Token Management Service

The
Token Management Service
(
TMS
) links tokens across service providers, payment types, and channels for sellers, acquirers, and technology partners.
TMS
tokenizes, securely stores, and manages the primary account number (PAN), the payment card expiration date, electronic check details, and customer data.
TMS
also enables merchants to create a network token of a customer's payment card.
IMPORTANT
When you board a merchant and enable
TMS
and network tokenization, the token requestor ID is enrolled at the merchant account organization level where the token vault is configured. You must include the merchant business information during token requestor ID enrollment and when you create the
TMS
token vault. This ensures that the network tokens that are provisioned are assigned to the merchant that owns the tokens.

Token Vault Management

Token vaults are where merchants store their customer and payment data. A
Business Center
internal user can enable the
TMS
vault.
Vaults are assigned to an owner, and all data within the vault belongs to the owner. You can grant permission to individual MIDs to create, retrieve, update, and delete tokens within a vault. Created tokens belong to the owner of the vault, not the creator of the token. If you remove a MID from a vault, it can no longer access any tokens within that vault, including tokens created under that MID.
IMPORTANT
It is not currently possible to merge vaults, so ensure that merchants are set up with the correct vault by creating a new vault or granting access to an existing vault.

Token Requestor IDs

A token requestor ID (TRID) is a unique identifier that entities such as merchants use to request network tokens from token providers. Having a TRID is a prerequisite for enabling network tokenization.
Each entity must register with the token provider to get a TRID. Contact a
Visa Acceptance Solutions
representative to enroll a merchant as a token requestor.

Visa and Mastercard TRIDs

An internal user can enroll a merchant as a VISA or Mastercard token requestor through the
Business Center
.
Follow these steps to enroll a merchant as a token requestor in the
Business Center
:
  1. Navigate to
    Token Management
    .
  2. Click
    Vault Management
    .
  3. Use the Vault Owner filter to search for the merchant account that has
    TMS
    enabled.
  4. Choose the merchant account to view the
    TMS
    vaults that are configured for the merchant.
  5. Click
    Network Tokenization
    .
  6. Click
    Enroll to VISA/Mastercard token services
    .
  7. Enter the required information for each card type:
    Mastercard
    Business entity name
    Visa
    Merchant name
    Merchant website URL
    Merchant country code
  8. Click
    Onboard with Acquirer ID
    .
  9. Enter the required information:
    Acquirer ID
    Set the value to
    40010052242
    . It is a static acquirer ID that is used for
    TMS
    .
    Acquirer Merchant ID
    Enter your organization ID.
  10. Click
    Enroll to Network Token Services
    to complete enrollment.
When the enrollment is submitted, the relationship ID and token requestor ID appear on the page for Visa Token Service (VTS) and the token requestor ID appears for Mastercard.
In order to request a TRID from the token provider,
Visa Acceptance Solutions
uses merchant business details already stored. If any of the details are not present, a dialog form should appear prompting you to complete the missing information.

American Express TRIDs

Enrollment as a token requestor for American Express is a manual process. Contact your
Visa Acceptance Solutions
representative to request the TRID for American Express.
Allow 2 to 3 days for the completion of your request.
IMPORTANT
Service establishment (SE) Numbers
are required in order to process American Express card transactions.

Configure the Token Vault Settings Using the
Business Center

Follow these steps to configure your merchant token vault settings:
  1. Log in to the
    Business Center
    test environment or production environment.
    • Test:
      https://businesscentertest.visaacceptance.com
    • Production:
      https://businesscenter.visaacceptance.com
  2. In the left navigation panel, click the
    Token Management
    icon ( ).
  3. Click
    Vault Management New
    . The Vault Management page appears.
  4. From the Vault Owner drop-down list, select the vault owner..
  5. In the Details column, click
    Vault Settings
    . The Edit Vault page appears.
  6. Click
    Edit
    .
    A dialog box appears with a message to warn you that changing your vault settings could result in your merchants being unable to access tokens, which could result in failing transactions. Click
    Yes
    if you want to continue.
  7. Enter the vault name, supported payment methods, supported token types and formats, card number masking format, payment instrument storing configuration, and the webhook URL.
    For each token type, you can choose from these token formats:
    • 32 Character Hex
    • 22 Digits
    • 19 Digits Luhn Check Passing
    • 16 Digits Luhn Check Passing
    IMPORTANT
    Account Updater is incompatible with instrument identifier tokens in the 22-digit format.
  8. Click
    SAVE
    .
  9. To return to the vault management page, click
    VAULT MANAGEMENT
    .

Configure the Token Vault Access Using the
Business Center

Follow these steps to configure your merchant token vault access settings:
  1. Log in to the
    Business Center
    test environment or production environment.
    • Test:
      https://businesscentertest.visaacceptance.com
    • Production:
      https://businesscenter.visaacceptance.com
  2. In the left navigation panel, click the
    Token Management
    icon ( ).
  3. Click
    Vault Management New
    . The Vault Management page appears.
  4. Select the vault owner that you want to configure from the Vault Owner drop-down list.
  5. In the Details column, click
    Access Settings
    . The MID Access page appears.
  6. Check the box for the vault settings you want to enable for each merchant you want to configure:
    • Visa Token
    • Mastercard Token
    • Card Unmasked
    • Create
    • Update
    • Retrieve
  7. Click
    Submit
    to save your settings.

Add
TMS
to a Merchant Account

Follow these steps to add
Token Management Service
to an organization:
  1. In the left navigation pane, click the
    Portfolio Management
    icon.
  2. Under Merchants, click
    Manage Merchants
    . The Manage Merchants page appears.
  3. Click
    + Add Merchant
    .
  4. Select where you want to board your merchant:
    • Select
      Board a new merchant account
      to create a new merchant account.
    • Select
      Add to an existing account
      to add a transacting merchant to an existing merchant organization.
    Click
    Next
    .
  5. If you are adding a transacting organization to an existing merchant account, search for the merchant account in the Boarding Presets section.
  6. If you have more than one boarding package, choose a boarding package from the drop-down menu, or enter text in the search field to find one. Click
    Next
    . If you have only one boarding package, the Boarding Package section does not display.
  7. Click
    Start
    in the Merchant Account Information section to enter account information. For more information, see Add Merchant Account Information.
  8. Optional: click
    Skip
    in the Hierarchy Details section to skip the hierarchy step.
  9. Click
    Start
    in the Transacting Organization and Products section to set up a transacting organization and configure products for it. The Transacting Organization and Products page appears.
  10. Under Transacting Organization Details, enter the transacting organization name and the organization ID.
  11. Under Product Enablement, find
    Token Management Service
    and select
    Enabled
    under the Enablement drop-down menu.
  12. Click
    Configure
    to configure
    Token Management Service
    .
  13. In the Product Configuration Template drop-down menu, select your template.
  14. Click
    Apply
    to save your configuration.

Add
TMS
to an Existing Organization

Follow these steps to add
Token Management Service
to an organization:
  1. In the left navigation pane, click the
    Portfolio Management
    icon.
  2. Under Merchants, click
    Manage Merchants
    . The Manage Merchants page appears.
  3. Search for the organization on the Manage Merchant page. For more information on searching for an organization, see Searching for Organizations.
  4. Find the organization in the Search Results table, and click the eyeball icon. The Merchant Details page appears.
  5. In the Products section, click
    + Add Products
    . The Add a Product page appears.
  6. Under Commerce Solutions, select Token Management Service. Click
    Add
    . The Token Management Service page appears.
  7. In the Product Configuration Template drop-down menu, select your template.
  8. Click
    Apply
    to save your configuration.