Credit Card Encryption

[Cornerstone]

Hello,

My company has setup all the necessary parts to make the shopping cart work with shipping info and payment gateways. The only problem is when we us a credit card to purchase an order Able stores the credit card number and exp date in the ac_Payments table in the column EncryptedAccountData.

If this column says “Encrypted” why is it clear as day what the card information is? Is this a setting in the site or do we have to add code to actually encrypt this data?

Thanks,
Derek

[mazhar]

Make sure the Enable Credit Card Storage checkbox is checked in Configure > Security > General page on admin side.

[Cornerstone]

Ahh! Great, didn't see that setting before.

Thanks for helping.

[Logan Rhodehamel]

Ahh! Great, didn't see that setting before.

Was that actually the answer? If I am reading this right, you are asking why the Encrypted... field has plain text? In that event, it means you have not yet set an encryption key. Configure -> Security -> Encryption Key is the place to get that taken care of.

[Cornerstone]

Well, although the original question was about the Encryption. Not saving the credit card information is even better.

BUT knowing that is how to make it encrypted is also a great thing to know.

Thanks for the help .

Derek