topic Re: x_tran_key in Card Not Present Certification in Partner Programs

x_tran_key in Card Not Present Certification

sgeralnik — Sun, 26 Feb 2012 15:55:32 GMT

As part of the certification process, are you asking me to pass my transaction key as a parameter? Doesn't this nullify the entire idea of security if the key used to encrypt the parameters is passed along as a parameter? I'm looking at the Testing Criteria Guide for Card Not Present 3.1 Application on page 7.

Thanks,

S. Geralnik

Re: x_tran_key in Card Not Present Certification

Trevor — Tue, 28 Feb 2012 20:19:38 GMT

The guide that you are looking at was written originally for certification with AIM only. When using AIM, you would always pass in the transaction key. If you are using DPM, the fingerprint and associated fields would take the place of the transaction key. I'll make a note for our certication team to see if we can get the guide updated to reflect that.