[2015] Help with updates as requested by Authorized.net

Hello there,

I've recently received an email from the credit card provider linked to my Zen Cart. They are in an update process of their system. I'm trying to update Zen Cart to comply. I'm unsure of a few things and am reaching out for help.

They first mention implementing Akamai Network Technology. They are creating three new URLs for transaction processing that are hosted by Akamai. I'm asked update Zen Cart to point to the new transaction URLs but I don't know how to do this.

The new Akamai transaction URLs that are available now are:

https://api2.authorize.net/xml/v1/request.api
https://api2.authorize.net/soap/v1/Service.asmx
https://secure2.authorize.net/gateway/transact.dll

Would anyone here know how to update to one of these new Akamai URLs and/or can you direct me to the place to learn this?

Next, they discuss Firewall And IP Address Considerations. If I do not use a firewall or do not connect directly to them via an IP address, then I can disregard this. My question is, does Zen Cart use a firewall or not? I'm unsure of this.

If it does use a firewall then I'm guided to make sure that the firewall is set to permit outbound traffic to flow to the Akamai cloud by configuring my outbound firewall to "ANY." I'm unsure of how to do this as well.

I sure appreciate any help on this. Or, even a recommendation to a developer that can assist.

Thank you,

Michelle

Take a look
[https://www.zen-cart.com/showthread.php?217783-Authorize-net-Networking-Change-Summer-2015

](https://www.zen-cart.com/showthread.php?217783-Authorize-net-Networking-Change-Summer-2015)
Subscribing to is beneficial for this type of news
[https://www.zen-cart.com/subscription.php?do=addsubscription&f=2

](https://www.zen-cart.com/subscription.php?do=addsubscription&f=2)

...thank you!

Pardon the likely novice question but how do I determine if I've got AIM, echeck or SIM model in place?

go to the admin; then from the modules menu, select payment, and you can see what is active there...

...thank you so much! It appears to be SIM. Wamly, Michelle

Fn2bfit:

Hello there,

I've recently received an email from the credit card provider linked to my Zen Cart. They are in an update process of their system. I'm trying to update Zen Cart to comply. I'm unsure of a few things and am reaching out for help.

They first mention implementing Akamai Network Technology. They are creating three new URLs for transaction processing that are hosted by Akamai. I'm asked update Zen Cart to point to the new transaction URLs but I don't know how to do this.

...

Would anyone here know how to update to one of these new Akamai URLs and/or can you direct me to the place to learn this?
Real simple answer: NO CHANGES NECESSARY. See: https://www.zen-cart.com/showthread.php?217783-Authorize-net-Networking-Change-Summer-2015

FYI, the other completely off-topic discussion about storing card data has been relocated to: https://www.zen-cart.com/showthread.php?218135-Rants-about-PCI-vs-storing-card-data

hello all.

does this mean that to comply with email from authorize.net about changes "...As part of our continuous upgrades to enhance system performance and security, on September 21, 2015, we are upgrading api.authorize.net to new security certificates, which are signed using Security Hash Algorithm 2 (SHA-2) and 2048-bit signatures..."
No changes needed except Optional fix as in our post: https://www.zen-cart.com/showthread.php?217783-Authorize-net-Networking-Change-Summer-2015
Sorry for repeated questions, but what maybe obvious for you not so easy for many ;-).
We have more then one zen-cart 1.39 and authorize.net our payment option if something will not work all sites will not be able to process payment.

Thank you for help and understanding.

CustomDesign:

We have more then one zen-cart 1.39
You should upgrade your ZenCart(s) for security enhancements as well as other reasons
See support rules
https://www.zen-cart.com/showthread.php?72868-Zen-Cart-Software-Support-Life-Cycle

Basically, there is no longer support for 1.3.9 as of Jun 2012 or for the last 3 years

kobra:

You should upgrade your ZenCart(s) for security enhancements as well as other reasons
See support rules
https://www.zen-cart.com/showthread.php?72868-Zen-Cart-Software-Support-Life-Cycle

Basically, there is no longer support for 1.3.9 as of Jun 2012 or for the last 3 years

Thank you for this info, but question was about current situations for those who for some reason did not update and how may have issue with authorize.net update.

After authorize.net deadline for SHA-2 we will think to move/update our shopping cart to latest more reliable, now we need to solve current issue.

thank you for replay and update.

CustomDesign:

Thank you for this info, but question was about current situations for those who for some reason did not update and how may have issue with authorize.net update.

my understanding is that you do NOT need to do anything with regards to this update from authorize.net.

in addition, as you are right up against the deadline, i would suggest to not do anything and see if you can still process credit cards in the next couple of days. if you then have problems you can troubleshoot those problems, as they would almost definitely be related to authorize.net. if you were to change something now, and then have problems, without doing some digging, it might be more difficult to tell if your problems were related to the change you made versus the change from authorize.net.

hope that helps.

After authorize.net deadline for SHA-2 we will think to move/update our shopping cart to latest more reliable
You are using a version that support was stopped 3yesrs ago
The authorize.net file has changed in every release since 1.3.9x

1.5.0 - 19511 2011-09-14 18:45:01Z
1.5.1 - Tue Aug 28 16:48:39 2012 -0400 Modified in v1.5.1
1.5.3 - Tue Jun 3 2014 -0500 Modified in v1.5.3
1.5.4 - Tue Sep 9 2014 -0500 Modified in v1.5.4

Unfortunately, one can not just use a later file in an older version with any confidence

The fact that it has been stated that one needs to do nothing could be version dependent and as support for your version ceased 3 years ago it might not be being addressed
Might take the next couple of days to upgrade
https://www.zen-cart.com/entry.php?3-How-do-I-rebuild-my-site-on-the-new-version-instead-of-upgrading
https://www.zen-cart.com/content.php?148-how-do-i-upgrade-my-zen-cart-site

CustomDesign:

hello all.

does this mean that to comply with email from authorize.net about changes "...As part of our continuous upgrades to enhance system performance and security, on September 21, 2015, we are upgrading api.authorize.net to new security certificates, which are signed using Security Hash Algorithm 2 (SHA-2) and 2048-bit signatures..."
No changes needed except Optional fix as in our post: https://www.zen-cart.com/showthread.php?217783-Authorize-net-Networking-Change-Summer-2015
Sorry for repeated questions, but what maybe obvious for you not so easy for many ;-).
We have more then one zen-cart 1.39 and authorize.net our payment option if something will not work all sites will not be able to process payment.

Thank you for help and understanding.

No changes are required to Zen Cart in relation to any SHA-256 industry changes.

BUT you and your hosting company ought to ensure your SERVER is ready. I posted some guidance on how to prepare the server, here: https://www.zen-cart.com/showthread.php?216521-PayPal-upgrading-SSL-Certificates-in-2015 (most of that applies regardless of whether you're using PayPal at all or not)

I have a 1.5.5 cart that authorize.net said they needed to update their endpoints. They sent this (https://support.authorize.net/s/article/Authorize-Net-Network-Change-FAQ).

~Melanie

mprough:

I have a 1.5.5 cart that authorize.net said they needed to update their endpoints. They sent this (https://support.authorize.net/s/article/Authorize-Net-Network-Change-FAQ).

~Melanie
Quoting from that article, you can see that the transact.dll URL that ZC's AIM/SIM modules use is NOT changing. No action required.
The API endpoints not on Akamai will not be changing or impact and will continue to function as they do today.

• Needed Action: No actions or changes.

• Production API Urls:

• https://api.authorize.net/xml/v1/request.api

• https://api.authorize.net/soap/v1/Service.asmx

• https://secure.authorize.net/gateway/transact.dll

DrByte:

Quoting from that article, you can see that the transact.dll URL that ZC's AIM/SIM modules use is NOT changing. No action required.

I feel you, but Authorize.net reached out to the merchant and told him to update his endpoints.