Pulse Commerce offers many options to automate credit card processing, which is both easier and more secure for yourself and your customers. Therefore, we do not recommend that you process credit cards manually.
Below are some basic guidelines to set up manual credit card processing:
- Set up a custom payment method to request the credit card number from the customer on the storefront.
- In order to view the credit card numbers in Pulse Commerce, you must request that a credit card decryption key be added to your site. You must email your request to email@example.com (see below). This request must be submitted in writing as proof you take responsibility for any PCI violations due to your company's process in manually retaining your customer's credit card details.
- Once the key is installed, you will be able to view the credit card numbers in Pulse Commerce and type the credit card number into a payment terminal (either a physical terminal located in your office or a virtual terminal) connected to your merchant bank.
Important: According to PCI requirements, Merchants may not request or store the CVV2/CID code or any track data from a customer if processing credit cards manually.
Requesting Credit Card Decryption
Pulse Commerce Support can install a decryption key which enables individual site administrators, with access to the order details and access to the decrypt function, to view the credit card numbers by pressing a "Decrypt Button". The "Decrypt Button" will only appear on the Order Editor page (i.e. the "Decrypt Button" will not appear on the Order List or Order View pages).
Note 1: All credit card numbers are automatically removed after 60 days from the date of order placement.
Note 2: Once the decryption key has been installed, the super admin user will be able to grant individual admin users the permission to view and decrypt credit card numbers. Only non Administrator accounts, who have been explicitly granted permission, will be able to decrypt and view credit card numbers.
To request a decryption key added to your site, an Authorized Contact should email firstname.lastname@example.org the information below:
|Email Subject-line (copy/paste this into the subject line of your email):|
|<PrimaryURL / DomainName>: Credit Card Decryption Key Request|
|Email Body (copy/paste this into the body of your email):|
Dear Pulse Commerce,
By submitting this request for Credit Card Decryption, I understand and agree to the following:
Once the decryption key has been enabled, admin panel users who have been granted the appropriate permission will be able to click a Decrypt Card link on the order editor page to view the full credit card number of an order.