Solution: You need to do the following things:
- Buy and install an SSL Certificate (possible sites Verison, GeoTrust, and RapidSSL)
- Download and Install Secure Pages module and Secure Pages Hijack Prevention module
- Set a folder outside of the DRUPAL root directory that the Ubercart module is allowed to access so it can create the keyfile to encrypt credit card data
If you do steps 1 and 2 you have met the current security standards (PCI DSS). And doing step three satisfies Ubercart's remaining requirement.
You will also need to set the payment gateway for credit cards. As of 8/19/10 I am still looking into what those settings need to be.
- Daniel Casey
No comments:
Post a Comment