Looking for PCI compliant hosting - GoFuckYourself.com

BareBacked · 06-16-2015, 04:29 PM

Hi there. I require a PCI compliant server.
Can you tell me does your host charge extra for this?? What are the options?

Babaganoosh · 06-16-2015, 04:42 PM

What level of PCI compliance do you require? If you need a PCI cage or something like that, it's almost always an extra charge. To just make the server itself PCI compliant isn't really that difficult. If you have managed hosting, that should be included in your management services.

The actual PCI scan will be your responsibility however. My only advice there is to avoid trustwave as they want TLS 1.0 completely disabled which isn't practical right now. Disabling weak ciphers is sufficient for other scanners until support for TLS 1.1+ is more common.

BareBacked · 06-16-2015, 04:53 PM

Quote:

Originally Posted by Babaganoosh

What level of PCI compliance do you require? If you need a PCI cage or something like that, it's almost always an extra charge. To just make the server itself PCI compliant isn't really that difficult. If you have managed hosting, that should be included in your management services.

The actual PCI scan will be your responsibility however. My only advice there is to avoid trustwave as they want TLS 1.0 completely disabled which isn't practical right now. Disabling weak ciphers is sufficient for other scanners until support for TLS 1.1+ is more common.

I am not sure the exact "level" the one for accepting credit cards and using netbilling

I will check on that. I appreciate your input. I do have managed hosting and need some software upgrades basically is all. It seems its not included and I want to hear what others are doing about it

plaster · 06-16-2015, 05:05 PM

You don't need anything special. You need ssl cert. That is not outdated installed on the domain which you will use to collect card info.

Also, collecting card data and passing it to gateway is the norm. The pci compliance questions your gateway asks to complete should be the short version, about 5 pages max.

You do not store the actual card numbers so you are not obligated to provide the more stringent pci compliance requirements and questions, about 115 pages of questions regarding your policies.

sandman! · 06-16-2015, 05:46 PM

Most managed providers will charge extra for it because it means a shitload of updates all the time.

Hit me up if your looking for a quote

NETbilling · 06-17-2015, 12:26 AM

Quote:

Originally Posted by BareBacked

Hi there. I require a PCI compliant server.
Can you tell me does your host charge extra for this?? What are the options?

Hi,

We he naked all data storage for you so all you need is an SSL certificate if you are hosting the join/payment pages. Contact our support department for a recommendation. We have a deal with Digicert as well. Send me an email for a recommendation as well if you wish to Mitch at Netbilling.com

Thanks

BareBacked · 06-17-2015, 10:51 AM

HI Mitch. Thanks for posting. I sent you an email

NETbilling · 06-18-2015, 12:53 PM

Quote:

Originally Posted by BareBacked

HI Mitch. Thanks for posting. I sent you an email

You bet!

06-16-2015, 04:29 PM	#1
BareBacked Confirmed User Join Date: Feb 2007 Location: www.BareBacked.com Posts: 3,685	Looking for PCI compliant hosting Hi there. I require a PCI compliant server. Can you tell me does your host charge extra for this?? What are the options? __________________ NEW SITE PAYING $30 for a $1 TRIAL Selfies

06-16-2015, 04:42 PM	#2
Babaganoosh ♥♥♥ Likes Hugs ♥♥♥ Industry Role: Join Date: Nov 2001 Location: /home Posts: 15,841	What level of PCI compliance do you require? If you need a PCI cage or something like that, it's almost always an extra charge. To just make the server itself PCI compliant isn't really that difficult. If you have managed hosting, that should be included in your management services. The actual PCI scan will be your responsibility however. My only advice there is to avoid trustwave as they want TLS 1.0 completely disabled which isn't practical right now. Disabling weak ciphers is sufficient for other scanners until support for TLS 1.1+ is more common. __________________ I like pie.

06-16-2015, 05:46 PM	#5
sandman! Icq: 14420613 Industry Role: Join Date: Mar 2001 Location: chicago Posts: 15,432	Most managed providers will charge extra for it because it means a shitload of updates all the time. Hit me up if your looking for a quote __________________ Need WebHosting ? Email me for some great deals [email protected]

06-17-2015, 10:51 AM	#7
BareBacked Confirmed User Join Date: Feb 2007 Location: www.BareBacked.com Posts: 3,685	HI Mitch. Thanks for posting. I sent you an email __________________ NEW SITE PAYING $30 for a $1 TRIAL Selfies

06-16-2015, 05:05 PM	#4
plaster So Fucking Banned Industry Role: Join Date: Apr 2015 Posts: 2,295	You don't need anything special. You need ssl cert. That is not outdated installed on the domain which you will use to collect card info. Also, collecting card data and passing it to gateway is the norm. The pci compliance questions your gateway asks to complete should be the short version, about 5 pages max. You do not store the actual card numbers so you are not obligated to provide the more stringent pci compliance requirements and questions, about 115 pages of questions regarding your policies.