Basically avoid by all means taking the responsiblity to save the CC details on your side, however I can assume you are using a thirdparty service to do your transaction such as PayPal/Verisign or whatever, most of them have API’s that enables you to save CC credentials at their side, and they give you back … Read more
I went through this process not to long ago with a company I worked for and I plan on going through it again soon with my own business. If you have some network technical knowledge, it really isn’t that bad. Otherwise you will be better off using Paypal or another type of service. The process … Read more
I’m familiar with the pain you’re going through. We struggled to update an old EFT system towards PCI compliance. Key management was certainly (from my software point of view) the most challenging part. I think I also stumbled into the NIST Recommendations for Key Management that Martin posted, and got incredibly frustrated with the lack … Read more