"medium","ga_review_priority":"spot_check","ga_tier2_verdict":"partially_outdated","ga_tier2_concerns":"The specific netsuite.custhelp.com URLs (a_id\/49441 and a_id\/43734) are likely outdated and may no longer point to the exact content or even exist.; The reference to 'SVN for the scripts: CTG_SSU_PasswordGUID or FAO_SSU_PasswordGUID' cannot be verified as these likely refer to internal or older repository names.; The statement 'You must create a GUID... which allows NS to retrieve the customer secret' is partially outdated. While GUIDs from credential fields are still a valid method, NetSuite has introduced 'API Secrets' (Setup > Company > Preferences > API Secrets) as a dedicated secure vault for storing and referencing secrets by their script ID, offering an alternative to GUIDs.","ga_final_category":"SuiteScript Development","footnotes":""},"ga_category":[108,23,108],"ga_audience":[10],"ga_difficulty":[94],"class_list":["post-3155","qa_entry","type-qa_entry","status-publish","hentry","ga_category-developpement-suitescript","ga_category-suitescript-development","ga_audience-developer-suitescript","ga_difficulty-avance"],"taxonomy_info":{"ga_category":[{"value":108,"label":"D\u00e9veloppement SuiteScript"},{"value":23,"label":"SuiteScript Development"},{"value":108,"label":"D\u00e9veloppement SuiteScript"}],"ga_audience":[{"value":10,"label":"Developer\/SuiteScript"}],"ga_difficulty":[{"value":94,"label":"Avanc\u00e9"}]},"featured_image_src_large":[],"author_info":[],"comment_info":"","_links":{"self":[{"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/qa_entry\/3155","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/qa_entry"}],"about":[{"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/types\/qa_entry"}],"version-history":[{"count":1,"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/qa_entry\/3155\/revisions"}],"predecessor-version":[{"id":5075,"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/qa_entry\/3155\/revisions\/5075"}],"wp:attachment":[{"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/media?parent=3155"}],"wp:term":[{"taxonomy":"ga_category","embeddable":true,"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/ga_category?post=3155"},{"taxonomy":"ga_audience","embeddable":true,"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/ga_audience?post=3155"},{"taxonomy":"ga_difficulty","embeddable":true,"href":"https:\/\/answers.gurussolutions.com\/fr\/wp-json\/wp\/v2\/ga_difficulty?post=3155"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}