OpenCart 2.0 PCI Compliance

I know there are several payment methods built-in to OC 2.0. We are using the Authorize.net plugin. We are filling out a PCI compliance survey from a new CC processor that we have, and I am having a hard time finding out anything useful about OC 2.0 and PCI compliance.

I know everyone is the US deals with it. I would hope that the core OC 2.0 would already be PCI certified and registered as such. Since I don;t think it is, any suggestions as to how to tackle this?

Chris

gmedia01 wrote:I know there are several payment methods built-in to OC 2.0. We are using the Authorize.net plugin. We are filling out a PCI compliance survey from a new CC processor that we have, and I am having a hard time finding out anything useful about OC 2.0 and PCI compliance.

I know everyone is the US deals with it. I would hope that the core OC 2.0 would already be PCI certified and registered as such. Since I don;t think it is, any suggestions as to how to tackle this?

Chris

For starters, you should have an SSL certificate and Dedicated IP address (especially if you're using Authorize.net AIM). Second, the PCI scans are done to check the server security so the only way to know is to run the scan and then send the report to your hosting company to fix any issues. As far as the Opencart side, I'd suggest not using 'admin' as the username and make sure each admin has a strong and unique password.