




















































































Epicor iScala is an ERP designed for mid-sized international companies, providing finance, supply chain, manufacturing, CRM, and HR with strong multi-currency and multi-language support.
Have any questions? We’re here to help You
API tokens must be stored securely and should never be exposed on the client side or in public repositories. Store tokens in secure environment variables or dedicated secrets management systems like AWS Secrets Manager, HashiCorp Vault, or Azure Key Vault. Never hardcode tokens in application code or commit them to version control. Implement proper access controls so only authorized services can access stored tokens. For production environments, use separate tokens from development/testing environments. Rotate tokens periodically and immediately revoke tokens if you suspect they've been compromised. Makini tokens provide access to customer data, so treat them with the same security standards you'd apply to database credentials.
You need two essential prerequisites:
Administrator access to your NetSuite account
API Integration enabled in your NetSuite account
You have two options:
• Option A: Upload the Makini public certificate (available in the Resources section of the guide)
• Option B: Generate your own self-signed certificate using OpenSSL and upload the public key to NetSuite
Use the following OpenSSL command to generate both private and public keys:
openssl req -new -x509 -newkey rsa:4096 -keyout private.pem -sigopt rsa_padding_mode:pss -sha256 -sigopt rsa_pss_saltlen:64 -out public.pem -nodes
Upload the public.pem to NetSuite and keep the private.pem secure for use in Makini Link.
