Preparation

Contact your hosting service provider to work with files on the host server.

IonGate certificate is trusted by Equifax. Since the standard java cartcerts file doesn't include Equifax public certificate, H-Sphere returns 'Connect error, untrusted server cert chain' when trying to connect to the merchant gateway. The following are the solutions:
A. If you have got the default java cacerts file and you have never changed it, you can simply replace it with the cacerts file offered by psoft:
/usr/java/<java home>/jre/lib/security/cacerts
B. If you need to keep your cacerts file, you can fix this problem using the keytool feature available in the standard java installation:

1. Download equifax.crt.cer file:
   wget http://www.psoft.net/shiv/files/merchants/equifax.crt.cer
2. Place equifax.crt.cer in the /usr/java/jdk1.3.1/jre/lib/security/ directory
3. As root, allow read/write access to the /usr/java/jdk1.3.1/jre/lib/security/cacerts file
   chmod 666 /usr/java/jdk1.3.1/jre/lib/security/cacerts
4. Log in as the cpanel user:
   su -l cpanel
5. Go to the /usr/java/jdk1.3.1/jre/lib/security/ directory:
   cd /usr/java/jdk1.3.1/jre/lib/security/
6. Run the following command:
   keytool -import -alias equifax -file equifax.crt.cer -keystore cacerts
7. When prompted, enter the password (the default password is: changeit)
8. When asked to trust the certificate, enter: yes
9. As root, change permissions back on the /usr/java/jdk1.3.1/jre/lib/security/cacerts file:
   chmod 444 /usr/java/jdk1.3.1/jre/lib/security/cacerts

Configuration

1. Select IonGate in the Add New Gateway box.
2. Click the Add button.
3. Fill out the form that appears:

   

   • Title: give a name to this IonGate connection
   • Server: the name of the IonGate server
   • Port: the port of the IonGate server
   • Path: the path to the server side handler file. This can be a script or a binary file that is launched with an http request.
   • Login: your IonGate login
   • Problem Notification Email: enter your email address to receive notifications about:
     - AVS problems. AVS stands for Address Verification Service. It can be used as an additional layer of protection for merchants who wish to verify that the purchaser knows the billing address of the cardholder (in case these are two different people). This is not a very serious form of risk mitigation or fraud prevention, and yet it does give some assurance that a hacker isn't simply generating a list of valid credit card numbers and purchasing product at will. AVS simply matches the numeric portion of the cardholder's street billing address and the 5 or 9-digit zip code of the cardholder's billing address. The AVS request parameters are STREET and ZIP. The processing network verifies the AVS information, comparing a portion of the billing address from the request message with address data on file at the VIC or the issuer's center. Based on the comparison, a response will be returned which confirms whether the information matches or not. Banks do not decline transactions based on the AVS check. The AVS response is returned as two single tab-delimited characters: YY, NN, YN, NY (Y-'matches', N for 'does not match'). This information is just an advice. However, the H-Sphere system will either allow or decline the transaction depending on the selected AVS status. AVS is available only for US cardholders.
     Important: To provide non US cardholders CC processing, disable AVS check-up in the merchant gateway configuration.
     - H-Sphere signup error: user's signup failure for unknown reasons after credit card is charged.
     When either of the problems occurs, H-Sphere sends a message to this address with the recommendation to void the transaction in merchant's gateway account due to AVS problems or system faults. To cancel the transaction, the owner of H-Sphere should enter the merchant account and cancel the transaction manually.
4. Click Submit Query