Transaction Security Requirements


Security Requirements

This section allows you to increase your transaction security by requiring that more information be submitted with each transaction and/or disabling methods of submitting transactions. Submitting a transaction without required information or using a disabled method will result in an error, and the transaction will not be sent for processing.

Additional requirements:

IP Address - checking this box will require that a registered IP Address is passed with your transactions. IP Addresses can be registered in the “Add IP Addresses” section of the Security Administration Area.

Please note: we do not recommend checking to require IP Address being sent if you submit transactions using Smart Screens order forms or Direct Method unless you can register the IP Address of each person submitting the transactions (this is not likey if your forms are on a public web site).

Password - checking this box will require that a password for your account is passed with your transactions. This does not need to be the password for your main account username. You can create an additional password (to be used only for submitting transactions) in the “Remote Client Password” section of the Security Administration Area.

Disabling Interfaces:

Checking any boxes in this section will disable processing through the selected interface(s). Checking boxes of methods that you do not use might decrease your risk of fraud.

Remote Client - includes transactions sent using an API or remotely POSTed to our remote client script.

Please note: disabling Remote Client here might prevent your 3rd party shopping cart from working if it was integrated to our gateway using a remote method. If you are using a 3rd party shopping cart, please contact your shopping cart provider to find out if this is how they integrated before you check this box.

POS Terminal - refers to a standalone point-of-sale terminal that submits transactions to our gateway (not a card-swipe wedge).

Direct Method - includes any transaction sent to our auth.cgi and pay.cgi scripts as defined in the Integration Specifications document; this includes transactions submitted using an order form created with the “Generate Order Forms” wizard.

Virtual Terminal - transactions submitted using the form accessible by clicking the link “Virtual Terminal” from your Merchant Administration Area.

Batch Files - batch files submitted using either the Upload Batch section (in the Transaction Administration Area) or using a remote client.