Display Partial Credit Card Number in Logs (J16)

Purpose: Use this screen to define how the system masks the credit card data in log files when credit card encryption is enabled.

If credit card encryption is enabled and an XML message provides a credit card number or card security number, Order Management System masks the credit card data in the log files based on the setting of the Display Partial Credit Card Number in Logs (J16) system control value.

Yes/No field:

• Select the Display Partial Credit Card Number in Logs (J16) system control value in any company to have the system display the last four digits of the credit card number in the logs; for example ************1234. If the credit card number is 4 digits or less, the entire credit card number will display as ****.

• Leave the Display Partial Credit Card Number in Logs (J16) system control value unselected in every company to have the system replace the credit card number in the logs with the word CHANGEDBYLOGGER.

Note:

• As long as one Order Management System company has the Use Credit Card Encryption (I97) system control value set to Y, C, or S Order Management System masks the credit card number and card security value for every Order Management System company that is located in the same environment.

• If you use credit card tokenization, the credit card number in the logs may be a token rather than the actual credit card number.

• The credit card number and card security value will display unencrypted in the actual XML message until the message is transmitted to the external system. To ensure security of the credit card data during data transmission to and from Order Management System, you should configure a secure socket over your queues.

For more information: See the Data Security and Encryption Guide for an overview and required setup.

IN03_05 OROMS 17.0 2018 OTN