3.1 Setting up Inbound Verification Hash for Plug N Pay
Default Subject
Problem
My Plug N Pay Account has been or is vulnerable to bad actors to verify stolen credit card.
Solution
Implement Plug N Pay's Inbound Verification Hash Process
Steps For Solution
Inbound Verification Hash
PlugNPay has an additional security feature to verify that transactions being sent to them have not been manipulated in transit or through use of web development tools (web development tools are specific to WebTrac transactions). This functionality is available in RecTrac 3.1.06.00 and greater.
Depending on how you set this up it can be used for WebTrac Sales, WebTrac Check Card, RecTrac Sales Card Present, RecTrac Sales using a token for payment, RecTrac Check Card, RecTrac Billing.
The following outlines the steps required to configure this added security measure in PlugNPay and RecTrac .
- Log into the PlugNPay portal with the credentials for the merchant account that you want to configure.
- Go to Security Administration.
- Click the link (Click here to begin) below the Verification Hash section.
- Look for the section Inbound Verification Hash.
- Change the Action setting to Create.
- Select an appropriate value for the Transaction Time Stamp. Refer to the PlugNPay online help for more information, if needed.
-
Select only the following:
- Publisher-name
- Card-amount
- Leave Custom Fields blank.
- Click Create/Change/Delete Verification Hash. This will populate the Verification Key field in the table at the top of this section. The screen will look similar to the following:
- Copy the contents of your Verification Key into Notepad (in Windows).
- Verify that the value in Notepad is EXACTLY the same as the Verification Key value on your screen. You will need this value later.
- Log out of the PlugNPay Portal.
- Log into RecTrac.
- Go to Profile Management. Highlight/select the WebXPress profile linked the Merchant Account you just changed in the PlugNPay portal.
- Expand the WebXPress - Hash Settings group.
- Copy the Verification Key from Notepad and paste it into the Verification Key field.
- Save your changes.
- Repeat these steps in RecTrac for each WebXPress profile that is linked to the Merchant Account you just changed in the PlugNPay portal above.
- Log back into the PlugNPay portal.
- Go to Security Administration.
- Click the link (Click here to begin) below the Transaction Security Configuration section.
- Look for the section Security Requirements.
- Look for the Require Match item .
- Select the option for Hash.
- Click Set Security Requirements.