Using McAllister Payment Slutins and Updating t AVImark versin 2009.0.0.7263 Befre the cnfiguratin f McAllister Payment Slutins (MPS) and AVImark, the McAllister Payment Slutins PA-DSS Implementatin Guide must be reviewed in its entirety and referenced during the cnfiguratin. If yu are currently using McAllister Payment Slutins as yur integrated credit card prcessing slutin, we wuld like t make yu aware f sme changes and additins that are nw available fr MPS. Prir t a vluntary security audit which MPS has recently undergne and cmpleted, we tk the pprtunity t implement additinal security and prcessing features making MPS an even mre secure and rbust prcessing slutin fr yur practice. These security features and prcessing enhancements have brught alng changes that yu as an existing MPS merchant need t be aware f befre updating t the new AVImark versin 2009.0.0.7263. Belw we have listed a few pieces f infrmatin and updating tips t keep in mind while updating. The first step which must be taken, befre updating t the AVImark versin 2009.0.0.7263 and viewing the new MPS features, is that the user must be lgged int AVImark. Due t security requirements and the need t always recrd the user wh is prcessing credit cards, MPS will nt allw credit card transactins t be prcessed withut being lgged int AVImark. During the update prcess t AVImark versin 2009.0.0.7263, yu will be prmpted with a MPS Lgin windw. This windw will require several pieces f infrmatin t be entered: McAllister Payment Slutins Inc. is a registered ISO/MSP with First Natinal Bank f Omaha 1
Username: This username is ne f the several new security features implemented fr the prtectin f yu and yur practice. Requires a minimum f at least six characters. Passwrd: Accrding t the PCI-DSS security standards Requires a minimum f at least eight characters Requires bth numeric and alphabetic characters (case sensitive) Requires a new passwrd that is nt the same as any f the last fur passwrds used Will autmatically be reset every 90 days E-mail: This e-mail address will be used t send a temprary MPS passwrd t shuld yur MPS username and/r passwrd ever be lst r frgtten. Security Questin and Yur Answer: This questin and answer will be used as a security measure shuld the MPS username and/r passwrd ever be lst r frgtten, and a temprary passwrd is needed. McAllister Payment Slutins Inc. is a registered ISO/MSP with First Natinal Bank f Omaha 2
Befre the MPS username and/r passwrd can be reset and a temprary passwrd emailed, the user will be required t supply the crrect answer t the security questin. E-mail Setup: This e-mail setup infrmatin will be required in rder fr a temprary MPS passwrd t be sent shuld the MPS username and/r passwrd ever be lst r frgtten. SMTP Server: Updating Tip: If yur AVImark is currently setup t send e-mail, this piece f infrmatin can be btained frm the Optins Maintenance area by searching fr SMTP. Lcate the SMTP Server Name ptin and cpy the infrmatin listed. SMTP Prt: Updating Tip: If yur AVImark is currently setup t send e-mail, this piece f infrmatin can be btained frm the Optins Maintenance area by searching fr SMTP. Lcate the SMTP Prt ptin and cpy the infrmatin listed. Username: This username will nly be needed if the SMTP server requires a user t lgin befre e-mail can be sent. Updating Tip: If yur AVImark is currently setup t send e-mail, this piece f infrmatin can be btained frm the Optins Maintenance area by searching fr SMTP. Lcate the SMTP User Name ptin and cpy the infrmatin listed. Passwrd: This passwrd will nly be needed if the SMTP server requires a user t lgin befre e-mail can be sent. Updating Tip: If yur AVImark is currently setup t send e-mail, this piece f infrmatin can be btained frm the Optins Maintenance area by searching fr SMTP. Lcate the SMTP Passwrd ptin and cpy the infrmatin listed. Selecting OK n the MPS Lgin windw will save the MPS settings and display a message indicating: MPS is nw setup. Please restart AVImark fr changes t take effect. Once the MPS Lgin settings have been entered and AVImark has been restarted, a new icn will be displayed within yur system tray. Dubleclicking n this icn will display the new MPS windw. McAllister Payment Slutins Inc. is a registered ISO/MSP with First Natinal Bank f Omaha 3
All MPS ptins which were previusly available within AVImark (such as Acceptr ID, Accunt ID, Accunt Tken, Enable AVS, etc) will nw be lcated within this separate MPS.EXE. Selecting the Optins buttn will require the user t enter their MPS username and passwrd which was specified earlier during the update prcess. Once inside the Optins area, three tabs will be available cntaining essential MPS infrmatin and ptins: General, Dialup, and Devices. McAllister Payment Slutins Inc. is a registered ISO/MSP with First Natinal Bank f Omaha 4
General: Accunt ID, Accunt Tken, and Acceptr ID: These necessary pieces f infrmatin will be autmatically ppulated during the AVImark update prcess using the infrmatin which was previusly stred within AVImark. Enable AVS Authrizatin: Depending n hw this ptin was previusly set in AVImark (True r False), this ptin will be autmatically checked (True) r unchecked (False). Attempt Dialup If Needed: This ptin will be autmatically set depending n hw it was previusly setup in AVImark. Nte: This ptin is checked when a dial-up internet cnnectin is wished t be used as an autmatic backup t a failed bradband cnnectin. Selecting this ptin will display a cnfirmatin message at the time f prcessing if an internet cnnectin cannt be lcated. On Accunt Type Mismatch: This is a new ptin allwing the user t select the desired respnse when a swiped r hand-keyed card type des nt match the selected card type. Dialup: If the Attempt Dialup If Needed, fund n the General tab, is checked, the fllwing infrmatin will be required: Phne Number: This is the phne number yur mdem will need t dial t reach yur internet prvider. Username: Passwrd: Devices: The prcessing hardware which was installed earlier will nw need t be specified within this tab. McAllister Payment Slutins Inc. is a registered ISO/MSP with First Natinal Bank f Omaha 5
Since the prcessing hardware is wrkstatin specific, the prcessing hardware which will be used n each AVImark wrkstatin will be required t be selected n each individual wrkstatin. PIN Pad: Verifne MX850: Selecting this device fr the PIN Pad ptin will aut-select it fr the Signature and Card Swipe ptins. Select the Settings buttn and specify the apprpriate COM prt. All ther values can be left as default. Verifne PIN Pad: Select the Settings buttn and specify the apprpriate COM prt. Signature: Verifne MX850: Selecting this device fr the Signature ptin will aut-select it fr the PIN Pad and Card Swipe ptins. Select the Settings buttn and specify the apprpriate COM prt. All ther values can be left as default. Card Swipe: Verifne MX850: Selecting this device fr the Card Swipe ptin will aut-select it fr the PIN Pad and Signature ptins. Select the Settings buttn and specify the apprpriate COM prt. All ther values can be left as default. McAllister Payment Slutins Inc. is a registered ISO/MSP with First Natinal Bank f Omaha 6
Magtek Card Swipe: Selecting this device will nt require any settings t be specified. Frm within the MPS Optins windw, the Edit Lgin buttn can be used t access the required MPS infrmatin specified during activatin f MPS. If the MPS username and/r passwrd are ever lst r frgtten, cntact the AVImark Technical Supprt fr assistance with resetting these pieces f infrmatin. If yu are using the AVImark Site feature, each site can be setup within MPS t prcess credit cards t a unique merchant ID keeping all f yur credit card transactins separate fr each site. T setup the AVImark site feature t prcess using unique merchant IDs, with AVImark pen, duble-click the MPS icn displayed in yur system tray. Selecting the Site menu ptin will display all sites that are currently setup in AVImark. Selecting ne f these sites, and pen the Optins windw using the Optins buttn t specify the apprpriate Acceptr ID, Accunt ID, and Accunt Tken fr this site. All ptins available within the General and Dialup tabs will be specific t the selected site. The infrmatin selected within the Devices tab will be wrkstatin specific rather then site specific. Once all ptins have been set fr the selected site, select OK t prceed t the setup f yur next site. McAllister Payment Slutins Inc. is a registered ISO/MSP with First Natinal Bank f Omaha 7