X-payment PIN set
 

How is everyone dealing with the PIN sets?
I have several order desk staff members that need access to x-payment.
Now we have to carry a print out in our wallet of the PIN numbers and communicate with each other which PIN set is valid at any given time.

I remember about 20 years ago my bank had sent me a PIN code generator (like a calculator) that I had to carry around to access ABMs and websites. Well, that disappeared as fast as it was introduced!

QT, please drop the PIN sets and use other security features like the banks are using today, like security questions.

Re: X-payment PIN set
 

We use KeePass and save the keepass file on a USB drive

Re: X-payment PIN set
 

Rene,

We will check with our PA-QSA if we can remove this feature with release of X-Payments v1.1. It was advised to implement PINs by them originally.

Re: X-payment PIN set
 

I fear we can't remove PIN codes as PA-DSS requires to have two-factor authorization mechanism implemented and actually X-Payments didn't have this feature originally and we had to add it due to PA-DSS.

Re: X-payment PIN set
 

Re: X-payment PIN set
 

> Maybe you can allow for few pin packs to be created and used at the same
> time?

For one user or for several? Please see below link in case you mean several back-end users.


> Also is there a reason for X-Payments not to allow for more then one admin
> account?

http://help.x-cart.com/index.php?title=X-Payments:User_manual#Creating_user_account

You can have as many admin accounts with different access levels as you wish using the above feature.

Re: X-payment PIN set
 

That certainly answers the questions. Why do I remember before only one admin account was allowed for X-Payments - the one setup durring install.

Re: X-payment PIN set
 

espresso:

A small hack, if you do not remember which exact PIN-code you should use:
- you should enter the email and password correctly, and specify any fake number as a PIN-code. So that X-Payments will show you the number of the required PIN-code.