CRE Secure FAQs
Q: What is an SIC code?
Q: Where can I find my CRE Merchant ID?
Q: What is the URL of your online store?
Q: What is the URL value of your CRESecure forms content_template_url?
Q: On my CRE Secure profile, in the box that asks for my domain name, do I have to put the "www" in my additional domain names or do I just put my store name in the box or both?
Q: What is the URL value of your CRESecure forms return_url?
Q: Where do I get my virtual terminal group setting?
Q: How can I obtain our CREMerchID and CREMerchPass?
Q: Does PCI Compliance apply to merchants outside of the United States?
Q: Is CRE Secure a payment gateway?
Q: My hosting company says they're PCI Compliant, so why do I need CRE Secure?
Q: If I have CRE Secure, do I still need scans?
Q: Does CRE Secure by itself make me PCI Compliant?
Q: I am using CRE Secure and see "preparing (CRE Secure)" as an order status, what does that mean?
Q: What is an SIC code?
A: This is a code sometimes required by the gateway. If you are using Authorize.net as your gateway, it is not needed. If you are using Chase Paymentech/Orbital they do require an SIC code. Call or email them (who is them) to get it for your personal account.
[back to top]
Q: Where can I find my CRE Merchant ID?
A: This is also the same thing as your CRESecure ID, login to your cresecure.com account and view your profile.
[back to top]
Q: What is the URL of your online store?
A: The url of your store is the same thing as your site domain name.
[back to top]
Q: What is the URL value of your CRESecure forms content_template_url?
A: /templates/content/checkout_payment_template.tpl.php
[back to top]
Q: On my CRE Secure profile, in the box that asks for my domain name, do I have to put the "www" in my additional domain names or do I just put my store name in the box or both?
A: You do not need to put the "www" - leave it out. Just put your store name then dot com (Example: bigshoes.com)
[back to top]
Q: What is the URL value of your CRESecure forms return_url?
A: The return page is www.yoursite.com/checkout_success.php
[back to top]
Q: Where do I get my virtual terminal group setting?
A: Log in to your cresecure.com account and view your profile.
[back to top]
Q: How can I obtain our CREMerchID and CREMerchPass?
A: Those are generated after the profile is complete and approved. You will receive an email saying that the profile has been approved and to login to your account at cresecure.com to view the details.
[back to top]
Q: Does PCI Compliance apply to merchants outside of the United States?
A: Yes, it is worldwide.
[back to top]
Q: Is CRE Secure a payment gateway?
A: No, it connects one's online store to a payment gateway.
[back to top]
Q: My hosting company says they're PCI Compliant, so why do I need CRE Secure?
A: Just because your hosting company is PCI Compliant doesn't mean your store is. Find out what your hosting company means when they say they are PCI Compliant. What are they doing to make sure YOU as the store merchant are PCI Compliant?
[back to top]
Q: If I have CRE Secure, do I still need scans?
A: This depends on your acquiring bank (ask your merchant services provider who your acquiring bank is, and contact your acquiring bank directly to find out if they require you to have scans for your online store.) This is not up to CRE Secure.
[back to top]
Q: Does CRE Secure by itself make me PCI Compliant?
A: While CRE Secure, properly implemented, gets you most of the way to PCI Compliance, you still must complete a Self Assessment Questionnaire (SAQ-A) and submit it to your acquiring bank. (When completing this form, remember that using CRE Secure means you DO NOT process, transmit or store credit card information.)
You should also ask your acquiring bank if they require quarterly scans. Most merchants who submit SAQ-A are NOT required to, but SOME banks may still require it.
Once you have completed these steps, you are fully PCI Compliant.
NOTE: [Self Assessment Questionnaire link]
[back to top]
Q: I am using CRE Secure and see "preparing (CRE Secure)" as an order status, what does that mean?
A: It means that someone attempted to place an order but it did not go through, you may want to contact that customer directly to see if they plan on finalizing the transaction or if they need further assistance.
[back to top]

