This guide walks you through the steps to log in to the PCI portal, complete the compliance process, and ensure your business meets PCI standards. Follow these instructions to simplify your compliance journey.

1. Logging into the PCI Portal

You’ll receive login instructions via email. Here’s how to access your account for the first time:

1. Go to the PCI portal: PCI Login

2. Enter your credentials:

   • Username: Your Merchant ID.

   • Password: The last five digits of your Merchant ID followed by your two-letter capitalized state code.
     Example: If your Merchant ID is 4900000012345 and your business is in Illinois, your password will be 12345IL.

3. Change your password: Once logged in, you will be prompted to change your password for security purposes.

2. Starting the Compliance Process

After logging in, you will see your Merchant Overview.

If your status shows as Non-compliant, follow these steps to start the attestation:

1. Click on Merchant Information.

2. Review your ownership, legal, and business information. If the details are correct, click Proceed.

3. Answer the question: “Is your organization a service provider as defined by the PCI Council?”

   • Select No
     unless your business operates as a service provider.

3. Completing the Business Profile

You’ll be asked questions about your business operations. Here’s how to answer:

1. Payment Channels:

   • If you accept payments in-store through a point-of-sale (POS) system, select Card Present (POS).

2. Sensitive Cardholder Data:

   • Confirm that you do not electronically store or transit consumer account data.

3. Other Payment Channels:

   1. Confirm there that there are no payment channels that are not included on the assessment.
      

4. Third-party Providers:

   • For businesses with integrated POS systems, select No when asked about third-party providers or network segmentation.

4. Adding Your Processing Solution

You must provide information about the terminals your business uses to process payments.

1. Select solution you use to process credit cards - P2PE.

2. Click Add/Edit to add new Solution.

4. Select the correct processing solution:

   • Ingenico for Ingenico terminals.

   • Bluefin for PAX terminals.

5. Enter the reference number for your Point-to-Point Encryption (P2PE) solution.

6. Choose your terminal model (e.g., Lane 3000, Lane 5000). If your terminal model isn’t listed, manually type the model’s name.

7. Complete same steps in the next line and hit Save when done.

8. Confirm that you do not store any sensitive cardholder data electronically and that your business does not use network segmentation by selecting No.

9. Once the Solution is selected, agree to end-user license agreement and hit Save & Continue to proceed.

5. Confirming Eligibility to take questionnaire P2PE

1. Review the compliance attestation statement.

2. Agree to statements listed.

3. Click Continue to proceed.

6. Completing the PCI DSS Questionnaire

The PCI DSS questionnaire has three main sections. You’ll need to review and attest to each section:

1. Section 1:

   • Confirm sensitive data is securely handled and deleted. Ensure no CVV or PIN information is stored.
     

2. Section 2:

   • Verify that physical security measures are in place for handling and destroying media.
     

3. Section 3:

   • Confirm your store personnel are trained on security policies and procedures.
     

You’ll need to attest to each question to confirm compliance.

Once you complete the questionnaire, hit Continue to proceed to final Attestation.

7. Final Attestation and Submission

1. Review all previous responses to ensure accuracy and scroll down to the bottom of this page.
   

2. Fill in the following details:

   • Merchant Executive Officer Name: This should be the business owner or a designated representative.

   • Title: Indicate the title of the person completing the attestation (e.g., Owner, CEO, CFO).

   • Last Four Digits of Tax ID or Social Security Number: Enter the last four digits of the number associated with your business.

3. Click Submit to finalize your compliance.

You will receive a confirmation email stating that you are PCI compliant.

8. Need Help?

If you encounter issues during the process, refer to these tips:

• Login Issues: Double-check your Merchant ID and password. If you are locked out, contact the Merchant support team at merchantsupport@b2bsoft.com

• Processing Solution Selection: Ensure you select the correct processing solution for your terminal type.

• Third-party Assistance: If you need help understanding or completing the steps, our team is available to guide you.

Completing your PCI compliance is essential to secure your customers’ data and maintain a trusted business. Follow this guide carefully, and if you have any questions, don’t hesitate to reach out to our Merchant support team.