Kevin Brunson| Page #1 © 2009 Blackbaud Support Roundtable: The Raiser’s Edge 7.91 Overview and Q&A Support Roundtable: The Raiser’s Edge 7.91 Overview

Kevin Brunson| Page #1 © 2009 Blackbaud

Support Roundtable: The Raiser’s Edge 7.91 Overview and Q&A

Support Roundtable: The Raiser’s Edge 7.91 Overview and Q&ACustomer Support Live Q&A

Thank you for attending today’s session.

We will begin the presentation at approximately 11:02 EST.

As a courtesy to other participants, all phone lines are muted.

If you have a question during the session please: Click Q & A on the toolbar Type your question in the box Click Ask

Please share this presentation with all users at your organization.



Support Roundtable: The Raiser’s Edge 7.91 Overview and Q&AAugust 11, 2009

Presenters: Kevin Brunson, Product Support Lead – Fundraising Solutions

The presentation consists of several sections. We will compile questions during each section and answer them in an open Q & A at the end. To ask a question in Live Meeting:

1. Click Q & A on the toolbar

2. Type your question in the box

3. Click Ask

As a courtesy to other participants, all phone lines are muted.

Please share this presentation with all users at your organization.



Today’s Agenda PA DSS Compliance Blackbaud Payment Service Planning for the Update

Credit Card Changes Password Changes

Downloading the Update Installing the Update Other Software Enhancements NetSolutions Questions and Answers



PA DSS Compliance The Raiser’s Edge 7.91 is compliant with Payment Application Data Security Standard (PA-

DSS).

For more information about PCI DSS compliance, visit www.blackbaud.com/PCI. General information regarding PCI DSS, including a PCI DSS self-assessment questionnaire, can be found at www.pcisecuritystandards.org.



Blackbaud Payment Service The Blackbaud Payment Service (BBPS) integrates with PA-DSS compliant versions of

The Raiser's Edge, NetSolutions, Blackbaud NetCommunity, and Blackbaud Enterprise CRM. BBPS makes it possible to adhere to PCI-DSS and still process electronic transactions.

Full credit card numbers are no longer visible in the software applications, full credit card numbers are stored in BBPS. In each application, credit card numbers are replaced with reference tokens. When credit card transactions are processed, the software application connects to the BBPS service. The reference token in your database will summon the stored credit card number to be used in the transaction.

For more information about BBPS, review our BBPS FAQs.



Planning for the Update Involve all users at your organization and review System Recommendations

The Raiser’s Edge 7.91 changes the way credit cards are stored in your database. This update removes full credit card numbers from the database and stores them in the BBPS. After the update, you will only see the last 4 digits of the credit card number on constituent and gift records.

Organizations that use IATS or ICVerify to authorize will continue processing as normal.

Organizations that authorize credit cards by printing or exporting credit card data will be unable to do so. You can create an account with IATS or ICVerify to enable credit card processing in version 7.91, or stay on your current version.

If you stay on your current version, contact a Qualified Security Assessor for advice on how to secure your credit card data and authorize credit card transactions in accordance with PCI DSS.

If you are on version 7.81 or lower you must update to The Raiser's Edge 7.85 before 7.91.



Credit Card Changes Credit card numbers appear in the following places: Bio 2 tab, Gift record, Constituent and

Gift batch, and United Way pledge card. During the update to 7.91, credit card numbers from these places are transferred to the BBPS if the credit card is less than 60 days expired. Credit card numbers for one-off (non-recurring) donations and credit cards with no expiration date are not stored in BBPS.

After the update to version 7.91, credit card numbers are truncated. Truncated credit card numbers appear with either asterisks or question marks i.e. (************2468) or (????????????2468). Credit cards with asterisks are tokenized, with the full number stored in BBPS. Credit cards with question marks are truncated and not stored in BBPS.

Users can NO LONGER view, print, or export full credit card numbers.



Password Changes Enter password in all capital letters - after the update all users must enter their password in

all capital letters (e.g., "PASSWORD1" instead of "password1"). After logging in, users can change their passwords by selecting Edit, Change Password. New passwords are case-sensitive, must contain both letters and numbers, and be a minimum of eight characters and a maximum of 33. If users don’t update their password they must continue entering their old password in all capital letters. Read more about password changes.

Optionally force Users to change passwords – optional feature to force users to change their password every X days. With this feature, users are notified Y days before the password expires. Setup in Config, Business Rules, Password Options.

Account Lockout Options – how many times a user can enter an incorrect password before their account is locked. Specify how long a user must wait to attempt to login again if locked out. Setup in Config, Business Rules, Account lockout options.



Downloading the Update Go to Blackbaud.com to download the update. After selecting to download the update you must accept

or decline the changes in this version. At the bottom of the downloads page there are two options:

A) Agree to the changes (store credit card numbers in BBPS and go to BBPS sign-up page). You are prompted to create a BBPS account. Make note of the account details; the first user that logs into the updated database will need to enter the account details. After creating the BBPS account, you will be able to download the update.

B) Decline the changes (won’t use BBPS and will delete credit cards and download the update). If you choose not to use BBPS, you will be able to download The Raiser's Edge 7.91 without creating a BBPS account. For more information, review Knowledgebase solution BB620498. If you do not use BBPS, The Raiser's Edge deletes all credit card data from the database. Your organization will no longer be able to enter, store, process, or transmit credit cards in The Raiser's Edge.



Installing the Update Before installing the update, we recommend you back up the database. The first user to log into the database after installing the update receives a prompt that

‘Database Update Required’.

Database Revisions start processing…….



Installing the Update cont. The user is prompted to use BBPS to store credit card data or delete credit card data from the

database. This prompt appears only once for the first user who logs into the database. Select Yes to store credit card information in the BBPS. Enter your BBPS username and password and, if

applicable, the Security Token for ICVerify and click OK. Select No to delete all credit card numbers in The Raiser’s Edge.

If you do not use BBPS, The Raiser's Edge deletes all credit card data from the database. Your organization will no longer be able to enter, store, process, or transmit credit cards in The Raiser's Edge. You can later decide to use the BBPS to store credit card information by creating a BBPS account and entering it in Config, General.



Installing the Update cont. • If you use BBPS to store credit card numbers, you will receive the prompt: Is this a test

conversion? Select Yes only if you are updating the database in a test environment. Your credit card numbers will be temporarily stored in BBPS and deleted after 14 days.• If this is not a test conversion, click No.



Other Software Enhancements Inactivity Lockout – The Raiser’s Edge automatically locks users out of the software after

15 minutes of inactivity. When the user re-logs into The Raiser’s Edge, they continue what they were previously working on. If a user is locked out, current processes (Reports, Mailings, Exports, etc.) continue to run, and a user license is still used. This feature was implemented to comply with PCI DSS rule 8.5.15, which states "If a session has been idle for more than 15 minutes, require the user to re-enter the password to reactivate the terminal." You can view this rule and the rest of the PCI compliance rules at https://www.pcisecuritystandards.org/pdfs/pci_pa_dss.pdf. For organizations that use Windows Authentication, users will still experience the inactivity lockout.

The workstation will lock, when user log into the workstation they will automatically be back in Raiser's Edge.

Query Folders - Drag and Drop. Users can now click on and drag a query and drop it into one of their ‘favorite’ folders.

SQL Server 2008 Compatibility – The Raiser’s Edge 7.91 is compatible with SQL Server 2008 (also compatible with SP1). SQL Server 2000 and 2005 are still supported.



Other Software Enhancements cont. Export Specific Attribute Descriptions – Users can export specific attribute descriptions if

the attribute data type is a table. For example, in your database you may have an Interests constituent attribute; this has values of golf, soccer, football, baseball, etc. Currently when exporting this value, you can specify how many values to export, but you can’t select which to export (maybe I only want the value of golf to export). Now, users can select which value(s) they would like to export. This is for Table data type attributes only. It doesn’t make sense to have this feature for Text, Date, Number, etc attribute data types.



Changes to NetSolutions Organizations that accept Recurring Credit Card donations must update to version 7.91 to

continue downloading credit card numbers.• One-time credit card gifts download into The Raiser’s Edge, but the full credit

card number is not stored in BBPS. The credit card number displays as (????????????2468).

• Recurring Credit Card gifts download into The Raiser’s Edge and the full credit card number is stored in BBPS. The number appears as (************2468), which enables you to charge future transactions for the recurring gift.

If you stay on your current version of The Raiser’s Edge, you will no longer download credit card numbers. The credit card number field will be blank in The Raiser’s Edge. This means if you accept Recurring Credit Card donations, you will not be able to charge future transactions because you will not have the credit card number.



The Raiser’s Edge 7.91 FAQs http://www.blackbaud.com/support/faqs/re7.aspx#791 How to download and install The Raiser's Edge 7.91: BB620498 What is the Blackbaud Payment Service (BBPS)? BB548354 How to register for Blackbaud Payment Service (BBPS): BB616496 How are credit card numbers stored in The Raiser's Edge 7.91: BB617936 What happens to credit card numbers that are entered in The Raiser's Edge 7.91? BB613095 Is there a charge associated with the Blackbaud Payment Service? BB620584 If I choose not to use BBPS, can we ever store credit card information? BB618297 Error: Is this a test conversion when updating to 7.91: BB620504 Error: The Raiser's Edge can not connect to the Blackbaud Payment Service. For the secure storage of new or edited

credit card number information, the Raiser's Edge requires a connection to Blackbaud Payment Service. Please check your internet connection: BB616676

Credit card number blank when downloading transactions: BB620582 Error: The Raiser's Edge has detected that your NetSolutions account information has not yet been updated to use

Blackbaud Payment Service. To all the Blackbaud Payment Service to retrieve credit card information for NetSolutions transactions, you must resubmit your NetSolutions configuration to the server: BB620516

What is the time limit before a user is logged out of The Raiser's Edge due to inactivity? BB620558 What are the new password changes to version 7.91: BB608912



Support Roundtable: Q&A

Documents

Kevin Brunson| Page #1 © 2009 Blackbaud Support Roundtable: The Raiser’s Edge 7.91 Overview and Q&A Support Roundtable: The Raiser’s Edge 7.91 Overview