Update Guide for The Patron Edge Online 3.41

Update Guide

061410 2010 Blackbaud, Inc. This publication, or any part thereof, may not be reproduced or transmitted in any form or by any means, electronic, or mechanical, including photocopying, recording, storage in an information retrieval system, or otherwise, without the prior written permission of Blackbaud, Inc. The information in this manual has been carefully checked and is believed to be accurate. Blackbaud, Inc., assumes no responsibility for any inaccuracies, errors, or omissions in this manual. In no event will Blackbaud, Inc., be liable for direct, indirect, special, incidental, or consequential damages resulting from any defect or omission in this manual, even if advised of the possibility of damages. In the interest of continuing product development, Blackbaud, Inc., reserves the right to make improvements in this manual and the products it describes at any time, without notice or obligation. All Blackbaud product names appearing herein are trademarks or registered trademarks of Blackbaud, Inc. All other products and company names mentioned herein are trademarks of their respective holder. PEO3412UpdateGuide-2010

Update Guide for The Patron Edge Online 3.41 UPDATE THE PATRON EDGE ONLINE..................1 Pre-update Recommendations..................................... 1 Website Permissions............................................ 3 Installation Requirements......................................... 4 Install the Update................................................ 4 Step 1. Understand the Update Process............................. 5 Step 2. Run the Update.......................................... 5 Rollback and Uninstall........................................... 19 Post Update and Troubleshooting................................. 19 Configure Key Services......................................... 19 Review and Implement PA DSS Management Processes.............. 22 Copy New Screens to Your Interface.............................. 22 Implement Reset Password Usability Improvements.................. 25 Review Your Administration Website User Permissions................ 30 Review Your Public Website..................................... 32 Find Support................................................. 33 NEW FEATURES AND ENHANCEMENTS................35 Password Usability Improvements................................. 35 Automatic Password Validation Disabled By Default................... 36 Reset Password Usability Improvements........................... 37 PA DSS Certification............................................ 38 Alphanumeric Coupon Codes..................................... 39 Same Day Internet Sales......................................... 39 INDEX........................................41

CHAPTER1 Update The Patron Edge Online In This Chapter Pre-update Recommendations on page 1 Installation Requirements on page 4 Install the Update on page 4 Post Update and Troubleshooting on page 19 This guide provides information and procedures for updating to The Patron Edge Online version 3.41. Additionally, the New Features and Enhancements chapter provides information about new features and functionality available in this version of The Patron Edge Online. Before running the update, make sure you have reviewed the pre-update recommendations and installation requirements and followed all that apply to you. If you review the information in this guide and feel unclear about the terminology used, or have limited experience with installations or upgrades, we do not recommend continuing with the update. Pre-update Recommendations To ensure the update of The Patron Edge goes smoothly, consider the following recommendations before you install the update.

2. CHAPTER 1 Warning: You must be on The Patron Edge Online 3.25, 3.255*, 3.33, or 3.35 to update to version 3.41. *(If you are currently using version 3.255 and your upgrade path involved updating from 3.25 to 3.255, do not continue with this update process. Instead, you must uninstall version 3.255 and perform a new install of 3.41. You will be able to keep you current Patron Edge Online database, simply point to it when running the new installation.) You must also ensure your equipment meets all system and free space requirements for the update. To review current system requirements, go to support.blackbaud.com. If your organization has a system administrator, we recommend that they install The Patron Edge Online update. If you do not have a system administrator and are unsure how to proceed, it may be beneficial to have a consultant guide you through the update process. You may also want to consider our hosting services, which provide an efficient and convenient way to realize the benefits of The Patron Edge Online without the maintenance involved with hosting on your own. For more information about consultant services or hosting, send an email request to solutions@blackbaud.com or visit our website at http://www.blackbaud.com/services/overview.aspx. Refer to www.microsoft.com for specific security measures and NTFS permissions needed by Windows 2003 Server and IIS. We are not responsible for the installation, configuration, and testing of any web security measures. We assume no responsibility for the security of your web server and any adverse consequences resulting from security issues. Our software does not establish or modify security on the web server. If we are hosting your Patron Edge Online applications and/or websites, you should not run this update. We will coordinate the installation with you and communicate a plan for the implementation of any components you are required to update at your site. Blackbaud customizations to The Patron Edge Online are currently supported only for subsequent point releases within the major release under which they were developed. All implemented customizations should factor into upgrade considerations since they are not guaranteed to work in future major releases (for example, 3.x to 4.x) and may need to be modified or rewritten depending on changes in product architecture. This is true except in the case of customizations to The Patron Edge Online using ASP technology. Customizations with ASP technology will need to be modified or rewritten, even for point releases. Send an information request to solutions@blackbaud.com or visit the Blackbaud Services page of our website at http://www.blackbaud.com/services/overview.aspx for more information about how we can help with customizations. We do not recommend modifying the default pages of your websites. During the upgrade, any modifications made to the default pages will be overwritten in the PEOSite folder and on your live websites. However, a back-up of your site folder is automatically created during the upgrade so no modifications are lost. By default, the back-up folder is created in the C:\Program Files\Blackbaud\The Patron Edge Online directory and is called backup_3.3.5.0. The name of the folder depends on the version from which you are upgrading. Access SQL Server Enterprise Manager or SQL Server Management Studio and create a backup of your Patron Edge Online database. You must fully understand The Patron Edge Online system requirements and make sure they are met. Visit our website at http://www.blackbaud.com/support/system/system.aspx to access detailed system recommendations. Version 3.41 of The Patron Edge Online has been successfully validated and certified by a Qualified Security Assessor (QSA) to meet the Payment Application Data Security Standard (PA DSS). Developed by Visa, PA DSS requires software companies such as Blackbaud to develop secure programs that enable users to comply with the Payment Card Industry Data Security Standard (PCI DSS). We recommend that you read the Payment Application Data Security Standards Implementation Guide for The Patron Edge Online to learn more about PA DSS and The Patron Edge Online, as well as information about how your organization can become PCI DSS compliant. This guide is available on the user guides page of our website here: http://www.blackbaud.com/support/guides/pe.aspx.

UPDATE THE PATRON EDGE ONLINE. 3 Before installing the update live, we strongly advise running the The Patron Edge Online 3.41 in a test environment using a copy of your Patron Edge Online database. If you run the update live without first verifying compatibility in a test environment, you are taking a risk that could leave your site down! Review the requirements for installing the update. For more information, see Installation Requirements on page 4. We recommend that you read New Features and Enhancements on page 31 to gain a good understanding of the new functionality in version 3.41. With version 3.33 of The Patron Edge Online we implemented a new administration site user interface that changed how user permissions were assigned. If you are not currently using version 3.33 or 3.35, before you update to 3.41 you should review and record your current users and their user permissions. After the update, you will use this information to make sure user permissions in the new administration site are configured as needed. For more information, see Review Your Administration Website User Permissions on page 30. Review the next section, which is Website Permissions, for information about the minimum required NTFS and registry key permissions. Website Permissions The following NTFS and registry key permissions are required for the account used to run your Patron Edge Online website. By default, the IUSER account is used to run the website but this is not required. Minimum Required NTFS Permissions The account used to run the website needs NTFS rights to the directories specified in the following table. This includes all related subdirectories. The directory locations listed assume the default installation location of C:\. If you installed The Patron Edge Online in a different location, the directory locations noted below will be different. Directory C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys Permissions RX, W (During installation) RX (After installation) When adding these NTFS folder permissions, click the Advanced button on the NTFS Properties tab and mark the Reset permissions on all child objects and enable propagation of inheritable permissions checkbox. This step propagates the permissions to all files and folders within the parent folder. For information regarding how to edit NTFS permissions, see Blackbaud Knowledgebase Solution BB3124. If these rights prove to be insufficient, we recommend using FileMon to determine where additional rights are needed. FileMon is a third-party utility and is a useful tool for troubleshooting permission issues. For more information about FileMon, see Blackbaud Knowledgebase Solution BB50451. Minimum Required Registry Key Permissions The account used to run the website needs Full Control permissions for the following registry keys: HKEY_USERS\S-1-5-20\Software\VB and VBA Program Settings\TopTix HKEY_USERS\S-1-5-18\Software\VB and VBA Program Settings\TopTix

4. CHAPTER 1 Installation Requirements Before installing the update, make sure you meet the following installation requirements. Make sure you have reviewed the pre-update recommendations and acted on all that apply to your organization. For more information, see Pre-update Recommendations on page 1. Before installing The Patron Edge Online version 3.41, make sure your Patron Edge application is version 3.401 with the latest patch installed. You must update to version 3.401 of The Patron Edge and log in on the server to fully update the program, run all database revisions, and complete other update processes BEFORE you install The Patron Edge Online version 3.41. You must be on version 3.25, 3.255*, 3.33, 3.35 or higher of The Patron Edge Online before continuing with this update. *(If you are currently using version 3.255 and your upgrade path involved updating from 3.25 to 3.255, do not continue with this update process. Instead, you must uninstall version 3.255 and perform a new install of 3.41. You will be able to keep you current Patron Edge Online database, simply point to it when running the new installation. Make sure your Patron Edge Online server is running a compatible operating system with all required service packs and IIS 5.0 or higher. You must fully understand The Patron Edge Online system requirements and make sure they are met. Visit our website at http://www.blackbaud.com/support/system/system.aspx to access detailed system recommendations. If you are currently using a version between 3.00 and 3.22, you must submit your data to us for conversion before you can install 3.41. If you are currently using a version prior to 3.00, a new Patron Edge Online installation and database is required, not simply an upgrade. A new installation means that a new database containing only default information is installed and your public website must be completely redesigned and rebuilt. You must fully understand The Patron Edge Online system requirements and make sure they are met. Visit our website at http://www.blackbaud.com/support/system/system.aspx to access detailed system recommendations. Suspend any automatic backup software that may attempt to back up your database while you run the installation. Close all applications running on the server, including virus scan programs. Virus scan programs sometimes mistakenly interpret the setup or update process of a new program as a contamination of existing files on the disk. Close the Microsoft Office toolbar on the server. It may interfere with the installation of some files. Install the Update This section provides instructions for updating The Patron Edge Online to version 3.41 from a compatible version. If you are currently running a version of the The Patron Edge Online other than those specified as compatible, do not run this update. Instead contact Blackbaud Support or send an email requesting information about upgrading to solutions@blackbaud.com.

UPDATE THE PATRON EDGE ONLINE. 5 Note: We are not responsible for the installation, configuration, and testing of any web security measures. We assume no responsibility for the security of your web server and any adverse consequences resulting from security issues. Our software does not establish or modify security on the web server. Refer to www.microsoft.com for specific security measures and NTFS permissions needed by Windows 2003 Server and IIS. Step 1. Understand the Update Process The first step in successfully updating The Patron Edge Online to version 3.41 is understanding the components involved in the update, as well as the process requirements related to your installation environment. Each Patron Edge Online component that will be updated is listed below with a description: The Patron Edge communication component - This component enables The Patron Edge Online to communicate with your Patron Edge database. Web application communication component - This component enables communication between your websites and the Patron Edge communication component. The Patron Edge Online database - During the update, changes will be made to your Patron Edge Online database. You should create a backup before running the update. The Patron Edge Online public and administration websites - During the update, changes will be made to the default pages of both the administration and public websites. These changes may include bug fixes and/or new functionality. Installation Environment The update process will vary depending on your Patron Edge Online environment. The steps required depend on the server(s) where the communication components, database, and websites reside. Depending on your environment, you may need to run the update on multiple machines. If your communication components and websites are all on different machines, you will need to run the update on each machine. The update wizard will recognize and update the required components. For example, your organization may have the communication components and public and administration websites installed on a web server and the Patron Edge Online database installed on another server. For this situation, you would need to run the update on the webserver and the server where the Patron Edge Online database resides. If we are hosting your Patron Edge Online applications and/or websites, you should not run this update. We will coordinate the installation with you and communicate a plan for the implementation of any components you are required to update at your site. Step 2. Run the Update You are ready to run the update after you have reviewed all pre-update recommendations and acted on all that apply to your organization, met all installation requirements, and understand the update process and installation environment variances. Before you proceed, review the update scenarios presented and follow the procedures applicable to your environment.

6. CHAPTER 1 Warning: Before installing The Patron Edge Online version 3.41, make sure your Patron Edge application is version 3.401 with the latest patch installed. You must update to version 3.401 of The Patron Edge and log in on the server to fully update the program, run all database revisions, and complete other update processes BEFORE you install The Patron Edge Online version 3.41. Update Scenarios and Procedures There are three possible scenarios for updating The Patron Edge Online to version 3.41 and each depends on your current installation environment. Before you run the update, you should review each scenario below and follow the procedures applicable to your environment. If you are updating a machine that has the Patron Edge communication components installed and one or all of the following: Web communication components, the Patron Edge Online public and administration websites, see Scenario A: Update The Patron Edge Online on page 6. If you are updating a machine that does NOT have the Patron Edge communication components installed but does have one or all of the following: Web communication components, the Patron Edge Online public and administration websites, see Scenario B: Update The Patron Edge Online on page 11. If you are updating a machine that only has the Patron Edge communication components installed, see Scenario C: Update The Patron Edge Online on page 16. Scenario A: Update The Patron Edge Online Follow this update procedure if you are updating a machine that has the Patron Edge communication components installed and one or all of the following: Web communication components, the Patron Edge Online public and administration websites. 1. Before continuing, verify that you have created a complete backup of your Patron Edge Online database and that you meet all requirements discussed in Installation Requirements on page 4. 2. From the server, access the Patron Edge Online 3.41 CD or the installation package you downloaded and double-click Setup.exe. A confirmation screen appears.

UPDATE THE PATRON EDGE ONLINE. 7 3. To continue with the update process click Yes. The InstallShield Wizard screen appears briefly as your system is prepared for the installation process. Once your system is ready, the welcome screen appears.

8. CHAPTER 1 4. Click Next. The PEO Database Master Key screen appears. 5. The database master key (DMK) is the encryption key for your Patron Edge Online database and for symmetric and asymmetric keys. Enter a DMK password that meets the following complexity requirements: The key must be at least seven characters in length. The key must contain characters from three of the following four categories: uppercase letters (A through Z), lowercase letters (a through z), base 10 digits (0 through 9), and non-alphanumeric characters, for example, an exclamation point (!) or number sign (#).

UPDATE THE PATRON EDGE ONLINE. 9 Note: If this key becomes compromised or is even suspected of being compromised, you must rotate the key immediately. For steps that guide you through changing the DMK after the upgrade is complete, see the PA DSS Management Utility section of the Payment Application Data Security Standards Implementation Guide for The Patron Edge Online. 6. Click Next, the PE Key Service screen appears. 7. On the PE Key Service screen, enter the machine name or IP address of the machine on which you installed The Patron Edge. Also enter the listening port used by the Patron Edge Key Service. To verify the port number, access your Patron Edge server and navigate to the Patron Edge installation directory. The default location is C:\Program Files\Blackbaud\The Patron Edge. Locate and run PCIEncrypt.exe. The PA DSS Management Utility screen appears. The port number being used is displayed in the Current Key Service Config File Settings frame. After you enter the IP address or machine name and the listening port number of the Patron Edge Key Service, proceed to the next step.

10. CHAPTER 1 8. Click Next. The Installing The Patron Edge Online screen appears displaying the status of the update process. 9. Once the installation process is complete, click Next. The InstallShield Wizard Completed screen appears. 10. Click Finish. A message may appear prompting your to restart your system. If so, restart as directed. The Patron Edge Online is now updated. Next, review Post Update and Troubleshooting on page 19 and complete the post update tasks applicable to your organization. Some tasks are required and must be completed to sell tickets on your public site.

UPDATE THE PATRON EDGE ONLINE. 11 Scenario B: Update The Patron Edge Online Follow this update procedure if you are updating a machine that does NOT have the Patron Edge communication components installed but does have one or all of the following: Web communication components, the Patron Edge Online public and administration websites. 1. Before continuing, verify that you have created a complete backup of your Patron Edge Online database and that you meet all requirements discussed in Installation Requirements on page 4. 2. From the server, access the Patron Edge Online 3.41 CD or the installation package you downloaded and double-click Setup.exe. A confirmation screen appears. 3. To continue with the update process click Yes. The InstallShield Wizard screen appears briefly as your system is prepared for the installation process.

12. CHAPTER 1 Once your system is ready, the welcome screen appears. 4. Click Next. The PEO Database Server screen appears. On this screen, select your Patron Edge Online database server.

UPDATE THE PATRON EDGE ONLINE. 13 5. Once you select the server, mark the authentication method used when The Patron Edge connects to the Patron Edge Online database. To use Windows authentication, mark Windows authentication credentials of current user. This selection enables Windows authentication using the login and password of the person currently logged in and running this installation. If you use server authentication, mark Server authentication using the Login ID and password below and enter a login ID and password. This login and password will be used only for the update.

14. CHAPTER 1 6. Once you select the database server and authentication method, click Next. The PEO Database selection screen appears. 7. Select your existing Patron Edge Online database. If multiple database are displayed, make sure you select the correct database. The Create a new database option is disabled. 8. Click Next. The PEO Database Master Key screen appears. 9. The database master key (DMK) is the encryption key for your Patron Edge Online database and for symmetric and asymmetric keys. Enter a DMK password that meets the following complexity requirements:

UPDATE THE PATRON EDGE ONLINE. 15 The key must be at least seven characters in length. The key must contain characters from three of the following four categories: uppercase letters (A through Z), lowercase letters (a through z), base 10 digits (0 through 9), and non-alphanumeric characters, for example, an exclamation point (!) or number sign (#). Note: If this key becomes compromised or is even suspected of being compromised, you must rotate the key immediately. For steps that guide you through changing the DMK after the upgrade is complete, see the PA DSS Management Utility section of the Payment Application Data Security Standards Implementation Guide for The Patron Edge Online. 10. Click Next. The Installing The Patron Edge Online screen appears displaying the status of the update process.

16. CHAPTER 1 11. Once the installation process is complete, click Next. The InstallShield Wizard Completed screen appears. 12. Click Finish. A message may appear prompting your to restart your system. If so, restart as directed. The Patron Edge Online is now updated. Next, review Post Update and Troubleshooting on page 19 and complete the post update tasks applicable to your organization. Some tasks are required and must be completed to sell tickets on your public site. Scenario C: Update The Patron Edge Online Follow this update procedure if you are updating a machine that has ONLY the Patron Edge communication components installed. 1. Before continuing, verify that you have created a complete backup of your Patron Edge Online database and that you meet all requirements discussed in Installation Requirements on page 4. 2. From the server, access the Patron Edge Online 3.41 CD or the installation package you downloaded and double-click Setup.exe. A confirmation screen appears.

UPDATE THE PATRON EDGE ONLINE. 17 3. To continue with the update process click Yes. The InstallShield Wizard screen appears briefly as your system is prepared for the installation process. Once your system is ready, the welcome screen appears.

18. CHAPTER 1 4. Click Next, the PE Key Service screen appears. 5. On the PE Key Service screen, enter the machine name or IP address of the machine on which you installed The Patron Edge. Also enter the listening port used by the Patron Edge Key Service. To verify the port number, access your Patron Edge server and navigate to the Patron Edge installation directory. The default location is C:\Program Files\Blackbaud\The Patron Edge. Locate and run PCIEncrypt.exe. The PA DSS Management Utility screen appears. The port number being used is displayed in the Current Key Service Config File Settings frame. After you enter the IP address or machine name and the listening port number of the Patron Edge Key Service, proceed to the next step. 6. Click Next. The Installing The Patron Edge Online screen appears displaying the status of the update process.

UPDATE THE PATRON EDGE ONLINE. 19 7. Once the installation process is complete, click Next. The InstallShield Wizard Completed screen appears. 8. Click Finish. A message may appear prompting your to restart your system. If so, restart as directed. The Patron Edge communication components for The Patron Edge Online are now updated. Rollback and Uninstall If you encounter problems during the installation process for any Patron Edge Online applications, you can cancel the installation before it finishes. After you cancel, the installer will rollback your machine to the state it was in prior to running the installation. If you install the application completely but feel the application may have installed improperly, you can safely uninstall the application by running the setup.exe again and selecting Remove when prompted. Post Update and Troubleshooting After installing the update, review this section and perform the post update tasks applicable to your organization. Configure Key Services After you Update The Patron Edge Online, you must configure the Key Services needed for your specific implementation. This is required before you can access the administration site. If your Patron Edge and Patron Edge Online applications are installed on a single LAN, see Single Key Service Environment on page 20 for configuration instructions.

20. CHAPTER 1 If your Patron Edge and Patron Edge Online applications are on different LANs, you were prompted to set up a secondary Key Service during the Patron Edge Online installation process. If you set up a secondary Key Service during the Patron Edge Online installation process, see Multiple Key Service Environment on page 20 for configuration instructions. Single Key Service Environment If your Patron Edge and Patron Edge Online applications are installed on a single LAN, you require only a single Key Service. This single Key Service runs on your Patron Edge machine, retrieves sensitive data from your Patron Edge database, and communicates with your Patron Edge Online database. If you have a single Key Service environment, you must complete the following configuration steps before you can access your administration site. Configure a single Key Service During this process you will access and use the PA DSS Management Utility on your The Patron Edge server. To use the utility, you must have administrator rights in Windows. You must also log into the utility with a Patron Edge account that has administrative privileges. 1. Before you continue, make sure all users are logged out of The Patron Edge. 2. Access your Patron Edge server and navigate to the Patron Edge installation directory. The default location is C:\Program Files\Blackbaud\The Patron Edge. 3. Locate and run PCIEncrypt.exe. The PA DSS Management Utility screen appears. 4. Review the information in The Patron Edge Online Database Connection frame and make sure it is correct. If the SQL Database and SQL Server Instance fields are blank or contain incorrect values, enter the correct values. Click Submit to verify the connection. You must click Submit even if the correct values are displayed. This is required to configure the Key Service. 5. Access the The Patron Edge Database Connection frame and click Submit to verify the connection. This is required to configure the Key Service. 6. Next, you must rotate the Data Encryption Key (DEK). To do this, access the SQL Server Encryption frame and in the Existing Master Key field, enter the current database master key for your Patron Edge database. You must enter the current DMK in order to rotate the DEK. 7. To continue, click Rotate Data Encryption Key. A confirmation screen appears. 8. Click OK. The DEK has now been successfully rotated. Any data using the old key will be decrypted and then re-encrypted using the new key. Before logging back into The Patron Edge, restart TIX_PSC. 9. On your Patron Edge Online server, restart both the The Patron Edge communication component and the Web application communication component before attempting to log into your administration site. Multiple Key Service Environment If your Patron Edge and Patron Edge Online applications are on different LANs, you were prompted to set up a secondary Key Service during the Patron Edge Online installation process. If you have a multiple Key Service environment, you must complete the following configuration steps before you can access your administration site and run the Site Setup Wizard. During the configuration process for multiple key services, you will access the PA DSS Management Utility on your Patron Edge server and enter the URL for the Patron Edge Online Key Service. Before you begin this process, you should locate and write down the URL for the Patron Edge Online Key Service so you can enter it when needed.

UPDATE THE PATRON EDGE ONLINE. 21 To find the URL for the Patron Edge Online Key Service, on the machine where the Web application communication component is installed, navigate to the installation directory. The default installation directory is C:\Program Files\Blackbaud\The Patron Edge Online. From the installation directory, open TopTixEsro2.ini in a text editor. The URL for the Patron Edge Online Key Service is the esro_connectstring value displayed in the [General Parameters] section. For example, in esro_connectstring=net.tcp://localhost:9955/secureassets, the URL you need to note is net.tcp://localhost:9955/secureassets. Configure multiple Key Services During this process you will access and use the PA DSS Management Utility on your The Patron Edge server. To use the utility, you must have administrator rights in Windows. You must also log into the utility with a Patron Edge account that has administrative privileges. 1. Before you continue, make sure all users are logged out of The Patron Edge. 2. Access your Patron Edge server and navigate to the Patron Edge installation directory. The default location is C:\Program Files\Blackbaud\The Patron Edge. 3. Locate and run PCIEncrypt.exe. The PA DSS Management Utility screen appears. 4. Access the Current Key Service Config File Settings frame and in the Bounded URL field, enter the URL for the Patron Edge Online Key Service. Tip: To find the URL for the Patron Edge Online Key Service, on the machine where the Web application communication component is installed, navigate to the installation directory. The default installation directory is C:\Program Files\Blackbaud\The Patron Edge Online. From the installation directory, open TopTixEsro2.ini in a text editor. The URL for the Patron Edge Online Key Service is the esro_connectstring value displayed in the [General Parameters] section. For example, in esro_connectstring=net.tcp://localhost:9955/secureassets, the URL you need to enter is net.tcp://localhost:9955/secureassets. 5. After you enter the correct URL for the Patron Edge Online Key Service, click Submit. 6. Review the information in The Patron Edge Online Database Connection frame and make sure it is correct. If the SQL Database and SQL Server Instance fields are blank or contain incorrect values, enter the correct values. Click Submit to verify the connection. You must click Submit even if the correct values are displayed. This is required to configure the Key Services. 7. Review the information in The Patron Edge Database Connection frame and make sure it is correct. If the SQL Database and SQL Server Instance fields are blank or contain incorrect values, enter the correct values. Click Submit to verify the connection. You must click Submit even if the correct values are displayed. This is required to configure the Key Services. 8. Next, you must rotate the Data Encryption Key (DEK). To do this, access the SQL Server Encryption frame and in the Existing Master Key field, enter the current database master key for your Patron Edge database. You must enter the current DMK in order to rotate the DEK. 9. To continue, click Rotate Data Encryption Key. A confirmation screen appears. 10. Click OK. The DEK has now been successfully rotated. Any data using the old key will be decrypted and then re-encrypted using the new key. Before logging back into The Patron Edge, restart TIX_PSC. 11. Restart both the The Patron Edge communication component and the Web application communication component before attempting to log into your administration site.

22. CHAPTER 1 Review and Implement PA DSS Management Processes As part of the pre-installation checklist, we recommended that you read the Payment Application Data Security Standards Implementation Guide for The Patron Edge Online to learn more about PA DSS and The Patron Edge Online, as well as information about how your organization can become PCI DSS compliant. Now that the update is complete, we want to reiterate the importance of reading and using the Payment Application Data Security Standards Implementation Guide for The Patron Edge Online. It provides information to help you implement PCI DSS compliant processes in your organization and to use the PA DSS compliant functionality built into The Patron Edge Online. PA DSS management is an ongoing process that involves rotating encryption keys, checking audit trails, and other vigilant practices to keep your sensitive data safe. The Payment Application Data Security Standards Implementation Guide for The Patron Edge Online provides detailed information and procedures for implementing these practices. This guide is available on the user guides page of our website here: http://www.blackbaud.com/support/guides/pe.aspx. Copy New Screens to Your Interface With this release of The Patron Edge Online, we included new screens within the system interface that must be manually copied to your live public site interface. If you have multiple interfaces, you must copy the new screens to each. The following new screens are included in the system interface, which is ID 1500, after the update is installed and must be copied to your live public site interface: change_password.asp crm_change_password.asp crm_forward_tickets.asp crm_update_dataprotection.asp payment.asp program_ticket_assign.asp ops_summary.asp Warning: If you do not copy the payment.asp and program_ticket_assign.asp screens to your public site interface, the site will not function properly and you will not be able to sell tickets. Copy a screen to your interface 1. On the Patron Edge Online administration site, at the top of the screen, click Content.

UPDATE THE PATRON EDGE ONLINE. 23 2. On the navigation bar, click Site Design, Interfaces. The Interfaces screen appears. 3. Select interface code 1500, which has a default description of esro Basket. 4. On the toolbar, click View interface screens. The interface screens for interface 1500 are displayed. 5. Locate and select the payment.asp screen, which is code 486.

24. CHAPTER 1 6. To make a copy of the screen and all associated screen parts, on the toolbar, click Duplicate Screen. The duplicate screen is created and appears in the grid with a description of Copy of payment.asp. 7. Select the Copy of payment.asp screen and on the toolbar click Edit. The New Record screen appears. 8. In the Interface field, select your public site interface. 9. In the Screen (Page) field, change the value to payment.asp. Make sure you remove the Copy of text completely, as well as any spaces. 10. To save the record, click OK. The payment.asp screen along with all screen parts is now copied to the interface you selected. 11. To verify, access the drop-down list on the toolbar and select your interface. The screens for the interface are displayed and should now contain payment.asp.

UPDATE THE PATRON EDGE ONLINE. 25 12. Now that you have copied the payment.asp screen to your interface, repeat this process to copy the program_ticket_assign.asp, ops_summary.asp, change_password.asp, crm_forward_tickets.asp, crm_update_dataprotection.asp, and crm_change_password.asp screens over. Also, if you use multiple interfaces for your public site, you must copy all screens to each. Implement Reset Password Usability Improvements To improve usability for customers who forget their password when accessing your public website, we have changed the process customers go through to reset passwords. The changes we have implemented streamline the process for the user and will help alleviate confusion. After you correctly implement the necessary post update changes documented in this section, users who click the forgot password? link on your public website will receive an email with clear instructions and a clickable link used to reset their password. There is no longer a complicated reset key to copy and paste into a form. Instead, the reset key is handled automatically behind the scenes. When the user clicks the link in the email, they simply have to enter and confirm a new password and they are done. To implement the improved forgot password process, you must complete the following post-update tasks. Step-by-step instructions are provided below to help you complete both tasks. 1. Update your forgot password email template to include the ResetPasswordLink(Please click here to reset your password)field and remove fields that are no longer needed, including ResetPasswordKey. Also update the language used in the body of the template to improve clarity for your customers. 2. Remove the Reset password key fields from the password reset dialogs on your public website. These changes improve usability while also maintaining the necessary password security required to protect user data. For more detailed information about these changes, including a detailed comparison of this improved process and the previous reset password process that lead to customer confusion, see Password Usability Improvements on page 35. Warning: It is very important that you add the ResetPasswordLink(Please click here to reset your password)field and adjust the text of your forgot password email. Depending on your template, you may also have to remove fields that are no long needed like the ResetPasswordKey field. If you do not make these adjustments, your customers will not be able to reset their password when they click the forgot password? link on your public site. Update Your Forgot Password Email Template To implement the improved reset password process for your customers, you must access Mail Design within your administration site and add the ResetPasswordLink(Please click here to reset your password)field to your forgot password email template. You must also update the language used in the email to clearly describe the reset process to customers. The following procedure guides you through the necessary steps and also provides an example of a forgot password template that you can use as a model. Update your Forgot Password email template 1. Access your Patron Edge Online administration site. At the top of the screen, click Content.

26. CHAPTER 1 2. On the navigation bar, select Site Design, Mail Design. The Mail Design screen appears. 3. From the grid, select Default Forgot Password Mail template or the copy of the template you use as your Forgot password email. 4. On the toolbar, click Update Mail. The HTML Editor appears displaying the Forgot Password email. 5. Adjust the text of the email template to describe the updated password reset process. You can use the example provided below as a model for your template. The text preceded by ## denotes a field inserted into the email text using the HTML Editor. Dear ##Title ##LastName, To reset your password, click the link below. You will then be prompted to enter and confirm your new password. ##ResetPasswordLink(Please click here to reset your password)

UPDATE THE PATRON EDGE ONLINE. 27 Please note, all passwords must meet the following complexity requirements: The password cannot be the same as the user name. The password must be at least seven characters in length. The password must contain both numeric and alphabetic characters. Thank you! If the above link does not work, you can copy and paste the following url into your browser and click Enter on your keyboard to access the new password screen: ##ResetPasswordURL 6. As displayed in the example above, you must add the ResetPasswordLink(Please click here to reset your password)field to the body of the email template. This field provides the link the customer will click in the email they receive to reset their password. Place your cursor in the template body where you want the link to appear and in the treeview on the left, double-click ResetPasswordLink(Please click here to reset your password). The field is added to the email template. 7. After you add the ResetPasswordLink(Please click here to reset your password)field to the template, you can adjust the text in the parenthesis to control how the link is displayed in the email. By default, Please click here to reset your password will be the link included in each reset password email. To change the text of the link, simply edit the text included in the parenthesis following the field. 8. Next, as displayed in the example above, we recommend that you add the ResetPasswordURL field to the email template. This provides an alternative way for the customer to access the reset password dialog on your public site in case the link is not functioning as expected. We recommend you add this field near the bottom of the template. Place your cursor in the template body where you want the link to appear and in treeview on the left, double-click ResetPasswordURL. The field is added to the email template. 9. Preceding the ResetPasswordURL field, you should add text to the email template that explains the purpose. For example, you could preface the field with the following descriptive text: If the above link does not work, you can copy and paste the following url into your browser and click Enter on your keyboard to access the new password screen. 10. To save the revised template, click Ok. You return to the Mail Design table.

28. CHAPTER 1 Note: To maintain security, the link a customer receives in each Forgot Password email will expire after a set duration. You configure the duration until the email expires by entering a value for the Reset token expiration site setting. This setting is located in the Password site settings group. The value is set in minutes. Once the set number of minutes passes, the link and reset key will not work. The default number of minutes is 1440. Remove Reset Password Key Fields From Your Public Website In addition to updating your forgot password email template, you must also remove the Reset password key fields from the reset dialogs on your public website. This is necessary to fully implement the usability improvements for resetting passwords. To complete this process, you will need to download a.zip file from our website that contains the following: bb_password.js, bb_resize.js, and UpdateLanguageSettngs.exe. Note: Before you perform the following procedure, make sure you have copied the crm_change_password.asp page to your live public site interface. For instructions, see Copy New Screens to Your Interface on page 22. Remove the Reset password key fields from your public site 1. Access Knowledgebase on our website here: http://www.blackbaud.com/kb/index?page=home 2.. Next, search for Knowledgebase solution BB714068. This solution provides a link to a.zip file that contains the following: bb_password.js, bb_resize.js, and UpdateLanguageSettngs.exe. 3. Download the.zip and extract bb_password.js, bb_resize.js, and UpdateLanguageSettngs.exe. 4. Copy bb_password.js and bb_resize.js into your PEO public site directory. 5. Next, access your Patron Edge Online administration site. At the top of the screen, click Content. 6. On the navigation bar, select Site Design, Screens. The Site Design - Screens page appears.

UPDATE THE PATRON EDGE ONLINE. 29 7. On the toolbar, in the Interface dropdown, select your public site interface. This will filter the screens displayed to show only those used in your interface. 8. Locate and double-click crm_change_password.asp. The Edit Record screen appears. 9. In the Include After field, enter bb_password.js. Make sure you enter this for the crm_change_password.asp screen that is part of your public site interface. You can verify this in the Interface field. Click OK to continue.

30. CHAPTER 1 10. Next, locate and double-click forgot_password.asp. The Edit Record screen appears. 11. In the Include After field, enter bb_resize.js. Make sure you enter this for the forgot_password.asp screen that is part of your public site interface. You can verify this in the Interface field. Click OK to continue. 12. The next step is running the UpdateLanguageSettngs.exe utility you extracted from the.zip file. On the server where your Patron Edge Online database resides, double-click UpdateLanguageSettngs.exe. The Update Language Settings screen appears. 13. On this screen, enter the name of your Patron Edge Online SQL Server instance. Also enter the name of your Patron Edge Online database. 14. Click Run. A SQL server script is applied to your database. 15. After all steps are complete, the reset password usability changes are fully implemented. If you are already on your PEO public site, close your browser and reopen it again. Review Your Administration Website User Permissions This task is for users who did not previously install version 3.33 or 3.35 and upgraded to version 3.41 from 3.25 or 3.255. Starting with version 3.33 of The Patron Edge Online, we implemented a new administration site user interface that changed how user permissions were assigned. In Pre-update Recommendations on page 1 we recommended that you record your current users and user permissions prior to updating. You should now use the information you recorded to make sure user permissions are configured as needed in the new administration site. For information about accessing and setting up user permissions in the new site, see the Set Up Administration Users section of the Administration Site Guide. It may also be helpful to review the following comparison of user permissions in previous versions and in the latest version.

UPDATE THE PATRON EDGE ONLINE. 31 In previous versions of the The Patron Edge Online, you set user permissions for System, System Tables, Site Tables, Tracking, Reports, and Print at Home if applicable. These permissions corresponded to menus on the navigation bar, which in turn controlled the areas of the administration site a user could access. System - This permission allows the user to access the System Setup, Maintenance, and Custom Tables sections of the administration site. If a user does not have this permission, System Setup, Maintenance, and Custom Tables are not displayed on the navigation bar. System Tables - This permission allows the user to access the Site Design and Pricing sections of the administration site. If a user does not have this permission, Site Design and Pricing are not displayed on the navigation bar. Site Tables - This permission allows the user to access the Events, Merchandise, Series, and Donation sections of the administration site. If a user does not have this permission, Events, Merchandise, Series, and Donation are not displayed on the navigation bar. Tracking - If this permission is marked, the user can access and view public site activity by clicking Activity on the navigation bar. Reports - This permission allows the user to access the Reports section of the administration site. If a user does not have this permission, Reports is not displayed on the navigation bar. Print at Home - If the optional Print at Home module is installed, this permission allows the user to access the Print at Home section of the administration site. If a user does not have this permission, the Print at Home section is not displayed on the navigation bar.

32. CHAPTER 1 In version 3.33 and higher of the The Patron Edge Online, you set user permissions for Home, Content, Monitor, Reports, and Administration. These permissions correspond to links at the top of the administration site. When a user clicks a link, related menus are displayed on the navigation bar. Home - This permission allows the user to click Home at the top of the screen and access the Dashboards navigation bar link. Content - This permission allows the user to click Content at the top of the screen and access the Events, Merchandise, Series, Donation, and Site Design navigation bar links. Monitor - This permission allows the user to click Monitor at the top of the screen and access the System Status, Activity, and Logs navigation bar links. Reports - This permission allows the user to click Reports at the top of the screen and access the Sales Reports, Custom Reports, and Users and Orders navigation bar links. Administration - This permission allows the user to click Administration at the top of the screen and access the System Setup, Maintenance, Pricing, XML Feed, Custom Tables, and OPS navigation bar links. Review Your Public Website After the update, review your public website and make sure it is functioning as expected. We recommend running through a variety of standard tasks including accessing and viewing common pages, purchasing tickets with a credit card, requesting a password, and any other functions that are performed on your website on a regular basis.

UPDATE THE PATRON EDGE ONLINE. 33 Find Support If you need information as you work in The Patron Edge Online, you can find support in Administration within The Patron Edge. In the Support folder, you can access our website, send an email to Patron Edge Support, and open the user guides. Blackbaud Web site When you double-click Blackbaud Web site, you access the Home page of our website. You must enter your user name and password to access Customer Support. By selecting Support on the menu bar, you can search for answers to your software questions in our Knowledgebase and browse our library of Frequently Asked Questions in our FAQ Library. You can also create new cases or check the status of existing cases in Case Central. In addition, you can download updates and participate in user forums and review newsletters, user guides, and hardware requirements. Warning: To use our online solutions, you must have Internet access and a customer login. Email Support When you double-click Email Support, you can send email directly to Patron Edge Support. The screen for your default email program appears automatically with the email address in the To field. You can enter your subject and message and then send your message. User Guide When you double-click User Guides, you access the The Patron Edge User Guides page of our website. Click a link to open a PDF of a user guide. Tip: PDF stands for Portable Document Format, a type of document viewed with Adobe Acrobat Reader that maintains its formatting and appears correctly on any output device. PDF files contain hyperlinks so you can jump from topic to topic.

34. CHAPTER 1

CHAPTER2 New Features and Enhancements In This Chapter Password Usability Improvements on page 35 PA DSS Certification on page 38 Alphanumeric Coupon Codes on page 39 Same Day Internet Sales on page 39 This chapter provides information detailing new features and functionality available in The Patron Edge Online 3.41. In addition to descriptions of each feature, we provide references to the respective guide, when applicable, where you can find more information and detailed procedures. Warning: You must be on The Patron Edge Online 3.25, 3.255*, 3.33, or 3.35 to update to version 3.41. *(If you are currently using version 3.255 and your upgrade path involved updating from 3.25 to 3.255, do not continue with this update process. Instead, you must uninstall version 3.255 and perform a new install of 3.41. You will be able to keep you current Patron Edge Online database, simply point to it when running the new installation.) You must also ensure your equipment meets all system and free space requirements for the update. To review current system requirements, go to support.blackbaud.com. Password Usability Improvements We have implemented a number of changes and enhancements to provide an improved experience for customers when they enter passwords to log into accounts on your public site and reset forgotten passwords.

36. CHAPTER 2 Automatic Password Validation Disabled By Default First, we have disabled the automatic password validation feature that displayed a password invalid message as a customer typed in their password on your public site. The invalid message was displayed even before the user had completed entering their full password. This was intended to provide realtime validation to communicate to the user that the password being entered had not yet met the basic password requirements. However, it caused confusion for public site users trying to log in. Because of the confusion, we have turned off this feature by default. If you want to use this password validation feature, you can enable it by accessing your administration site and clicking Administration at the top of screen. Next, select System Setup and then Site Settings in the navigation bar. From the Site Settings page, in the dropdown on the toolbar, select Password. The password site settings are displayed.

NEW FEATURES AND ENHANCEMENTS. 37 Locate Auto-check timeout and double-click it. The Edit record screen appears. By default, the Value field contains N/A, which means it is disabled. To enable this setting, replace N/A with the number of milliseconds that should transpire between when the user inputs a password and the automatic field validation takes place. Although you can enable this feature, we recommend that you leave it disabled. Reset Password Usability Improvements Previously, we recommended that you include the ResetPasswordURL field and the ResetPasswordKey field when configuring your forgot password email template in Mail Design. The ResetPasswordURL provided a link in the email that a user could click to access the reset password dialog on your public site. The ResetPasswordKey field provided a randomly generated key in the email composed of characters and symbols. The intended process was that the user copied the reset key from the email, clicked the link to access the reset password dialog, pasted the key into the corresponding field, and entered then confirmed a new password. However, it did not always work as intended and it was confusing for customers. In some cases, the ResetPasswordURL field did not always render as a clickable link in the email message that users received. Whether or not it was a clickable link depended on the email application being used. For example, it may have been a clickable link in Outlook but not in Yahoo! mail. If a user received an email where the url was not a clickable link, they could simply copy and paste the url provided by the ResetPasswordURL field into their browser. However, not all users knew to do this and some were confused and frustrated. Additionally, the randomly generated reset key provided by the ResetPasswordKey field was often interpreted as an error or spam by customers. This was due to the length of the key string and the nature of the characters and symbols included in the key. Customers did not always understand that they needed to copy the key and paste it into the corresponding reset key field as part of the reset password process.

38. CHAPTER 2 To avoid confusion and simplify the entire reset password process for customers, we have made a number of changes. We have added a new field, ResetPasswordLink(Please click here to reset your password)to use in your forgot password email template in Mail Design. Using this new field will ensure that a clickable link is included in the forgot password email that is sent to customers. We have also automated the reset key process so the customer will no longer have to manually copy and paste a reset key into a dialog. To implement these changes, you will need to update your forgot password email template to add ResetPasswordLink(Please click here to reset your password) and remove the ResetPasswordKey field. You should also update the language of the email to reflect the new process. In addition, you will need to download a.zip file from our website that contains a utility you will need to run and two other files you will need to copy into your PEO public site directory. For step-by-step instructions that guide you through the necessary processes, see Implement Reset Password Usability Improvements on page 25. PA DSS Certification Version 3.41 of The Patron Edge Online has been successfully validated and certified by a Qualified Security Assessor (QSA) to meet the Payment Application Data Security Standard (PA DSS). Developed by Visa, PA DSS requires software companies such as Blackbaud to develop secure programs that enable users to comply with the Payment Card Industry Data Security Standard (PCI DSS). To learn more about PA DSS and The Patron Edge Online, as well as information about how your organization can become PCI DSS compliant, see the Payment Application Data Security Standards Implementation Guide for The Patron Edge Online.

NEW FEATURES AND ENHANCEMENTS. 39 Alphanumeric Coupon Codes Alphanumeric coupon codes are now supported in The Patron Edge Online. Previously, only numeric coupon codes were supported. With this capability, you can now define coupon codes that are comprised of alphabetic characters, numeric characters, or a combination of both. This gives you greater flexibility in creating coupon codes that are easier for patrons to remember and allows you to define codes that can be more closely associated with marketing campaigns and sales channels. For example, if you have specific coupons for tour groups, you can define the coupon IDs to be tourgroup1, tourgroup2, etc. If you have promotional partnerships with radio stations, schools, or other groups, you can define the coupon codes to include the name of their or other related terms. Note: Alphanumeric coupon codes are supported only in the standard sales screen of The Patron Edge and in The Patron Edge Online. The general admission sales screen of The Patron Edge and The Patron Edge Kiosk support only numeric coupon codes. Special characters like, <, >,?, &, /, \, are not supported. The process of setting up and configuring coupons in Administration involves multiple tasks that determine the coupon ID, the value of the coupon, when the coupon can be used, and what the coupon can be used for. These configuration tasks are typically handled by a box office manager or system administrator. For detailed information about completing each task, see the Coupons chapter of the Box Office Setup Guide. For information about redeeming discount coupons online, see the Redeem Coupons section of the ecrm Guide. Same Day Internet Sales In previous versions of The Patron Edge Online, customers were prohibited from purchasing purchase tickets online to an event on the day of the event. With the release of version 3.41, your customers can now purchase tickets on the day of an event from your public site.

40. CHAPTER 2

I NDEX. 41 Index B back up databases, importance of 5 Blackbaud website 33 C certification, pa dss 38 complete updates 19 copy new screens 22 coupons alphanumeric codes 39 D dependency, installation 5 F find support 33 forgot password 25 I installation complete 19 Patron Edge Online environment 5 requirements 4 troubleshoot problems 19 update processes 5 updates 4 N new screens copy 22 P pa dss certification 38 PA DSS management 22 password reset 37 usability improvements 35 validation 36 password, reset 25 permissions, website 3 prepare to update installation environments 5 recommendations 1 problem, troubleshoot 19 process, to update 5 public website review 32 R requirement, installation 4 reset password 25 reset, passwords 37 review user permissions 30 review websites 32 rollback 19 run updates 5, 6, 11, 16 S sales, same day 39 same dale sales 39 support, find 33 T template, forgot password email 25 U uninstall 19 update considerations 1 install 4 installation requirements 4 Patron Edge Online, The 6, 11, 16 prepare for 1 update task complete 19 copy new screens 22 installation 4 processes 5 review user permissions 30 review websites 32 run updates 5 troubleshoot problems 19 upgrade, see update usability improvements password 35 user guide 33 user permissions review 30

42. INDEX V validation, password 36 W website permissions 3