Re: Credit Card Processing and PCI compliancy on the Power i

[B Stone <bvstone@xxxxxxxxx>]

As others have mentioned, moving to a portal type credit card processing is
your best bet.  Then you don't have to worry about anything except having a
valid SSL certificate for your callback server for the transaction.

All of the customers I work with do this, and it's quite painless.
Normally you direct them to the 3rd party's landing page (which most can
make look like your web site) where the cc processing is done.  They pass
back information when it's done as to if it was complete or not.

Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #19 <https://www.bvstools.com/mailtool.html>: The ability
to turn off "Strict SSL" settings. This means no importing Certificate
Authorities (CAs) unless you want to.

On Tue, Dec 4, 2018 at 9:07 PM Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
wrote:

> Anyone from the group processing credit cards on the i?
>
> Currently, we do NOT use any credit card terminal devices.
> Currently, card data is entered either via green screen application, gui
> application, IVR, WEB.
>
> We were informed by our processer today that going forward we need to
> consider having  ALL  card data entered via a wireless device connected to
> a separate network, (no longer from any PC device, or any device  connected
> to the I, or the I network)  that connects to a cloud  based authorizer,
> and then returns a token back to the I, which in turn is then stored in the
> I application,  to keep the I out of PCI scope and to remain PCI compliant.
>
> Going forward, all current credit card touch points (green screen
> application, gui application, IVR, WEB) would need changes to stay
> compliant.
>
> Have others in the group had to deal with this issue and what solutions
> have anyone implemented?
>
> Thank You
> _____
> Paul Steinmetz
> IBM i Systems Administrator
>
> Pencor Services, Inc.
> 462 Delaware Ave
> Palmerton Pa 18071
>
> 610-826-9117 work
> 610-826-9188 fax
> 610-349-0913 cell
> 610-377-6012 home
>
> psteinmetz@xxxxxxxxxx
> http://www.pencor.com/
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com