When signature is required to be generated, API Secret will be used to determine authenticity. The API Secret can also be obtained from Merchant portal > Development > Setting page.