Configuring PCI Pal to communicate with UltraCart

https://www.pcipal.com/pci-compliance-solutions/

Within UltraCart, navigate to Home → Configuration → Integrations (tab) → Other (section) → PCI Pal.

This is a direct link to the path above:

https://secure.ultracart.com/merchant/configuration/pciPalSettingsLoad.do

Open

The fields shown in the screenshot above should be provided directly by PCI Pal. The names of the fields were provided by PCI Pal, so your PCI Pal rep will be familiar with them and can provide any assistance with gathering those values and describing those values as needed.

The only field that is specific to UltraCart is the Rotating Gateway. UltraCart must know which payment gateway to use when interacting with PCI Pal. You must select a payment gateway that you have configured within UltraCart. Currently, the only supported gateway is Braintree Payment Solutions (Blue). If you need support for another gateway, notify your PCI Pal representative and then contact UltraCart support. There is a small amount of configuration to activate another payment gateway.

Payment gateways are managed in UltraCart here:

Home → Configuration → Checkout → Payments

This is a direct link to the path shown above:

https://secure.ultracart.com/merchant/configuration/payment/v5/methodsLoad.do

Preventing direct credit card entry

UltraCart has a user permission that will disable direct credit card entry within the Manual Order screen. Combined with PCI Pal, this will allow customer service representatives to take orders using PCI Pal and ensuring they do not create orders by receiving credit card numbers directly into their possession. This permission will ensure a call center and its employees remain outside PCI scope should an issue arise.

To activate this permission for a user or group, edit the user or group and check the permission named “Back End Order Entry (Prevent Direct Credit Card Entry)“.

For more information on setting user or group permissions, see https://ultracart.atlassian.net/wiki/spaces/ucdoc/pages/1376982 .

Using PCI Pal when entering an order

The manual entry screen is found here:

Home → Operations → Order Management → Manually Add Order

Here is a direct link to the path listed above:

https://secure.ultracart.com/merchant/orderentry/orderEntryApp.do

Once PCI Pal is properly configured, a new Payment Method button will appear in the payments section. Also, if you have the user permission set, a message will appear notifying the customer service representative that direct credit card entry is disabled.

Open

The steps for taking an order using UltraCart an PCI Pal are as follows:

1. Enter all other information in the screen including billing and shipping addresses, items, shipping method, and miscellaneous information. The PCI Pal interaction should be the last thing done. Technically, the PCI Pal session will only require a billing address, but for the best experience, complete all other sections as well, saving PCI Pal for the part of order completion.

2. Click the PCI Pal payment button. This will display the PCI Pal area and an orange button named Start/Restart PCI Pal Session. Click that button to start the session.

3. When your PCI session appears, the rep will enter the Link ID into their phone system to sync the PCI Pal session with the phone call. When done properly, the phone icon will turn green.

4. Once connect, the rep will use PCI Pal per their instructions to collect card number, expiration date, and cvv number. When all information is collected, click the Process button to transfer that information from PCI Pal back to UltraCart.

5. After transferring the card information from PCI Pal to UltraCart, the order entry screen will display the message below. Click the Process Order button at the bottom of the UltraCart screen to complete the order.