Re: Credit Card Processing and PCI compliancy on the Power i

As others have mentioned, moving to a portal type credit card processing is
your best bet. Then you don't have to worry about anything except having a
valid SSL certificate for your callback server for the transaction.

All of the customers I work with do this, and it's quite painless.
Normally you direct them to the 3rd party's landing page (which most can
make look like your web site) where the cc processing is done. They pass
back information when it's done as to if it was complete or not.

Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #19 <https://www.bvstools.com/mailtool.html>: The ability
to turn off "Strict SSL" settings. This means no importing Certificate
Authorities (CAs) unless you want to.

On Tue, Dec 4, 2018 at 9:07 PM Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

Anyone from the group processing credit cards on the i?

Currently, we do NOT use any credit card terminal devices.
Currently, card data is entered either via green screen application, gui
application, IVR, WEB.

We were informed by our processer today that going forward we need to
consider having ALL card data entered via a wireless device connected to
a separate network, (no longer from any PC device, or any device connected
to the I, or the I network) that connects to a cloud based authorizer,
and then returns a token back to the I, which in turn is then stored in the
I application, to keep the I out of PCI scope and to remain PCI compliant.

Going forward, all current credit card touch points (green screen
application, gui application, IVR, WEB) would need changes to stay
compliant.

Have others in the group had to deal with this issue and what solutions
have anyone implemented?

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com