### Configuring WorldPay Payment Plug-in

To start accepting payments using the WorldPay services, first of all please, visit the WorldPay website and set up the Merchant account.

Note: It is recommended to have WorldPay installation capable of processing pre-authorize/post-authorize transactions. This plug-in supports 'Select Junior' installation type. Thus, you should choose 'Select Junior' installation type while requesting account from WorldPay.

After your WorldPay account is set up, you will be provided with unique Installation ID and password.

Using the Remote Post-Authorization of Transactions

If you use funds pre-authorization, you need the post-authorize password to automatically finalize the pre-authorized transactions. You need to specify this password by yourself when setting your WorldPay installation to remote post-authorization.

Pre-authorization (Deferred Processing) gives you additional control over the completion of credit and debit card transactions. The pre-authorization process works as follows:

When a Shopper makes a purchase from your site, their card details are checked and the purchase transaction is authorized as normal but the transaction is set to a pre-authorized status. Although funds are reserved against the Shopper's card, the money is not debited at this point. Once you are satisfied and ready to ship the goods, you must complete or 'post-authorize' the transaction within 5 days to ensure that the funds are debited from the shopper and remitted to you.

Pre-authorization is not standard WorldPay functionality and must be requested and set up by WorldPay. Once Pre-authorization is enabled for your installation, you can clear the Disable Preauthorization box in the HSPcomlete WorldPay plug-in to perform the Preauth-Capture transactions.

The WorldPay plug-in implemented in HSPcomplete allows setting the remote post-authorization of transactions. You will need to ask your local Technical Support team to set up your installation for this type of remote administration. It will need to be set up with a 'remote authorization password', which you can specify when asking for this facility to be set up.

Note: The post-authorization password is limited to 20 characters.

After the remote post-authorization is set up for your installation, you can enter the post-authorization URL and your remote authorization password into the WorldPay plug-in configuration form. Probably in this case your installation ID will change and you will need to enter this new ID into the WorldPay plug-in configuration form as well, so please ask your WorldPay Support representatives about this.

Your WorldPay Account Post-Configuration

Log in WorldPay and configure your Installation:

- Indicate the 'Merchant's shop URL' (the URL online payments to be accepted from, i.e., your Order Form) that corresponds to the 'Referrer URL' in the HSPcomplete setup form for WorldPay plug-in;
- Indicate the Callback URL.This URL will be used for payment responses that are displayed to your shoppers. This URL is also can be found in the HSPcomplete setup form for WorldPay plug-in. If you specify the callback URL, then the callback password should be specified in WorldPay Account Form;
- Check the Callback Enabled box;
- Clear the Future Pay Callback Enabled box;
- Check the Use Callback Response box;
- You can also enable CVV/AVS verification for your WorldPay Account;
- In respect to post-authorization of transactions, you should send the special e-mail request to WorldPay support team, as this described earlier in this topic. After this, you will be provided with the post-authorize password and MD5 signature for transactions.

Caution: Please, make sure that you have indicated the correct referral URL and callback URL while configuring your WorldPay Account. Otherwise, it will be not possible to process transactions.

After your WorldPay Account is configured, go to the HSPcomplete Control Center and configure the WorldPay plug-in.

To configure the WorldPay plug-in:

1. Click the Edit button on the plug-in screen. Fill the form that appears.
   1. Type the WorldPay server URL into the Server URL field. This is the URL the transaction requests will be sent.
   2. Type the World Pay post-authorization URL into the Post-authorize URL field. The post authorization transaction actually charges a credit card and pays the merchant.
   3. If you have some other URLs to accept orders from, you can specify them in the Valid referrers field.
   4. Type your Installation ID received from WorldPay on your account registration into the Installation ID field.
   5. If you have several accounts at WorldPay, you can indicate the ID of an account to be used for transactions from your HSPstore in the Preferred account ID field. As a general rule, WorldPay opens one account per currency that you process. The WorldPay system automatically selects an account suitable for processing each transaction, based on the plug-in working mode (testing or live) and the currency of the transaction. Preferred accounts become relevant when you have accounts with identical characteristics to be used for different purposes. For example, you may have one Euro (EUR) account for software sales and another for hardware sales. Payments submitted to WorldPay for software will need to specify the software account and similarly for hardware. If you do not specify which, then the WorldPay system selects whichever is found first in the database.
   6. Type the callback password you have specified in you WorldPay account configuration for the Callback URL into the Callback password field.
   7. If you would like to use the remote facilities for transactions post-authorization and refunds, you need to enter the post-authorization password into the Post-authorize password field.
   8. To add an encrypted signature to each purchase form sent to WorldPay from your store, you can use the MD5 security feature provided for Select Junior Installation. The MD5 secret is used to sign all signatures and created by taking a string or message of arbitrary length and producing an encrypted output as a 128-bit fingerprint or Message Digest. To enable the MD5 signing, you should send your secret phrase to be used for secret signature generation to WorldPay support so that they can add an MD5 secret to your installation configuration and enable signing. Then you can enter your MD5 secret key into the MD5 secret for transactions field.
   9. Check the Enable CVV2/CVC2 verification box to pass to the payment gateway a CVV code together a credit card data. The WorldPay checks a CVV code and depending on the check result, approves or rejects the transaction.
   10. You can enable the address (AVS) verification on the WorldPay site. Please check the boxes next to the Enable address verification (AVS) box to send one or another address details for verification. If the AVS check fails, the transaction will be rejected.
   11. You can check the Disable pre-authorization box to perform the Sale transactions without money preauthorization on a credit card. To perform transactions of the Preauth-Sale type, leave this box clear.
   12. To use the WorldPay engine in the Test mode (no transactions will be actually sent) select the test transaction result from the Test mode drop-down menu. To use the plug-in in the live mode, select Off.
   13. Key in the Button title. For example, this could be the name of payment system. This title will be displayed directly on the button for online-payment at HSPstore, on the final stage of subscription registration, when a customer selects how to pay for the services ordered.
   14. You can add both the short and the detailed description. Quick description of a payment method will be displayed below the button. The Long description of a payment method will be displayed in a separate section entitled Pay Online.
2. Click the Update button.

Please send us your feedback on this help page