My point is, if NetSuite says you need to have a Suitelet to generate a GUID and encrypt and create the SHA256, then you have to do it regardless if that make sense or not.