Vindicia Internal Notes for Subscribe 2023.08 Release

Production Release Date: August 29, 2023 Parent topic:Vindicia Subscribe - 2023.08 Release

Security Features

Enhancements to Vindicia’s internal Credit Card security were made. These comply with PCI requirements and prioritize security. This update includes:

Upgraded RSA 4096 Encryption Algorithm using OpenSSL, providing stronger data security.
Improved AWS Key Management Service (KMS) Integration, ensuring centralized and robust key management.
Enhanced handling of cryptographic keys to prevent plaintext exposure.
Transition to Role-based Credentials for encryption servers and lockdown of AWS KMS key to decrypt data exclusively on authorized servers, minimizing potential vulnerabilities.

This is an internal security enhancement and does not affect merchants. Note: This feature has been released in dark mode. (VIN-20823/22453)

The following issues were solved in this release:

Ticket	Title	Description
VIN-24669	Subscribe Merchant Portal 2.0 - Error Occurred When Resuming Subscription	An error occurred when users tried to resume a paused subscription and clicked the Make today the new billing date button. This issue has been fixed.
PORT-3250	Subscribe Merchant Portal 2.0 - Error When Applying an Updated Campaign Code to an Existing Subscription	An error occurred when users updated a Campaign Code and applied it to an existing Subscription. This issue has been fixed.
DOCS-731	Vantiv (Litle) Merchant Configuration - Correction in Documentation	The Does a merchant need to grant access to Vindicia? information in the Required Merchant Information table of the Vantiv (Litle) Merchant Configuration has been corrected. The following information has been added to the Description: Provide the following information to Litle to allow Vindicia to submit payments on your Litle merchantId’s: - Vindicia Token User: VINDICIATKN - Vindicia Credit Card (i.e. non-Token) User: VNDCIA - Vindicia Chargeback Retrieval User: VINDICIA Enable all of Vindicia’s users to submit on all your merchantId’s. Enable the Chargeback datafeed for Vindicia on all Litle merchantId’s for the Vindicia Chargeback Retrieval User.

This release has the following known issues.

In Subscribe Merchant Portal 2.0, the Merchant User Report may show incorrect status for merchant users that use identity providers to login to the Portal.
- Merchants using Vindicia IDP, can view user status in the Vindicia IDP Care Console.
- Merchants using external Identity providers, such as OKTA or MS Azure, can check user status in their respective IDP Portals.