Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

I have 3 sites owned by me and use the same credit card merchant for all 3.

I have x-payments free because I have been with x-cart before 2010.

Question; do I create a Server (ie; payments.name.com) get a cert for it and point all 3 sites to that server for payment?

Also since I have the free version of x-payments can I use it for the 3 stores or do I need to purchase 2 more licenses (can't afford that!)

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

You can use www.mydomain.com/xpayment or payments.mydomain.com - it doesn't really matter, just make it what you think is better so customers form the 3 sites are aware this is a legit payment page
You can use one copy of X-Payments for up to 10 stores so you do not need to buy it to be able to connect your 3 stores

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

I want to add to Steve's post that X-Payments can mimic feel'n'look of your store checkout area for each integrated shop so customers won't see big difference during their checkout.

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

Alex,
Could you please comment on post 10 of this thread http://forum.x-cart.com/showthread.php?t=63978


Thanks

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

We currently use comerica merchant alliance to process credit cards manually, can we link to comerica merchant alliance via x-payments?

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

Dawn,

Just noticed this post.

> We currently use comerica merchant alliance to process credit cards manually,
> can we link to comerica merchant alliance via x-payments?

What payment gateways do they support?
X-Payments integrates with these:
http://www.qtmsoft.com/xpayments.html#features

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

I think that some people may be missing the fact that if you use a virtual terminal and process cards manually and don't collect the CC info on your site you still need to go throught the PCI compliance and pass the certificate info to your merchant bank.

We just went through this and they will test the router that your computer uses to pass the CC details when you use a virtual terminal.

If you collect the CC details via your own cart, to use on your virtual terminal, or even your handheld terminal, then your server needs to be tested and proved secure.

If you use a VOIP phone line, or even skype type services, then the router that the voip phone is connected to needs to be tested.

Its all about how the CC data is collected and processed.

Adrian

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

Adrian, true!

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

Since there is a lot of talk/question about our Authorize.net DPM module for 4.5.x in this thread, we do have it available for this version since late May and have many utilizing it already. It does not require Authorize.net AIM. It was just convenient before to use the AIM settings in the DPM module for previous versions of X-cart.

http://www.bcsengineering.com/store/authorize.net-dpm-module-for-x-cart-pa-dss-compliant.html?MMCF_xfDPM45x

Carrie

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

X-Payments Hosted is available now:

http://s.x-cart.com/buy_xp_hosted

It provides all-in-one package for PCI compliance: a PA-DSS certified payment web application and PCI compliant hosting for credit card processing.