FIX: You cannot use pipeline components to retrieve credit card numbers in a Commerce Server 2009 environment


In a Microsoft Commerce Server 2009 environment, you cannot use pipeline components to retrieve credit card numbers. For example, when you insert a pipeline component in the credit card pipeline to read the credit card numbers, the credit card numbers are not returned as expected.

Note The credit card pipeline component (CreditCard.pcf) is included in the default extensibility kit. By default, you can find the CreditCard.pcf component in the following location:
%Program Files%\Microsoft Commerce Server 2009\Sdk\Samples


To resolve this problem, apply the following hotfix.

After you complete the installation of this hotfix, you can access the credit card numbers from pipeline components. To complete the installation of this hotfix, see the Installation instructions section.

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Known issues with this hotfix

  • When you remove this hotfix, a dialog box may prompt you that some applications must be closed before you can continue with the removal process. To continue with the removal process, accept the default selection in the dialog box, and then click OK.
  • When you remove this hotfix, the Commerce Server 2007 Start menu may reappear. You can safely delete it.


To apply this hotfix, you must have Commerce Server 2009 installed.

Installation instructions

To complete the installation of this hotfix, follow these steps:

  1. Open a Commerce Server Tools Command Prompt window. To do this, click Start, point to All Programs, click Microsoft Commerce Server 2009, and then click Tools.
  2. To generate a new public and private key pair, type the following command, and then press ENTER:
    ProfileKeyManager.exe /kn /o ProfileKeys.xml
  3. To add the keys to the registry, type the following command, and then press ENTER:
    ProfileKeyManager.exe /ke /kf ProfileKeys.xml
  4. Make the following changes to the appSetting element of the Web.config file for your website:
    • Full Encrypt and Decrypt Mode

      Use if both public and private keys are required.

      This option makes the credit card number and the validation code available to the Checkout PCF pipeline for credit card authorization purposes. These fields are deleted after the order is created.

      To use Full Encrypt and Decrypt Mode, add the following lines of configuration in the appSetting element of the Web.config file for your website:

      <add key="Microsoft.Commerce.Providers.CreditCardEncryption.Mode"value="EncryptDecrypt" />

      <add key="Microsoft.Commerce.Providers.CreditCardEncryption.PublicKey" value="registry:HKEY_LOCAL_MACHINE\Software\Microsoft\Commerce Server 2009 Keys\Default,PublicKey" />

      <add key="Microsoft.Commerce.Providers.CreditCardEncryption.PrivateKey" value="registry:HKEY_LOCAL_MACHINE\Software\Microsoft\Commerce Server 2009 Keys\Default,PrivateKey" />
    • Encrypt Only Mode

      Use if only a public key is required.

      This option leaves the encrypted credit card number and the validation code in the CreditCardPayment field. This field can be used after the order is created. This is useful for situations in which you want to use this data after the order is created.

      To use Encrypt Only mode, add the following lines of configurations in the appSetting element of the Web.config file for your website:
      <add key="Microsoft.Commerce.Providers.CreditCardEncryption.Mode" value="EncryptOnly" />

      <add key="Microsoft.Commerce.Providers.CreditCardEncryption.PublicKey" value="registry:HKEY_LOCAL_MACHINE\Software\Microsoft\Commerce Server 2009 Keys\DefaultSite,PublicKey" />
Note If you do not make any changes to the Web.config file, you will continue to experience the problem that is described in the "Symptoms" section.

Restart information

You do not have to restart the computer after you apply this hotfix. However, you must restart Internet Information Services (IIS) after you apply this hotfix. To restart IIS, open a Command Prompt window, type the following command, and then press ENTER:
iisreset /restart
Note This option stops and then restarts all IIS services that are running.

Replacement information

This hotfix does not replace a previously released hotfix.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For Commerce Server 2009
File nameFile versionFile sizeDateTime
For Commerce Server 2009 Template Pack for SharePoint 2010
File nameFile versionFile sizeDateTime
Note Because of file dependencies, the most recent fix that contains these files may also contain additional files.


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information, visit the following Microsoft websites:

Article ID: 2452528 - Last Review: Jan 21, 2011 - Revision: 1

Microsoft Commerce Server 2009 Enterprise, Microsoft Commerce Server 2009 Standard