Overview
Introduced in versions 7.050, PCI Mode will prevent the storage of sensitive credit card information within the program and securely encrypt the remaining data such as Transaction IDs and tokens.
NOTE: PCI Mode does not equate to PCI compliance. Stone Edge’s PCI Mode allows you to use the software in a way that adheres to the Payment Application Data Security Standards, which is a step toward allowing your company, as a whole, to achieve PCI-compliance.
How it works
With PCI Mode set to TRUE Stone Edge will not allow you to store credit card numbers and will force the user to the authorize or capture credit cards payment in the CC Terminal. Once a credit card sale or authorization is run, the card number is purged and only the transaction ID is retained. With this transaction ID you will be able to perform additional credit card processing actions such as credits, voids, and captures.
The software will retain the first 4 and last 4 digits of the card number and all sensitive cardholder data will be encrypted in the database.
Setup
To turn on PCI Mode, navigate to the System Parameters. Go to the “Security” group, then locate “PCIMode”. Set this to “True” and click “Save.”
At this point you will be prompted to confirm that you are turning on PCI Mode and that it is not reversible.
PCI Mode is not reversible. Once existing credit card data is purged, you will not be able to retrieve it. Stone Edge strongly suggests backing up your data prior to moving forward.
Once PCI Mode is on, credit card numbers will not be stored in Stone Edge. During manual order creation, credit card transactions must be authorized or captured prior to saving the order. You can manually log a credit card transaction, but the credit card number will be truncated and encrypted. A truncated credit card number will only retain the first four and last four numbers of the card.
A visual representation will be present when PCI Mode is on. Everywhere payments are processed and/or logged, will have a lock on a green background shown.