Payment Apps

The Solution to Getting Payment Transactions to Processors

Demo, Test and Production modes in one download (production mode requires purchase)

Stunnel

“Stunnel is a proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs’ code. Its architecture is optimized for security, portability, and scalability (including load-balancing), making it suitable for large deployments.”

Overview

When communicating with the Trevance® and CN!Express® payment applications from a remote server, the communications between the two servers must be secured. Auric requires that the payment applications be operated behind a secure proxy. Any proxy such as Microsoft® IIS, nginx®, or Apache® is suitable.
One alternative is the stunnel proxy service. From the stunnel.org web site, “Stunnel is a proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs’ code. Its architecture is optimized for security, portability, and scalability (including load-balancing), making it suitable for large deployments.” Auric deploys stunnel in several production environments. It is available for many operating systems including Windows®, Linux®, and OS X®. Since the Trevance and CN!Express applications run primarily on Windows this guide will focus on that operating system.
Once stunnel is installed, you will be able to communicate to stunnel using your existing HTTPS configuration. The stunnel application will communicate to the Trevance or CN!Express application installed on the same server via HTTP.

  • We  expect to have updated infomation by 3/25/17
  • Stunnel on the web
  • Stunnel configuration file for use with CN!Express® and Trevance®
  • Stunnel Guide

Trevance® Payment Processing Application

The Trevance® payment application is sunset. Please contact Auric support.

Watch The Video

Payment Processing Simplified®

Please see the Sunset/FAQ tab.

The Trevance® payment processing application is PA DSS validated enabling merchants to easily route payments from their business environment to leading payment processors:

  • Chase Paymentech
  • First Data
  • TSYS
  • TransFirst

Trevance connect’s to payment processors through dedicated MPLS, SFTP or VPN connectivity. The payment application contains everything you need to process payments in one package. The communications links and web interface are built in and included in the low cost. Support and maintenance for the first year are built in as well, so there is nothing more to buy.

The Trevance® payment processing application is compatible with all web development environments. You can also process transactions with non-web tools. If your non-web tool can request a web page, you can process transactions through the built-in web-server. The built-in file interface enables batch settlement transaction processing. The Trevance® payment application includes the latest in payment processor features for cutting edge security and flexibility.

 

  • PCI PA DSS validation (click here to verify the PA DSS Listing, search by application name; Trevance)
  • PCI Documentation
  • AES 256 encryption
  • Password re-use protection
  • PCI Compliant Key Management
  • Import file encryption
  • PCI Compliant Demo, Test and Production modes
  • PaymentVault™ Tokenization Technology
  • SHA-256 Hashed User Passwords
  • Console-Server RSA Key exchange
  • Timed Lockout of unsuccessful log-ins
  • Auto Log-Off of unattended administrator account
 Trevance Features CN-4250  CN-4200  CN-3500
Connection Method                           (MPLS / VPN / SFTP) M/V/S M/V/S V/S
Divisions Supported Unlimited Unlimited 999
Batch Transaction Y Y Y
“Reasonable” batch size (# transactions) 200,000 200,000 200,000
Real Time Authorizations Y Y
Real-Time Conditional Deposit Emulation Y
Real-Time Speed (transactions/second) 30 30
Estimated throughput: minutes per batch of 1000 transactions less than 2 Min less than 2 Min less than 2 Min
Actions: Authorization, Conditional Deposit (Sale), Refund. Deposit A / D / S / R A / D / S / R A / D / S / R
Payment Card, American Express, Carte Blanche, Diners Club,Discover/Novus, JCB, MasterCard, Optima, Visa/Delta Y Y Y
Checks Y Y Y
Visa PA DSS Validation Y Y Y
Integration Method
Delimited Text File Y Y Y
Built in Web Server Y Y
Additional Functionality
Import/Export File Encryption Y Y Y
PaymentVault™ Ready Y Y Y
Custom Versions Available Y Y Y
Real-Time Processor Connection Fail-Over Y Y
Auto Settlement Y
Private Label Cards Customization Y
Pricing
Retail Price $29,000.00 $19,000.00 $4,900.00
Support and Maintenance per yr. (after first yr.) $8,700.00 $5,690.00 $1,400.00

System Requirements

OS:Microsoft Windows Servers 2008R2 and 2012 Standard and R2. (32 &64 bit), 2016 Standard.

CN-4200 & 4250:

  • RAM: 2 GBytes
  • CPU: 2.5 GHz
  • Dual-Processor for highest throughput

CN-3500:

  • RAM: 1 GBytes
  • CPU: 1 GHz

 

Please see the Sunset/FAQ tab.

Trevance® Payment Application Orientation

Training Is now in Adobe Shockwave Format (SWF)
Obtain a Shockwave player from Adobe 

The Trevance® Payment Application Server Console Menu Orientation Sessions

Trevance® Payment Application Installation Extras

 


Trevance® Sunset Information and FAQ

Sunset notification email.

Trevance Sunset Notification
The Trevance® payment processing application is sunset. Version 3.0.9 of the Trevance® payment application is the final official release.  Support for existing Trevance® installations will continue to be available until June 30, 2019.

Prior to 31 March, 2017, Auric will contact all clients using the Trevance® payment application to discuss options.

For immediate assistance contact Support@AuricSystems.com or by phone: 603-924-6079 .

 

Trevance® Sunset FAQ
Q: What does this sunset announcement mean?
A: This announcement means Auric is not planning any future general Trevance® releases. There are updates that have been applied to Trevance that are available on a bespoke basis. Auric Systems International shall provide on-going technical support for Trevance® until June 2019. Trevance® is no longer for sale for new installations.

 

Q: Are there any immediate changes?
A: No. Consider this an informative announcement at the moment and let’s all get through the busy holiday season.

 

Q: How can Auric Systems help?
A: Auric Systems will contact each of our clients individually in early 2017 after the busy holiday season concludes. We will work with you to understand precisely how you are using the Trevance® application, and to discuss migration options. You’re invited to use this link to schedule a migration discussion time with one of our support staff.

 

Q: Why is Auric Systems sunsetting the Trevance® payment application?
A: The PCI PA DSS rules make it difficult for payment applications to be flexible and responsive to change. For example, adding support for a new payment processor requires we perform a full PCI PA-DSS re-assessment. This inflexibility not only raises issues for Auric, it causes problems for our clients who rely on Trevance® to meet all their payment processer integration needs. Moving to a service allows Auric to provide greater flexibility. Since starting the AuricVault® service, we’ve already had the flexibility to add support for a payment processor used by a single client as well as custom tokenization functionality for another. The PCI PA-DSS requirements would have required a payment application to undergo a full PCI PA-DSS re-assessment for both of those changes, adding tens of thousands of dollars and months of delay.

 

Q: Can I continue to get support?
A: Yes, support is available until June 2019.

 

Q: What does my annual renewal fee cover?
A: Your annual fee covers ongoing support.

 

Q: Is Trevance® PCI PA DSS Compliant?
A: Trevance® 3.0.9 is validated to version 2.0 of the PCI PA-DSS and remains suitable for existing deployments. See PCI www.pcisecuritystandards.org Validated Payment Applications. Later Trevance releases are available on a custom basis. Please contact Auric support if you need an update. 

 

Q: Does Auric Systems International have a Trevance® replacement?
A: The AuricVault® web service functionality is comparable to the Auric’s CN!Express® real-time functionality. Some clients may find it suitable to move to the AuricVault® service. Auric will be discussing this option, as well as a direct Trevance® replacement as a service or in-house application during our 2017 meetings.

 

Q: Could I transition from Trevance® to the AuricVault® service today?
A: Yes, you can transition now if you want to switch from a direct processor connection to a web gateway service. Please contact support to discuss.

 

Q Where can I find more information on the AuricVault® tokenization and payments service?
A. More information is available on the Auric WebSite. 

 

AKMP™ Key Manager

Encryption Key Management Simplified

The Auric Key Management Proxy (AKMP™) application connects to Auric’s n-key™ cryptographic key management service. AKMP™ manages the encryption keys, ensuring that they are both completely secure and fully available. The AKMP™ service is a software interface to Auric’s n-key cryptographic key generation and management service. The AKMP™ service securely provides encryption keys from n-key to other services running on the same host. Through contact with n-key’s geographically distributed servers, the AKMP™ service ensures that your encryption keys are both completely secure and fully available. CN!Express® and Trevance®,  Auric’s industry-leading payment applications, use n-key via AKMP™ for encryption key management at no additional cost to Auric’s payment application customers.

Complying with the PCI standards can be daunting. In keeping with Auric’s traditional model of simple applications, our key management service is simple to install, configure, and use.

The n-key™ service securely generates cryptographic keys utilizing private/public key technology. Key rotation is managed automatically.  Storing encryption keys on the same system as the protected data violates all of the core principles of data security. The Auric Key Management Proxy (AKMP™) enables easy access to keys, while being in a secure, remote location. AKMP™ is the functional interface for the account holder and the n-key service with Auric’s payment applications. The n-key™ service is hosted in a distributed model, with multiple ISPs at multiple geographic locations maximizing security and availability. The n-key™ service is platform and operating system independent. An n-key™ account is requested by calling Auric Systems International at 603-924-6079.

 

 

PCI Compliance

The AKMP™ service assists with PCI Compliance, addressing Section 2.6 of The Payment Application Data Security Standard (PA DSS) which states “Payment applications must implement key management processes and procedures for cryptographic keys used for encryption of cardholder data”.

Custom Implementations

The AKMP™ service and the n-key™ service are available for custom implementations for key generation and management. Contact Auric Today!

Supported Operating Systems

OS:Microsoft Windows Servers 2008R2 and 2012. (32 &64 bit), Linux, Mac OS

CN!Express®Payment Processing Application

Watch the Video

Payment Processing Simplified®

Please see the Sunset/FAQ tab.

 

Route Business Payments to Leading Payment Gateways

The CN!Express® payment processing application enables merchants to easily route payments from their business environment to leading payment processing gateways. The CN!Express® payment processing application contains everything you need to process payments in one package. The communications links and web interface are built in and included in the low cost. Support and maintenance for the first year are built in so there is nothing more to buy.

The CN!Express® payment processing application is compatible with all web development environments. You can also process transactions with non-web tools if your non-web tool can request a web page. Transactions process through the CN!Express® payment processing application web-server. The CN!Express® payment processing application built-in file interface enables batch settlement transaction processing. The latest in payment processor features for cutting edge security and flexibility are part of the CN!Express® Payment Application.

The Highest Level of Security

The CN!Express® payment processing application is validated by, and strictly adheres to, the Visa U.S.A. Cardholder Information Security Program (CISP) Payment Application Data Security Standard (PA DSS). Sensitive data is fully protected.

 

Please see the Sunset/FAQ tab.

 

Features:

  • PCI PA DSS validation (Click Here to verify the PA DSS lising, search by Applcation Name; CN!Express)
  • PCI Documentation
  • 256 AES encryption
  • Password re-use protection
  • PCI Compliant Key Management
  • Import file encryption
  • PCI Compliant Demo, Test and Production modes
  • PaymentVault™ Credit Card Tokenization Technology
  • SHA-256 Hashed User Passwords
  • Console-Server RSA Key exchange
  • Transactions to payment processor gateways are sent using secure HTTPS protocols as defined by the specific gateway provider
  • External key management services supported, including Auric System’s own n-key, which is free to all CN!Express® customers and provides secure off-site key storage and rotation

Rapid Deployment & Ease of Use

We engineer the CN!Express® payment application for ease of use. Implementation into business environments is straight forward. Once the CN!Express® payment application is configured, you rarely need to interact with it. The console even runs on remote desktops.

The web interface is very simple and user-friendly. One interface with a choice of four payment processors.

All in one, easy to implement package.

Our support staff takes the time to understand your requirements and answers your questions personally and clearly.

Flexibility

The CN!Express® payment application fits into a multitude of business environments. We offer custom versions tailored to your individual payment processing needs. You will gain the ability to focus on your core business rather than your payment application.

Process Thousands of Payments a Day

The CN!Express® application manages your payment processing securely, efficiently, and easily. Set it up in minutes, then sit back while it processes up to 10 transaction simultaneously (Windows) or 150 transaction simultaneously (Linux).

What does that mean for you? Where others send one transaction after another, The CN!Express® payment application processes up to 1,000 transactions in under 5 minutes on Windows and more than 50 transactions per second on Linux.

General CN!Express Info CX-7005 CX-7010 CX-7150
Product Details
Multiple Simultaneous Connections 5 10 150+
Estimated Throughput: minutes per 1000 transactions 10 5 < 1
Number of Divisions Supported Unlimited Unlimited Unlimited
Batch Transactions Y Y Y
Real-Time Transactions Y Y Y
Modes: Demo (D) Test (T) Live (L) D/T/L D/T/L D/T/L
PA DSS Validation Y Y Y
PCI Installation / Configuration / Documentation Y Y Y
Import / Export Encryption Y Y Y
Integration Method (F) File (W) Web F / W F / W F / W
Communication Method to Processors HTTPS Y Y Y
Built-in Web Server Supports HTTP (H) and HTTPS (S) H / S H / S H / S
Multiple Payment Methods per Batch Y Y Y
IC-Verify® style responses Y Y Y
PaymentVault™ Ready Y Y Y
Stateless Mode Y Y Y
PCI 2.0 Key Management Y Y Y
Linux Y
Windows XP, Srvr 2003, 2008R2 Y Y
Custom Versions Available Y Y Y
Retail Price $1,400.00 $4,900.00 $19,000.00
Support & Maintenance after  $599.00 $1,400.00 $5,690.00

System Requirements

OS:Microsoft Windows Servers 2008R2 and 2012. (32 &64 bit)

CX-7002/7005/7010:

  • RAM: A minimum of 256 Mbytes of memory
  • CPU: A 500MHz Pentium Processor

 

Please see the Sunset/FAQ tab.

 

Training On Demand! Pre-recorded Trevance Application Orientation Sessions

Training Is now in Adobe Shockwave Format (SWF)
Obtain a Shockwave player from Adobe

Please note: the flash video training that follows is representative of installations in Windows 2003 and XP. The Windows 7 installations file locations are different and will be covered in future flash videos.

  • Section 1 Intro, CN!Express Components, Folders, Filed Reference, HTML Sample (8:40Min)(SWF)
  • Section 2 Configuration Utility Tabs – General Divisions & Web Formats (8:40Min)(SWF)
  • Section 3 Configuration Utility Tabs – Web formats, Files, File Formats (8:40Min)(SWF)
  • Section 4 Configuration Utility Tabs – File Formats, Security, Run Mode & Advanced (8:40Min)(SWF)
  • Section 5 Configuration Utility Tabs – Advanced, Database, About. Demonstration of CN!Express in Action as an Application (8:40Min)(SWF)
  • Section 6 Demonstration of CN!Express in Action Continued with AuricVault™ Tokenization (1:50Min)(SWF)

Specific pre-recorded orientation sessions for CN!Express® Application Configuration Utility

In this section we have assembled a short video orientation for each Tab section of the CN!!Express Configuration Utility.

  • General Tab – Server Name, Web Service, Transactions Files, Web Console (3:38Min)(SWF)
  • Divisions Tab – Add a Division (4:16Min)(SWF)
  • Web Formats Tab – Configuring CN!Express for Web Format transactions (4:47Min)(SWF)
  • Files Tab – Directories, File Extensions and File Encryption (5:12Min)(SWF)
  • File Formats  Tab – configuring CN!Express for File Format Transactions (9:77Min)(SWF)
  • Security Tab – AKMP, Allowed Hosts and Users (2:10Min)(SWF)
  • Run Mode Tab – Registration, Run Mode (2:23Min)(SWF)
  • Advanced Tab – AuricVault, Logging and Messaging,Email Notification and Database Maintenance (6:35Min)(SWF)
  • Database Tab –  External Database Connection for Demo & Test / Live connections (1:07Min)(SWF)
  • About Tab – Open Documentation Button, Configuration Utility Version, supported Payment Processors Contact information (0:50Min)(SWF)

Specific pre-recorded demonstrations of running CN!Express CX-7000 Series server

Trouble Shooting

 

Additional Information

 

 

CN!Express® Sunset Information and FAQ

CN!Expess® sunset email.

The CN!Express® payment processing application is sunset.  CN!Express® version 5.0.8 is the last official release.

 

Auric is in the process of completing a migration path from the CN!Express® payment application to the AuricVault® tokenization and payments service. Several clients have already migrated to the new service. You’re invited to use this link to schedule a migration discussion time with one of our support staff. Auric recommends that all clients migrate off the CN!Express® application by June 2018.

 

During this migration period Auric will continue to support the CN!Express® payment application. Your Annual support license now includes moving you to the new web-based service.

 

For immediate assistance contact Support@AuricSystems.com or by phone: 603-924-6079 .

CN!Express® Sunset  FAQ

Q: What does this sunset announcement mean?
A: This announcement means Auric is not planning any future CN!Express® general releases. There are updates that have been applied to CN!Express® that are available on a bespoke basis.. Auric Systems International shall provide on-going technical support for CN!Express® until June 2018. CN!Express® is no longer for sale for new installations.

 

Q: Are there any immediate changes?
A: No. Consider this an informative announcement at the moment and let’s all get through the busy holiday season.

 

Q: How can Auric Systems help?
A: Auric Systems will contact each of our clients individually in early 2017 after the busy holiday season concludes. We will work with you to understand precisely how you are using the CN!Express® application, and to discuss migration options. You’re invited to use this link to schedule a migration discussion time with one of our support staff.

 

Q: Why is Auric Systems sunsetting the CN!Express® payment application?
A: The PCI PA DSS rules make it difficult for payment applications to be flexible and responsive to change. For example, adding support for a new payment processor requires we perform a full PCI PA-DSS re-assessment. This inflexibility not only raises issues for Auric, it causes problems for our clients who rely on CN!Express® to meet all their payment processer integration needs. Moving to a service allows Auric to provide greater flexibility. Since starting the AuricVault® service, we’ve already had the flexibility to add support for a payment processor used by a single client as well as custom tokenization functionality for another. The PCI PA-DSS requirements would have required a payment application to undergo a full PCI PA-DSS re-assessment for both of those changes, adding tens of thousands of dollars and months of delay.

 

Q: Can I continue to get support?
A: Yes, support is available until June 2018.

 

Q: What does my annual renewal fee cover?
A: Your annual fee covers ongoing support. Auric also provides technical phone and email support for migrating to a new service.

 

Q: Is CN!Express® PCI PA DSS Compliant?
A: CN!Express® 5.0.8 is validated to version 2.0 of the PCI PA-DSS and remains suitable for existing deployments. See PCI www.pcisecuritystandards.org Validated Payment Applications. Later releases are available on a custom basis. Please contact Auric support if you need an update.

 

Q: Does Auric Systems International have a CN!Express® replacement?
A: The AuricVault® web service functionality is comparable to the CN!Express® real-time functionality. Some CN!Express® users have already transitioned to the new service. Auric is in the process of developing a batch processing solution.

 

Q: When can I transition from CN!Express® to the AuricVault® service?
A: You can transition now. Some former CN!Express clients have already moved to the AuricVault® service. Auric is working on services to simplify the transition and will have more information available in early 2017.

 

Q Where can I find more information on the AuricVault® tokenization and payments service?
A. More information is available on the Auric WebSite. AuricVault®

asi-logo Learn about the AuricVault® tokenization service

AuricVault®

Share This
Check out developer.linkedin.com! https://www.auricsystems.com/wp-content/uploads/2016/04/Auric_vault.jpg anyone