Commerce Server 2007 – No CISP/PCI PABP Certification?!?!

Yes, unfortunately this is true, and is a major competitive factor between CS 2007 and products like AspDotNetStorefront.

Fear not, for there is hope, and a whole lot more!

IP Commerce, a software company enabling open commerce services between businesses, delivers a toolkit designed to integrate with Microsoft Commerce Server 2007 to support multi-service connectivity for retailers, end-to-end e-commerce solution that includes traditional and alternative payments, and provides for compliance with Payment Application Best Practices (PABP), a sub-set of the Payment Card Industry (PCI) data security standard.

Commerce Toolkit for Multi-Channel Retail (MCR), integrates with the Commerce Server 2007 Starter Site to deliver alternative payment options, including electronic check processing, stored value and gift cards, express checkout, and bank card processing as a traditional payment option.

Below is a list of the key features delivered:

• Access to new and emerging payment types
• Seamless integration of multiple e-commerce services
• Reduced transaction costs through flexible payment options
• Dynamic management of payment types from a single location
• Security-enhanced, PCI-compliant solution

Enjoy!

AspDotNetStorefront Configuration Best Practices

Below is a list of some “critical” items that should be configured in your AspDotNetStorefront production environments.

> Rename and secure the “admin” folder:

1. Change AppConfig.AdminDir
2. Change the folder’s name
3. Assign a Windows-level login to that folder

> Change admin username from admin@aspdotnetstorefront.com to something within the site’s domain

> Change admin password to something cryptic and set AppConfig.AdminPwdChangeDays to something reasonable/safe

> Set strong passwords (optional)

AppConfig.UseStrongPwd = true

> Cycling your encryption key

The admin will auto-notify you based on AppConfig.NextKeyChange value. Use this page in the admin to reset your encryption key manually: changeencryptkey.aspx

> Set this AppConfig so the user is not always trapped in an SSL state after hitting My Account and/or Checkout pages.

AppConfig.GoNonSecureAgain = true

> Reset Cache

This is actually a call to a stored procedure and can be automated in the DB as a trigger whenever a catalog change occurs.

exec aspdnsf_CreateMissingVariants

You should always run it after any product catalog changes, as well as AppConfig and String Resource updates.

> Admin SSL

Configure IIS to force SSL on the admin folder.

> Caching

AppConfig.CacheMenus = true

> Monthly Maintenance

This should be run monthly on weekends late at night… Admin/Misc/Monthly Maintenance

Community Server 2007 Plug-Ins

More updates on the Community Server 2007 and AspDotNetStorefront project soon, but in the mean time here are some great tools that you can plug into CS 2007 that tie into the membership/profile system:

Cute Editor – this is a neat plugin that replaces the out-of-box (OOB) WYSIWYG editor in CS.

Cute Live Support – live chat with users much like what’s found on top eCommerce sites.

Cute Chat – an awesome chat interface for CS user community.

Where can you find all these great tools? Right here…

Kudos to the CuteSoft.Net team for creating these neat tools – it’s great to see that CS is being well supported by third party vendors.

Finally, when you have a few minutes to spare, subscribe to the RSS feed of CS’s CEO!