Latest on the TLS1.2 Payflow Pro roll-out by PayPal

PayflowPayments and MARTEC360 would like to share insights and a story provided by a customer who went live on the PayflowPayments solution today. The challenges for processing credit card payments with Payflow on any platforms and systems not upgraded to TLS1.2 and HTTP1.1 is in full swing.

From: Peter
Sent: Thursday, June 28, 2018 4:25 PM:
I just spoke to PayPal and they confirmed that they rolled the new security requirements out last night at 11:00. I commented that they have been telling us it was to occur on the 30th and she seriously replied with “we could not find enough people that would work this weekend so we rolled the update out last night so that we could be here Thursday and Friday to offer tech support”. Wow! I couldn’t have seen that coming…

So, we are not able to process cards until your solutions are in place. I recognize that you were already busy before we called you at the last minute, but we appreciate all you have done for us so far. Please let me know if there is anything I can do to assist.

After getting access to the servers and the ERP software at 1:30 pm, the solution was fully implemented, tested and into production by 4:42 pm.

 

Minutes later we had the following response:

From: Peter
Sent: Thursday, June 28, 2018 4:56 PM:
We just ran a card successfully and have MANY more to follow it. Thank you so much for the fast service and awesome support. As I mentioned, I am taking some much-needed R&R time and will be back after the holiday. We will be in touch shortly afterward to discuss our next steps. I would love to take a look at the mobile responsive custom eCommerce platform solution which you were mentioning. eCommerce was one of the main reasons we chose the system and we have never used it.

Followed by one more reply a short while later:

From: Peter
Sent: Thursday, June 28, 2018 5:29 PM:
I just wanted to drop a line and say thanks to you and your team for the incredibly fast and efficient service. Our poor planning resulted in a very tight window yet your solution was implemented like we were your most important customer. I am truly dazzled by the service we received. My only regret is that we did not discover you sooner.

I have no doubt your integrated solutions are going to become our new secret weapon and the key to our successful next chapter. I can’t thank you enough.

Best Regards,
Peter

If your organization is still struggling with the decision of how to handle the TLS1.2 and HTTP1.1 update and a roadmap forward with your ERP/eCommerce needs as they relate to Everest, make sure to reach out to the PayflowPayments by MARTEC360 team ASAP to start a path forward.

Testing / Verifying TLS1.2

PayPal has now decommissioned the pilot-payflowpro.paypal.com as a testing URL. Everything now must be verified against tlstest.paypal.com instead. Accounts that have not “verified” against this URL will continue to get messages from PayPal.

If you are already a PayflowPayements.com & MARTEC360 customer/subscriber of the service, please contact your account manager first before performing these verifications yourself. We had to republish a new test URI today (June 26th, 2018) now that the pilot url from PayPal was retired.

Windows 2003 and Payflow Pro

Over the past 10 days, PayflowPayments has begun moving customers over to the PayPal & Security Metrics certified TLS1.2 solution. When we architected and developed the PayflowPayments solution we fully vetted Windows 2008R2 and Windows 2012 as Server operating systems. We knew we would potentially see Windows 2003 servers out there because of our background, experience, and the wide range of solutions for Everest Software customers.

On Monday, April 30th we had the first customer commit to the PayflowPayments solution with a Windows 2003 server environment. We quickly discovered no remedies exist for 2003 servers. Organizations running Windows 2003 and utilizing the Payflow Pro Gateway from Paypal will be forced to upgrade their server environments to Windows 2008R2 at a minimum.

For Everest customers, PayflowPayments and MARTEC360 does have ERP private cloud hosting solutions both for temporary use (for the ability to get cc's processing again in an emergency situation) and long-term solutions. Any of these server build-outs will be a separate agreement outside of the PayflowPayments solution.

If you are down and not processing credit cards, with one of the systems/platforms we already work with, please contact us right away.

Copyright 2018 PayflowPayments by MARTEC360 ©All Rights Reserved