Securing Your Website Payments Standard Buttons

Using this control, you are simply one step away from generating an Encrypted PayPal button on the fly.

Summary:

1. PayPal public certificate file (paypal_cert_pem.txt).
   
   
2. Your PKCS12 certificate (*.p12).
   
   
3. Your PKCS12 certificate Password.
   
   
4. A certificate ID received from PayPal when you uploaded your public certificate (*.pem) to PayPal.
   

Thats all. If you have all of these, you are ready to generate the Encrypted button by simply checking a checkbox. In case you do not have those credentials, still you can be relaxed as this control has special GUI built in for Certificate generation support. You can generate your PKCS12 Certificate right here from the control's Smart Tag GUI Wizard. Furthermore, the wizard will generate your public certificate *. pem which you should upload to PayPal in order to get your Certificate ID.

Please follow the step by step instruction for generating a Encrypted button. If you have already got your "paypal_cert_pem.txt" and your PKCS12 (*.p12) file, please place them within the App_Data folder of your web application as this folder is a secured place to store your confidential files which cannot be downloaded from the browser.

1. Drag and Drop an instance of a Payment Button control. We are showing example for a BuyNow button. Generating Encrypted button for other button types (i.e. Donation button, Subscription button etc..) are exactly same so the BuyNow button example should be useful enough for you.
   
   
2. From the Smart tag, please check the check box for "Generate Encrypted Button", then a link for poping up the Wizard for EWP will be shown up as shown in the following screeen shot.
   
   
   
3. Click the link "Settings and Automation Wizard for EWP". The wizard will pop up as shown here:
   
   
   
   
4. Provide the credentials as shown in the screenshot and Click OK.
   

Your are done. Now your buttons will be encrypted and the encrypted data will be sent to PayPal pursuant to submitting your PayPal button.

** If you are on shared hosting with tight security, you may get a SecurityException. Please ask your hosting provider to obtain and install a hotfix from Microsoft, as described in this Microsoft KB article, or have them move your site to a machine that runs under Full Trust. **

http://support.microsoft.com/?kbid=915980 

Where are these information saved ?

All of these information are saved in Web.Config file. As these are sensitive information, these information are never exposed to the client browser so you have no reason to worry about your secured data. Please remember to upload your modified web.config file after chanfing these information.

Still Confused ?