RezStream, a national leader in hospitality solutions, is pleased to announce its latest property management software release:
RezStream Professional 2009.0.0!
This important update features new credit card security features. The primary update addition is that you must now use 7 to 10 character “strong passwords” to access RezStream Professional and any stored credit card numbers. Strong passwords are more secure as they contain 7 to 10 characters, with at least one upper case letter, one lower case letter, and one number required. It is also mandatory to change these passwords every 90 days. Previously, RezStream customers were only required to use 4 digit passwords to access RezStream Professional. RezStream has made these changes in order to be compliant with the upcoming Payment Cardholder Information (PCI) standards. Even if you do not store credit card numbers in RezStream Professional, or do not use RezStream to process credit cards, RezStream as a company must make these changes to be compliant with the PCI standard. We apologize for any inconvenience this may cause you, but RezStream is dedicated to maintaining required security standards for the benefit of all.
Once you apply this update, all users with access to RezStream Professional will be prompted to change their passwords. Inside RezStream Professional, administrators can access password information from the top toolbar under: Tools > Configure > Users. You will see a number of new features to deactivate users, change passwords, and so forth. Please call our support team at 303-872-0220 if you have any questions about this update.
The payment card industry (PCI) has developed set security standards for handling cardholder credit card information in a published brief called the PCI data security standard. Businesses must be compliant by July 2010, which includes RezStream customers. RezStream is already enrolled in the compliance program and meets or exceeds all PCI data storage requirements. To learn how you can become PCI compliant, please see our article about PCI compliance.
RezStream Professional 2009.0.0 features these PCI security measures:
- RezStream requires 7 to 10 digit “strong passwords” for program access and credit card number access. Passwords must change every 90 days.
- RezStream does not store swiped data from any credit card.
- RezStream uses 256-bit strong encryption of all credit card numbers.
- RezStream uses SSL (secure socket layer) and strong encryption when transferring credit card numbers from the RezStream Booking Engine.
- RezStream does not store security codes, or transfer security codes, to any RezStream product.
- RezStream does not display full card numbers on invoices, in letters, etc.
- Full credit card numbers cannot be viewed without entering a user name and password.
- RezStream logs all credit card access activity.
ADDITIONAL FEATURES in RezStream Professional 2009.0.0:
- RezStream Professional has been updated to fix a problem where processing credit card payments disabled the auto update feature in the RezStream Booking Engine.
- We also solved an issue with the Merchant Partners gateway that sent duplicate messages on payments.
- Issues were addressed with the Net Account Changes and Net Account Balances reports where some information was being calculated incorrectly.
And there’s more!
In the near future, RezStream will release an update that adds the ability for our PPI credit card processing clients to use one merchant account for both RezStream Professional and the RezStream Booking Engine. In addition, we are planning numerous updates to our desktop packages, online packages, and additional RezStream Professional email capabilities. RezStream will provide you with more information about our product updates as they become available.
Sales: 866-360-8210
Support: 303-872-0220
