Apparently there’s some confusion over exactly which versions of the Verisign PC Charge software is compatible with Sage MAS 90 and MAS 200.
Erika Jelovsek, SR Product Manager at Sage Software has this update which was just posted on the MAS 90 LinkedIn Group:
There has been a bit of confusion regarding this topic lately, in part fed by a recent communication from Wells Fargo credit card services to PC Charge customers. Sage and VeriFone (the providers of PC Charge) have been working together to help clear the confusion, and this post is part of that clarification effort.
Version 5.8.3 of PC Charge IS MOST DEFINITELY certified as compliant by the PCI Council, and I have a copy of a letter sent to VeriFone from the PCI Council that verifies this. In fact, because 5.8.3 is compliant is why that version was selected by the MAS team to be autoshipped to our Sage ERP MAS 90 and 200 customers with their version 4.4 shipments.
At this point I do not know if Wells Fargo will be sending a corrected communication to PC Charge customers, although VeriFone has requested that they do so. Meanwhile, version 5.9.1 is currently undergoing quality assurance compatibility testing with the MAS team, and, as always, once it has been verified as compatible, the Compatibility Matrix will be updated to reflect that change in status. However, there is no need to rush to upgrade to that version at this time because version 5.8.3 is PCI Compliant.
There have been some questions about the difference between PABP 1.4 certification and PA-DSS 1.2 certification as stated on the PCI Council’s website. As I understand it, PABP is the certification standard used prior to PA-DSS. As such, it has an Expiry Date in December of 2010, making it acceptable for new deployments until that time. So, versions 5.8.1 and 5.8.2 of PC Charge are also still acceptable for use until the expiry date.