Set up the terminal

To enable 3-D Secure, contact us. 3-D secure is an added layer of security for online credit card payments.

You are recommended to include the callback URLs directly on the call to the createPaymentRequest method, and not set them on the terminal.

To set up your terminal, go to http://<YourShop>.altapaysecure.com/merchant/settings, and follow these steps: 

  1. The callback URLs are set on the API call to createPaymentRequest. For backward compatibility reasons, you can also set them on the terminal, but this is not recommended.

  2. To enable the HTTP POST method for all callbacks, select the Use POST as method on Callbacks check box.

    • Using POST you get the full XML version of the payment details sent back.
    • Enabling POST does not prevent you from sending data via GET.
    • Credit card data must always be sent using POST.
    • To make troubleshooting easier, we recommend that you always send the shop_orderid parameter to the callback pages using GET, so that you can see immediately from the URL which order a problem relates to.
    • To learn more about the HTTP Methods GET and POST, see https://www.w3schools.com/TagS/ref_httpmethods.asp.
  3. Enter the Customer Information Shared Secret. This is used to defeat “man in the middle”-attacks when sending customer info for payments. For more information about callback parameters, see Setting up the callback pages.
  4. To allow returning customers to pay with an already used credit card, select the Enable credit card token check box. For more information, see Using credit card tokens.
  5. To use AltaPay's predefined style for tabbed payment forms, select the Enable tab css check box.

  6. To receive notifications about warnings and problems related to retrieving the callback pages, enter your e-mail address in the Reporting email field.

    • Only one e-mail address can be entered. If you would like more people to be notified, we recommend that you set up a distribution list or e-mail group.
    • You will only receive notifications related to technical problems with the callback pages, not about failed transactions.
  7. To help customers get in touch with you when a callback fails, enter your e-mail address in the Customer Support e-mail field, and your phone number in the Customer Support Phone field. These contact details are shown to your customer if the callback pages cannot be retrieved.