Getting Started Guide

Transcription

1

2 Page 2 of 9 Introduction This guide is designed to provide you with the information you need to complete your Payment Gateway account set up and begin processing live payment transactions. As a quick overview, your Payment Gateway service provider initiates your account setup. After receiving your general and billing information, the reseller will provide you with a Merchant Interface Login ID and temporary password. Using this merchant Login ID and temporary password, you can log into the Merchant Interface to complete setup and activate your new Payment Gateway account. Activating Your Account The Merchant Interface is your most useful tool when it comes to configuring and protecting your Payment Gateway account. Through the Merchant Interface you can view and search current and settled transactions, change account and security settings, and even process transactions manually using the Virtual Terminal and Upload Transaction File features. Changing the Temporary Account Password Upon signing up, your Payment Gateway reseller will issue you a Merchant Interface Login ID and a temporary password. At your first login, you will be prompted to change the temporary password provided to you by your reseller. Enter the temporary password, the new desired password, and confirm the new desired password. Moving forward, you will need to use the new password to access the Merchant Interface. Note: It is strongly recommended that you keep your account password a secret and change it often. Please select passwords using the following guidelines. Password Policy Your Authorize.Net merchant account password is the primary means for protecting your account from unauthorized activity. Accordingly, you should choose your password very carefully. Use something that cannot be easily guessed. The following requirements are in place to help you choose a strong password. Your password must be at least seven characters in length. Longer passwords may be even stronger. Your password must include upper case letters (A, Z), numbers (3, 8), AND nonalphanumeric symbols (@, #). Your password may not be a standard dictionary word, even if it is spelled backwards. Your password may not be the same as your login ID. Your password may not be blank. You may not reuse any of your previous five passwords.

3 Page 3 of 9 Please also consider the following guidelines for safeguarding your password and increasing the security of your Authorize.Net account. Your password should not contain any information about you that can be easily discovered, such as a spouse or child s name, a license plate or street address number. Do not share your password with anyone. If you have reason to believe that your password may have become compromised, change it immediately. Do not write your password down. Keep it in memory only. If you absolutely must write your password down, store it in a secure location accessible only to you. Do not enable settings that allow your Web browser to remember your password. If for any reason you need to share your password, do so only in person or over a live phone call with an authorized person. Never share your password via or voice mail. Never display or transmit your password in any communication or online transmission (other than when logging into your account). Never share your login ID and password in the same communication. To further safeguard your account, the Merchant Interface imposes the following restrictions: You must provide your current password before you may specify a new password. If you cannot remember your current password, you will need to call Customer Support to have your password reset. Customer Support will first authenticate your identity and then provide you with a temporary password that must be changed upon your next login. After five unsuccessful login attempts, you will be locked out of your account. It is strongly recommended that you implement a policy for changing your Authorize.Net password. The following is a list of guidelines for when you should change your password: As a general security measure, you should change your password on a regular basis. Authorize.Net recommends you change your password at least every 60 days. You should change your password every time an employee with access to your password leaves the company or is terminated. Change your password immediately if you have any reason to believe that your account is compromised. Change your password immediately if you notice any suspicious transaction activity on your account. Verifying Account Information After changing the temporary password, you will need to: Verify your identity by entering your social security number or Tax ID number Verify account information as previously set up by the reseller Provide an accurate primary phone number and address Note: It is very important to enter an active, administrative address, as this will be the primary method of contact for communicating information about changes to your account and the Payment Gateway.

4 Page 4 of 9 Select the time zone in which your business operates Enter your business URL (website address) Answer a couple questions about your business products and website If all of the information on this page is complete and accurate, you must verify by selecting the Yes, all the above information is correct check box. If any information listed on this page is incorrect, please contact Customer Support to update this information. Note: It is important that the person completing the merchant setup is authorized by the merchant company to do so, as he or she will be required to accept the terms and conditions of the online Payment Gateway Service Agreement, and also verifies confidential payment and account information for the company. Reading and Accepting the Online Payment Gateway Service Agreement At this point, you will be asked to carefully read and accept the online Payment Gateway Service Agreement. To verify that you have read the agreement, and to verify your identity, you will be required to enter your name and social security number or Tax ID number. You will also be asked to select a check box indicating that you have the authority to accept the terms and conditions of the agreement on behalf of the merchant, or company. Reading and Accepting the echeck.net Standard Terms (if applicable) If you have also signed up for an echeck.net account, you will also be required to accept the echeck.net Standard Terms. To verify that you have read the agreement, and to verify your identity, you will be required to enter your name and social security number or Tax ID number. You will also be asked to select a check box indicating that you have the authority to accept the terms and conditions of the agreement on behalf of the merchant company. At this point you will be required to print the echeck.net Standard Terms, and send it in along with the rest of the required documentation listed on the echeck.net Application and Signature Card (included at the end of the echeck.net Standard Terms). Please note that your echeck.net account will not be activated until your echeck.net Application and Signature Card and the accompanying required documentation is received and processed. If you have signed up for echeck.net, but wish to decline the echeck.net Standard Terms at this time, you may do so and still be able to process credit card transactions. However, to activate your echeck.net account in the future, and be able to process echeck transactions, you will be required to accept the echeck.net Standard Terms.

5 Page 5 of 9 Reading and Accepting the Automated Recurring Billing (ARB) Service Addendum (if applicable) If you have also signed up for the Automated Recurring Billing (ARB) service, you will also be required to accept the ARB Service Addendum, or terms of service. You will be asked to select a check box indicating that you have read and understand the terms of service. Please also be sure to review your ARB setup and monthly fees. There is no additional per-transaction fee for the ARB service. Note: If The ARB fees are displayed as $0.00, it is possible that your service provider or a third party bills you directly. In this event, please contact your service provider to inquire about your ARB fees. Once you click I Agree, your account is enabled for the ARB service, and you may create recurring billing subscriptions as soon as you finish account setup. Payment Authorization Next, you will be required to verify bank and payment information as previously setup by the reseller, including: Bank branch information Bank account information Schedule to debit bank account for billing purposes Credit card information (in the event that your primary bank account cannot be debited) You will be required to enter your name and title here to verify that you are authorized to accept and enter information on behalf of the merchant, or company. Completing Account Survey Pages After completing Payment Gateway account setup, you will be asked to complete a couple of survey pages about your use of shopping carts and web development tools. This information will help the Payment Gateway understand your level of web development for submitting transaction information. You will also be asked to select a secret question and provide the secret answer to the selected question. It is very important that you remember, safely store if necessary, and safeguard your secret answer, as it will be essential to granting you access to certain security features in the Merchant Interface, and is also used by Customer Support to verify your identity. Also, please be aware that the secret answer is case sensitive.

6 Page 6 of 9 Configuring Your Account Once you have completed the survey pages, you can configure your Payment Gateway account to match your business practices and transaction policies. Although verifying and entering account and billing information for your account is complete, there are a few default account settings that you need to be aware before submitting live transactions to the Payment Gateway. There are also various Payment Gateway account security features to help you safeguard your account from unauthorized transaction activity. Test Mode All new Payment Gateway accounts start out in Test Mode. Test mode secures your account while testing your integration to the Payment Gateway. (For more information about integration to the Payment Gateway, see the Choosing a Connection Method section of this document.) Test transactions submitted while the account is in Test Mode are not live, and do not actually charge real credit cards. Once your integration to the Payment Gateway has been successfully tested, you can turn Test Mode OFF in the Merchant Interface to begin processing live transactions. You can also use Test Mode as a safeguard from unauthorized account activity. Test Mode can be turned ON at any time to help you monitor suspicious activity on your account. The Test Mode setting is found in the General section of the Merchant Interface Settings menu. Password-Required Mode New Payment Gateway accounts are configured to Password-Required Mode. When an account is designated as Password-Required, no transaction can be processed without also providing the account password or transaction key. This mode prevents transactions from being completed with only the Login ID to validate you as the merchant. Password-Required Mode is highly recommended (and will eventually be required) for all Merchants who connect to the Payment Gateway using Advanced Integration Method (AIM) (previously known as ADC Direct Response) or Simple Integration Method (SIM). DO NOT use Password-Required Mode with the WebLink or Relay Response connection methods. The Password-Required Mode setting is found in the Transaction Submission section of the Merchant Interface Settings menu. Note: To use Password-Required Mode with a shopping cart, you should contact your shopping cart provider and request that they enable the cart to pass the Payment Gateway password (or fingerprint for SIM) with every transaction. See the Choosing a Connection Method section of this document for more information about AIM and SIM.

7 Page 7 of 9 Transaction Cut-Off Time This setting allows you to specify the daily cut-off time for the last transaction to be picked up for settlement. At this time, the day s batch of transactions will be submitted for settlement. Transactions submitted after the specified cut-off time will be submitted for settlement with the next day s batch at the specified cut-off time. The Transaction Cut-Off setting is found in the General section of the Merchant Interface Settings menu. Address Verification System (AVS) Address Verification System (AVS) is a verification system that compares the billing address information provided by the customer online with the billing address on file at the customer s credit card issuing bank. The Payment Gateway reports the AVS response code (match or no match). After screening for the AVS response codes that you have specified to allow through the address verification system, the transaction is accepted or rejected accordingly. For newly created merchant accounts, AVS settings are defaulted to reject any transaction that does not have a street address and/or ZIP code match. By default, all international cards are also rejected. You can configure AVS settings for your Payment Gateway account in the Security section of the Merchant Interface Settings menu. Card Code Verification Card Code (CVV2/CVC2/CID) is a three-digit security code that is printed on credit cards. The value appears in reverse italic at the top of the signature panel on the back of the card, or on the front of the card just above the end of the credit card number. These additional numbers provide an extra measure of security against unauthorized credit card transactions. The credit card would need to be present for the purchaser to know the Card Code number, as it is not stored on any system outside of the credit card issuer. The Payment Gateway allows you to customize your account so that the system rejects transactions where the Card Code provided by the cardholder is invalid. By using the Card Code filter, you are able to make a more informed decision about whether to accept a particular credit card transaction. You can configure Card Code settings for your Payment Gateway account in the Security section of the Merchant Interface Settings menu. Using the Merchant Interface Once you ve customized your default account settings to fit your specific business needs, and have successfully tested transactions in Test Mode, you are ready to submit live transactions to the Payment Gateway. The Merchant Interface will be a tool for you to manage your account,

8 Page 8 of 9 change security settings, and even submit transactions manually if you need to through the Virtual Terminal and Upload Transaction File features. Navigating the Merchant Interface The Merchant Interface Main Menu consists of the following: Virtual Terminal. Submit transactions manually through an online virtual terminal. Upload Transactions. Upload a file containing a batch of transactions to the Payment Gateway for processing. Unsettled Transactions. View transactions not yet submitted for settlement. Here you can void or capture transactions. Search and Download. Find detailed information about unsettled, settled, and voided transactions. Reports. Generate reports for transaction activity on your account. Statements. View Payment Gateway billing statements online. Announcements. Read information about Payment Gateway changes, enhancements, system downtime, and other important information. Settings. Access all of your general account and security settings, such as Transaction Cut-Off Time, Password-Required Mode, and Card Code settings. Agreements. View Payment Gateway Service Agreements. Help. Access Merchant Interface Online Help Files, documentation, and reference guides for understanding the features of your Payment Gateway account. Contact Support. Submit questions about your account to Customer Support. Help Using the Merchant Interface To get help using the Merchant Interface, and for more information about settings and features, please refer to the Online Help Files. You can access task-specific help files from any taskoriented screen in the Merchant Interface. Or, you can access all Merchant Interface Online Help Files in the Documentation and Reference Guides section of the Merchant Interface Help Menu. Choosing a Connection Method A connection method is a set of implementation requirements for submitting transactions directly from your e-commerce website to the Payment Gateway. There are a few different ways in which information can be submitted. The current acceptable connection methods are: Simple Integration Method (SIM). SIM is designed to provide a high level of security while requiring only intermediate web development. Advanced Integration Method (AIM). The preferred connection method, AIM facilitates the highest security for transactions submitted using a merchant-initiated, direct SSL connection to the Payment Gateway.

9 Page 9 of 9 For detailed information and help deciding which connection method you should use, see the WebLink Conversion Guide. AIM and SIM Implementation Guides can be accessed in the Documentation and Reference Guides section of the Merchant Interface Help menu. Alternative Hosting Solutions for Merchants Shopping Cart Solutions In association with choosing a connection method, shopping carts can be a very viable solution. Shopping carts are Internet companies that host payment forms for merchant websites. If you cannot easily comply with the highest web development and security requirements of the AIM connection method, shopping carts allow you to submit transactions securely without actually having to upgrade web systems and security. For more information about shopping carts, view the list of Authorize.Net-certified shopping carts at Maintaining Account Security Maintaining security for your Payment Gateway account is the most important way to safeguard yourself and your customers from unauthorized transaction activity. The connection method you choose has several different options for increasing the security of transactions you submit to the Payment Gateway. These options can be selected and configured for your account through the Merchant Interface. Optimal security, in some cases, can be as simple as storing a password safely, or changing it on a regular basis. To learn more about how you can enhance and maximize security for your account, read the Security Best Practices White Paper. Customer Support If you have any problems integrating to a connection method, logging into the Merchant Interface, or configuring your account you can contact the Customer Support department of your Merchant Service Provider or Reseller. You can also access Payment Gateway Customer Support in the Support Services section of the Merchant Interface Help menu.