Answers.Body: <p>I think we found the problem(s). We connected with Trustwave and they have a PCI compliance scan. I ran the scan on our website and it revealed some issues. We worked with our web-host to correct those server setup issues. We re-ran the scan and the issues were gone.  </p>
  
  <p>As Karin said, intermittent issues are hard to track. But we had one donor who always got the 9002 error (we tried it after every "fix"). After passing the Trustwave PCI scan, I tried the "consistently failing" donation again and it went through no problem.</p>
  
  <p>Even if everyone (web-host, payment processor, etc) says they are PCI compliant, I would suggest you run a compliance scan to be sure. If nothing else, it can be a great troubleshooting tool for an intermittent processing issue.  </p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2018-10-26T19:35:15.227Z
Answers.Text: Can you share specific PCI compliance problems that you resolved?
Answers.UserDisplayName: Jamie
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2018-10-27T22:55:12.700Z
Answers.Text: I just read back through the emails and i am not sure exactly what was done. We were working with support at our webhost. They were writing firewall rules and changing settings and then telling me to run another compliance scan. It took some backforth over several days for them to get their firewall rules and settings dialed in. Wish I could be of more service.
Answers.UserDisplayName: Iowa Boy
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-04-05T15:21:33.080Z
Answers.LastActivityDate: 2017-04-05T15:21:33.080Z
Answers.UserDisplayName: Iowa Boy
Answers.Body: <p>Intermittent issues can be difficult to diagnose. A couple of notes that may help:</p>
  
  <p>What you really need to do is to get TLS 1.2 and switch back to the www server. The www2 server is only needed for those not at the TLS 1.2 standard yet and is going to go away. Your lack of TLS 1.2 is probably a symptom of a system that is not up to date or maintained, that could well be the key issue.</p>
  
  <p>Avoid any special characters in your iATS 80 account password; If you're using another than 80 account w/ iATS then confirm with customer services that you can deposit monies into that account via WebServices. If you're using more than one iATS subaccount 80, 81, 82 etc confirm all are able to accept monies via WebServices.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-03-12T22:10:33.213Z
Answers.Text: Thanks Karin, I did end up switching back to the non-www2 link because our ACH contributions were not processing. I have tried the plain link and the link with v2 in it. The plain link is what we had when the problem started.  Does that mean we are TLS 1.2?  I checked our password and it does not have special characters.
Answers.UserDisplayName: Iowa Boy
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-03-16T01:24:06.450Z
Answers.Text: I tried to do the donation again today with her ACH info and got the same error. I tried it as not recurring, I added two 00s in front of the bank account # to make it longer, and I still got the error. I entered my bank account info and it processed without a problem.
Answers.UserDisplayName: Iowa Boy
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-04-05T15:31:32.847Z
Answers.Text: Ok so it IS working with your own ACH details just not for her ACH info? Best to contact iATS Customer Service - and check with them on this US Bank routing/details.
Answers.UserDisplayName: KarinG - Semper IT
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-04-06T21:15:10.780Z
Answers.Text: Karin, See my answer above. The account and routing was correct.
Answers.UserDisplayName: Iowa Boy
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-03-11T19:03:50.517Z
Answers.LastActivityDate: 2017-03-11T19:03:50.517Z
Answers.UserDisplayName: KarinG - Semper IT
Body: <p>WordPress 4.6.26
  Civi 4.7.3
  iATS for Payment Processing</p>
  
  <p>Beginning in Jan we started hearing from donors that when they set up donations they would get a 9002 Error when they clicked Confirm. So far it appears to be ACH transactions that are having trouble.</p>
  
  <p>The iATS Request Log for these donations looks the same as all others. However, the iATS Response Log does not have anything in the auth_result field.</p>
  
  <p>The first time this happened, I attempted entering the donor's account info for them and got the same results. 20 minutes later it went through with no error.</p>
  
  <p>The other cases have processed the first attempt for me but I can see in the Response Log that they tried several times with no auth_results data. I have another one right now that the donor tried 2 days in a row and got the 9002 Error. I have not tried to do it yet because I was hoping to do some trouble shooting first. </p>
  
  <p>At least two of the donors were using Google Chrome for their browser. I have not seen any problems with any browsers except IE.</p>
  
  <p><a href="https://civicrm.stackexchange.com/questions/14255/how-to-get-iats-working/14555#14555">How to get IATS working</a>  It is about someone else getting the 9002 Error (but theirs was constant). I changed to Karin's <a href="https://www2.iatspayments.com/NetGate/ProcessLinkv2.asmx?WSDL" rel="nofollow noreferrer">https://www2.iatspayments.com/NetGate/ProcessLinkv2.asmx?WSDL</a> and donations are still processing.
  Just for clarification, does any one know:
  1. What are the special characters to avoid?
  2. Is this in our password with iATS/Civi or is this in the donor's password?
  3. Is there a list of potential "misconfiguration" issues out there somewhere that I can go over?</p>
  
  <p>Does anyone have any other ideas for troubleshooting the sporadic loss in communications? Are there other logs that would show if Civi actually sent the request or that show if iATS received the request?</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-03-16T17:24:25.193Z
Comments.Text: We upgraded Civi to 4.7.17 and tried to run the donation again. I still got the 9002 Error. But this time the donation shows as Pending in the reports and Donor Dashboard. It did not create a recurring contribution for it and I'm sure I had checked that box.
Comments.UserDisplayName: Iowa Boy
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2017-04-03T21:25:59.400Z
Comments.Text: The donation in my above comment did not process. It just stayed as Pending. The upgrade did not seem to fix anything.
Comments.UserDisplayName: Iowa Boy
Tags: <error><iats>
Title: Random 9002 Errors from iATS when making donations
ThreadText: # Random 9002 Errors from iATS when making donations
  
  (Asked by: username_0 on 2017-03-09)
  
  WordPress 4.6.26
  Civi 4.7.3
  iATS for Payment Processing
  
  Beginning in Jan we started hearing from donors that when they set up donations they would get a 9002 Error when they clicked Confirm. So far it appears to be ACH transactions that are having trouble.
  
  The iATS Request Log for these donations looks the same as all others. However, the iATS Response Log does not have anything in the auth\_result field.
  
  The first time this happened, I attempted entering the donor's account info for them and got the same results. 20 minutes later it went through with no error.
  
  The other cases have processed the first attempt for me but I can see in the Response Log that they tried several times with no auth\_results data. I have another one right now that the donor tried 2 days in a row and got the 9002 Error. I have not tried to do it yet because I was hoping to do some trouble shooting first.
  
  At least two of the donors were using Google Chrome for their browser. I have not seen any problems with any browsers except IE.
  
  [How to get IATS working](https://civicrm.stackexchange.com/questions/14255/how-to-get-iats-working/14555#14555) It is about someone else getting the 9002 Error (but theirs was constant). I changed to Karin's <https://www2.iatspayments.com/NetGate/ProcessLinkv2.asmx?WSDL> and donations are still processing.
  Just for clarification, does any one know:
  1. What are the special characters to avoid?
  2. Is this in our password with iATS/Civi or is this in the donor's password?
  3. Is there a list of potential "misconfiguration" issues out there somewhere that I can go over?
  
  Does anyone have any other ideas for troubleshooting the sporadic loss in communications? Are there other logs that would show if Civi actually sent the request or that show if iATS received the request?
  
  **Tags:** error, iats
  
  > **Comments:**
  > **username_0**: We upgraded Civi to 4.7.17 and tried to run the donation again. I still got the 9002 Error. But this time the donation shows as Pending in the reports and Donor Dashboard. It did not create a recurring contribution for it and I'm sure I had checked that box.  
  > **username_0**: The donation in my above comment did not process. It just stayed as Pending. The upgrade did not seem to fix anything.  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_0 on 2017-04-05. Score: 0 | Accepted answer
  
  I think we found the problem(s). We connected with Trustwave and they have a PCI compliance scan. I ran the scan on our website and it revealed some issues. We worked with our web-host to correct those server setup issues. We re-ran the scan and the issues were gone.
  
  As Karin said, intermittent issues are hard to track. But we had one donor who always got the 9002 error (we tried it after every "fix"). After passing the Trustwave PCI scan, I tried the "consistently failing" donation again and it went through no problem.
  
  Even if everyone (web-host, payment processor, etc) says they are PCI compliant, I would suggest you run a compliance scan to be sure. If nothing else, it can be a great troubleshooting tool for an intermittent processing issue.
  
  > **Comments:**
  > **username_1**: Can you share specific PCI compliance problems that you resolved?  
  > **username_0**: I just read back through the emails and i am not sure exactly what was done. We were working with support at our webhost. They were writing firewall rules and changing settings and then telling me to run another compliance scan. It took some backforth over several days for them to get their firewall rules and settings dialed in. Wish I could be of more service.  
  
  ---
  
  ### Answer by username_2 on 2017-03-11. Score: 0
  
  Intermittent issues can be difficult to diagnose. A couple of notes that may help:
  
  What you really need to do is to get TLS 1.2 and switch back to the www server. The www2 server is only needed for those not at the TLS 1.2 standard yet and is going to go away. Your lack of TLS 1.2 is probably a symptom of a system that is not up to date or maintained, that could well be the key issue.
  
  Avoid any special characters in your iATS 80 account password; If you're using another than 80 account w/ iATS then confirm with customer services that you can deposit monies into that account via WebServices. If you're using more than one iATS subaccount 80, 81, 82 etc confirm all are able to accept monies via WebServices.
  
  > **Comments:**
  > **username_0**: Thanks Karin, I did end up switching back to the non-www2 link because our ACH contributions were not processing. I have tried the plain link and the link with v2 in it. The plain link is what we had when the problem started.  Does that mean we are TLS 1.2?  I checked our password and it does not have special characters.  
  > **username_0**: I tried to do the donation again today with her ACH info and got the same error. I tried it as not recurring, I added two 00s in front of the bank account # to make it longer, and I still got the error. I entered my bank account info and it processed without a problem.  
  > **username_2**: Ok so it IS working with your own ACH details just not for her ACH info? Best to contact iATS Customer Service - and check with them on this US Bank routing/details.  
  > **username_0**: Karin, See my answer above. The account and routing was correct.  
  
  ---
  
  