Not concerned... I do not, nor will I ever store cardholder data on ANY of our systems.
I just don't want to write the code. I don't have time.
I implemented JetPay (now NCR) many years ago… so I’m well versed with all the PCI-DSS requirements (that's why I chose JetPay).
We are card-not-present. The transactions are B2B (businesses not consumers). About 7% of our orders are taken over the phone and keyed into our ERP. With card orders, the CSR take the cardholder info (by phone) and keys it into a JetPay terminal window (5250) that tokenizes the card and stores it on THEIR server (they are the processor). It returns the token & customer number to our system – that’s the only thing stored. But it’s the processor’s software, not mine, and it’s certified PCI compliant.
We don’t charge the card until we ship… that could be weeks or months. We don’t authorize until we’re ready to ship. The token is used by our OE system to AUTH before a shipping order (pick ticket) is created. The pick is not generated until a successful auth is created. Once shipped, the amount invoiced is settled in batch each night and the cash is applied to the invoice. All of this occurs w/out any user intervention. I wrote all this code - integrating it with our ERP.
But NCR/JetPay can’t currently do transactions in Canadian dollars – I mean, actually settle in a currency other than USD. We have an asinine sales agency that is requiring this for their customers.
I looked at the Authorize.net APIs. Yes, I could call those from RPG. They also have SDK’s for Java, Node, etc. But I’ve never used an SDK written in another language, and called it from RPG.
So I was hoping someone already did this on the IBM i where I wouldn't have to reinvent the wheel.
Greg
-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Jim Franz
Sent: Tuesday, December 12, 2023 11:31 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Authorize.net payment gateway
i think a bigger question (its not just the mechanics of the code) is if you are bringing credit card info onto the ibm i server then you may fall into the PCI Audit requirements which open up requirements for both your servers and the entire network it sits in...
We chose to have an external vendor who was already handling card traffic and was PCI compliant - we get a response back from the vendor and never touch the card info - they do..
Several software vendors may be pci compliant, but your the one that gets audited, and there is a requirement for the isolation of the card process from other servers/apps.
Jim Franz
On Tue, Dec 12, 2023 at 10:06 AM Greg Wilburn < gwilburn@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
Has anyone interfaced the IBM i with Authorize.net?
Is there a software package we could buy accomplish this?
We have a need... but I'm really not interested in writing the code
from scratch.
TIA,
Greg
[Logo]<https://www.totalbizfulfillment.com/> Greg Wilburn
Director of IT
301.895.3792 ext. 1231
301.895.3895 direct
gwilburn@xxxxxxxxxxxxxxxxxxxxxxx<mailto:gwilburn@totalbizfulfillment.c
om>
1 Corporate Dr
Grantsville, MD 21536
www.totalbizfulfillment.com<http://www.totalbizfulfillment.com>
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.
midrange.com
