Transforming Authorize.Net Direct Post from MD5 to SHA-512

In this article, we are sharing about transforming authorize.net. By reading this blog post you will find a significant update of Transforming Authorize.net

Purpose of the article : To apply an important update

Who needs to take the action?

If you are using Authorize.net payment gateway along with any of the following Magento versions then it is a wakeup call for you:

Magento store owner using any of the below versions?

• Magento Commerce 1.X.X
• Magento Open Source 1.X.X
• Magento Commerce 2.X.X
• Magento Open Source 2.X.X
• Magento Commerce (Cloud) 2.X.X
• Authorize.Net Direct Post payment gateway

What raised the storm?

Authorize.net recently announced MD5 Hash End of Life; Signature Key Replacement!

After this latest announcement, the store owners will not be able to carry out secure payments using the Authorize.net Direct Post.

Moreover, Authorize.Net is ushering out the MD5 based hash use for transaction response verification so as to pave the way for the SHA-512 based hash utilizing a Signature Key. It will stop the support for the MD5 based hash key use from March 14, 2019.

Please don’t get nervous, as Magento provides the security patch that merchants need to apply and replace the existing MD5 hash with a Signature Key (SHA-512) in the Magento Admin configuration settings.

Just apply a patch and be tension free!

How to really go about it?

1. Apply the patch
2. Get a new signature key
3. Update admin configuration

Please take a look at the steps in detail to follow

1. Applying the patch

Download the zip file for your desired Magento version for the purpose of patch installation. So, you can also download these already Pre-Patched files from GitHub.

Note: If you use Magento Commerce Cloud, just apply the patch and deploy. For more information, please do visit Apply custom patches.

2. How to getting a new signature key?

1. Firstly, Just follow the below mentioned steps so as to get a new signature key. To know more about the signature key, please do visit here.
2. Log into the Merchant Interface at account.authorize.net
3. Click Account from the main toolbar.
4. Go to Settings in the main left-side menu.
5. Click API Credentials & Keys.
6. Select New Signature Key. Review the options available.
7. Click Submit and continue.
8. Request and enter the PIN for verification.
9. Your new Signature Key will be shown to you which can be copied and added to your Magento Admin configuration.

3. How to updating Magento admin configuration?

1. Log in to the admin panel.
2. Go to Stores > Configuration.
3. Click Sales > Payment Methods.
4. Expand the Authorize.net Direct Post section.
5. In the Signature Key enter the SHA-512 Signature Key.
6. Click Save Config.

Where to enter the key in Magento 1:

Where to enter the key in Magento 2:

Benefits of applying the patch:

You will enjoy faster and more secure transactions backed up by the latest secure algorithms.

This is just a small and essential step towards a better, secure cyber environment.