Windows Mobile Credit Card Requirements

Overview

Requirements for using Credit Card Authorizations include installing the ServMan Credit Card Web Service on a web server which has access to the SQL Server where ServMan data is located.  Requirements also include obtaining or creating an SSL certificate and configuring the network to route traffic properly. 

ServMan Mobile version 2.0.1 or higher with SMAuthorize application, as well as appropriate .dlls must be installed on all mobile devices.

ServMan Web Service Requirements

The web service recommendations provided below are designed to help maintain a secure network and should be followed as stated below.  

1. We strongly recommend a stand-alone Windows Server which is separate from your application server, terminal server, or SQL server to reduce the possibility of security risks.  Remote access must be granted to server for ServMan personnel to install and configure the web service.  
2. IIS 7.0 or higher must be installed on Windows Server.  IIS 6.0 compatibility role must be turned on.
3. SQL Server native drivers for connecting to the SQL production server must be installed on the web server.
4. An SSL certificate to allow HTTPS connection (port 443) must be obtained or created and installed in IIS and linked to the ServMan Web Service.  The SSL certificate does not need to be from a trusted SSL authority because the ServMan mobile applications trust any SSL certificate.  An SSL certificate should be from a trusted SSL authority if it will also be used for taking credit card payments through a web site.
5. We do not recommend any configuration of the web service using non-SSL connections.  
6. A specific Windows domain user should be created and set on application pool for ServMan Web Service.  This user should be set to have read/write access to the website directory and given read/write access to the SQL Server, which hosts ServMan data.  The Windows user should also have read/write/create rights to Server Application Event logs.
7. The Web.config file (usually in c:\inetpub\wwwroot\servmanwebservice) must have the appSetting section configured and any SQL connection strings setup as well.  The SQL Server connection string should use trusted user whenever possible. (i.e. SQL Server username and password should not be used in web.config file.) This web.config file is typically setup by ServMan personnel.  
8. A merchant account must be obtained from Authorize.NET and configured in the ServMan Credit Card module.  Authorize.NET is the only Gateway supported in ServMan Mobile and SMAuthorize.  
9. A merchant account must be obtained from Authorize.NET and configured in ServMan Credit Card module.  Authorize.NET is the only Gateway supported in ServMan Mobile and SMAuthorize.
10. ServMan Mobile version 2.0.1 with SMAuthorize must be installed on Windows Mobile 5.0 or higher mobile devices when using ServMan Mobile Windows Mobile edition.  All versions of ServMan Mobile Tablet edition will work.  A WAN wireless data connection and data plan are required on the device for wireless internet access.
11. Approved Magnetic Strip Reader configured within SMAuthorize.  Approved MSR’s are:

Printers must be paired with device using Bluetooth. 

back to top