Recent content by Shift4SMS

Since they don't really have a pad specific standard, you need to do everything possible that does comply with PCI. While this may sound vague, there are a lot of requirements can be applied. My suggestion is to use a point-to-point encryption (P2PE) swipe reader as this is the strongest method...

You don't need a processor TID for each station, this would be a auditing/reconcilliation nightmare. I don't know the inner workings of PcCharge but the per station fee sounds likely. Steve Sommers www.shift4.com -- Creators of $$$ ON THE NET(tm) payment processing services Blog...

I understand what you're saying, I just don't fully agree. What makes stand alone terminals so hack resistant? The have a mother board, memory, CPU, operating system, I/O and an application -- all in common with a POS. Yes, they are not "normally" connected to a LAN and this may be their only...

RE: "It is kind of cool that I've been seeing some mag card readers that actually encrypt the data while it is being swiped so that the workstation never at any point has the credit info in plain text." This is exactly what I was describing and many POS applications are integrating or have...

I believe you can take the operating system out of scope if you use hardware based point-to-point encryped (P2PE) entry devices (swipes and/or keypad). They cost some money for devices, but cheaper than replacing everything and may be an option for some. Steve Sommers www.shift4.com --...

You can try googling "micros 3700 secure drivers" as there are options available. Just make sure whatever you find is on PCI SSC's Validated Payment Applications list: https://www.pcisecuritystandards.org/approved_companies_providers/validated_payment_applications.php Steve Sommers...

RE: any idea on a default dba uer/password ? If you are PCI compliant, or think you are PCI compliant, there should not be a default user/password being used. Whoever setup your system should have given you, or better yet, let you assign the user and password. Steve Sommers www.shift4.com --...

To the first question about encoding, high-co vs. low-co does not really matter for gift cards. Heck, it does not really matter for bank cards. The difference is that high-co can last a little longer -- on paper. In reality, customers losing cards, demagnification due to environmental factors...

Actually it's not a "PCI" violation, it a merchant agreement violation that is dictated by the card brands. There are only two card brand approved ways to handle open tabs: 1) Hold the tab open at your own risk and get a single payment at the end or, 2) Don't allow open tabs and instead charge...

The problem you are having is that the card associations try their best to make it impossible for merchants to keep "open tabs" without full risk to the merchant for customers skipping out. There are a few ways merchants are doing tabs (pre-auth an estimated amount upon opening a tab, holding...

A big red flag in your question is "am I safe to load a .net program that will install .net 3.5?" Be very careful with what you load anywhere on your payment application (MICROS) subnet. While Micros may work fine, many times it will violate one or more PCI rules so if you are ever breached...

That's a new one. I'm not aware of any of our customers using a keyboard and mouse at the clerk station -- all use touch screens. It sounds like the two USB devices are fighting with each other. The MagTek device requires the "PC keyboard reader" whereas the keyboard requires a different...

Very cool. Now and then I post something useful. ;)

Here is what I got when I queried my staff: "If you go into the workstation configuration. (left,right,left & enter code) then go to mag stripe readers and enable PC keyboard reader and then save the configuration. This works on our UWS4 with a magtek USB reader." This is beyond my expertise...

Just wondering, are you using Shift4 as your gateway? If so, there are a few options that could be misconfigured and you should call their (our) 24x7 support and they can help you. The Shift4 driver tokenizes the card upon swipe so if it's misconfgured, "credit card type not found" is the...