Software Requirements

Fabrick Payment Orchestra has software requirements for the buyer’s browser and the server that hosts the virtual store.

Fabrick Payment Orchestra applies TSL1.2 protocol or a later version. However, the system has to be updated with the latest security patch, so it’s mandatory to verify the compatibility in the test environment.

Merchant's server requirements

Check with the server administrator that the computer can reach the following addresses:

Production Environment

To ensure the correct creation of a secure encrypted channel where you will receive the notification in case of https address, the merchant’s server must support at least one of the following Cipher Suite:

• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

• TLS_RSA_WITH_AES_256_GCM_SHA384

• TLS_RSA_WITH_AES_128_GCM_SHA256

• TLS_RSA_WITH_AES_256_CBC_SHA256

• TLS_RSA_WITH_AES_256_CBC_SHA

• TLS_RSA_WITH_AES_128_CBC_SHA256

• TLS_RSA_WITH_AES_128_CBC_SHA

• TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

• TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

• TLS_DHE_DSS_WITH_AES_256_CBC_SHA

• TLS_DHE_DSS_WITH_AES_128_CBC_SHA

• TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

• TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

In order to use correctly all services of Fabrick Payment Orchestra you need to allow the server to support also the following Ciphers:

• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

• TLS_RSA_WITH_AES_128_GCM_SHA256

• TLS_RSA_WITH_AES_256_GCM_SHA384

• TLS_RSA_WITH_AES_128_CBC_SHA

• TLS_RSA_WITH_AES_256_CBC_SHA

• TLS_RSA_WITH_AES_128_CBC_SHA256

• TLS_RSA_WITH_AES_256_CBC_SHA256

• TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

• TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

• TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256

• TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384

• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256

• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384

• TLS_ECDH_RSA_WITH_AES_128_CBC_SHA

• TLS_ECDH_RSA_WITH_AES_256_CBC_SHA

• TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

• TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

• TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

• TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

• TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (active from 01/09/2022)

• TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (active from 01/09/2022)

Buyer browser requirements

Fabrick Payment Orchestra’ domains are associated with a 256-bit SHA-2 and extended versions SSL digital certificates issued by Digicert.

Fabrick Payment Orchestra applies TSL1.2 protocol or latest.

Buyer’s browsers must support this level of encryption and must accept cookies and Javascript.

Major Browsers TLS1.2 compatibility:

• Internet Explorer (IE) 10* or higher

• Microsoft Edge

• Mozilla - Firefox 23* or higher

• Google Chrome 26 or higher

• Safari 7 or higher

• Google Android 4.4* OS Browser or higher

• Mobile Safari for iOS 5 or higher

TSL 1.2 is disabled by default, so it’s necessary to enable it.