You have the option to store credit card information in the database or to not store credit card information in the database.
You may want to store credit card information if you collect credit card information but do not process it until a later date. If you choose to store credit card information, the credit card number, credit card expiration date, credit card transaction ID, credit card bank authorization code, credit card issue number, credit card start month and credit card start year are stored. All stored credit card information is encrypted using Advanced Encryption Standard (AES) at 256 bits.
Regardless of the Store Credit Card Information parameter value, the CSC/CVV/CVC number for a card is never stored. For information about storing credit card information and PCI Compliance, see Enterprise and PCI Compliance.
To choose if you store credit card information or not:
- Click the System Parameters link from the Main Menu. The System Parameters screen opens.
- Locate system parameter AR (Application) 000 (Code).
- Right-click and select Edit. The Edit System Parameter screen opens.
- Enter the below value into the Alphanumeric Value field depending on your credit card storage preference:
- Blank or Y - Credit card information is stored in the database.
- N - Credit card information is not stored in the database. After a credit card payment is processed, the payment information is created but you cannot retrieve the credit card information.
- M - Credit card information is not stored but the credit card number is saved in a masked form.
- The format is determined by the value entered into the Amount field:
- Blank - First two and last four digits are visible. For example, 1234567890 is stored as 12xxxx7890.
- 1 - Only the last four digits are visible. For example, 1234567890 is stored as xxxxxx7890.
- Click OK.
Comments
9 comments
Is the ability to issue a refund still available if this is set to "N" and credit card numbers are no longer stored?
0 upvotes
Refunds can still be processed within Ungerboeck by selecting the original transaction ID that was associated with the sale. When the refund information is sent to the credit card processor, they will know which card to refund based on the original transaction id.
When entering a refund in Ungerboeck, the original transaction drop-down will automatically appear in the Add Payment window after entering a negative amount.
0 upvotes
If we make this change, can it apply to the CC transactions that were already processed? Or does it only apply moving forward? If it only applies moving forward, is there a way to manually go in and delete the stored CC number?
0 upvotes
If you use the "Clear Credit Card Information Utility" (available by searching on the main menu), it will delete the existing credit card information in the database and then update the organization parameter so that credit card information is no longer saved moving forward.
0 upvotes
In our test environment v19.8Lp26, I ran the "Clear Credit Card Information Utility". When placing an order in the Test environment, the original transaction id isn't stored so when you try to refund that order (place a negative amount, select the credit card, etc.) the original trans field doesn't auto populate or have any value in the drop down therefore you get the "invalid tender" error.
0 upvotes
If the original transaction ID is not available, then the full credit card information is needed to process the refund. The refund would need to be entered as another stand-alone transaction, entering the credit card number, expiration date, CSV, and setting the amount to a negative number.
0 upvotes
Hi - what is the purpose of the amount field ?
0 upvotes
Hello Mudit,
The format of the credit card number masking is determined by the value entered into the Amount field:
Regards,
Sam
0 upvotes
Thanks, Sam.
Kind Regards,
Mudit
0 upvotes
Please sign in to leave a comment.