Paypal Pro 10002:Security error Security header is not valid
Posted by Thomas Burscheid on 25 October 2011 06:58 PM

Why do I get a 10002:Security error Security header is not valid when Paypal Pro is activated?

You need a different API credentials for sandbox. The live API credentials is a only for production.

You can create a sandbox account and generate API credentials from the steps below:
Go to and login
Click on Test Accounts link
Click on 'Preconfigured' next to Create Account
Select United States for the country
Select Seller for the Account type
Enter a login email and a very simple password
Select Visa for the card type and select Yes to add a bank account
Enter 100 for the Account balance
Click on Create Account

** If you get an error message about the account creation failed, logout, clear your browser cache and cookies and try again ****

Once the account is created, select it and click on Enter Sandbox Test Site
Click on Merchant services
Click on Website Payments Pro
Click on Submit / Accept billing agreement
Follow the steps on the page to complete the billing agreement
To generate the API credentials
Login to the sandbox account
Click on Profile
Click on API Access
Click on Request API credentials / View API Certificate
Follow the steps to generate an API signature or API certificate.
* If you have an API signature and you want an API certificate, remove the credentials and request the right one. Note, removing the credentials will disable that credentials if in use.

Also make sure you are using the right API endpoint
Environment Authentication Calling Endpoint
Live API Certificate Name-Value Pair
Live API Signature Name-Value Pair
Live API Certificate SOAP
Live API Signature SOAP
Sandbox API Certificate Name-Value Pair
Sandbox API Signature Name-Value Pair
Sandbox API Certificate SOAP
Sandbox API Signature SOAP

(4 vote(s))
Not helpful

Comments (0)
Post a new comment
Full Name:
CAPTCHA Verification 
Please enter the text you see in the image into the textbox below (we use this to prevent automated submissions).