Home
Documentation
This Help Center provides documentation on all aspects of the HCL Commerce+ Transaction Server product, from installation and deployment to operating and customization.
Securing
These topics describe the security features of Commerce+ Transaction Server and how to configure these features.

Documentation
This Help Center provides documentation on all aspects of the HCL Commerce+ Transaction Server product, from installation and deployment to operating and customization.
- Overview
  Welcome to the HCL Commerce+ Transaction Server overview. Explore these feature overviews to learn how Commerce+ Transaction Server operates. Refer to the related links listed at the end of each topic to access expanded product documentation.
- Deploying
  This section provides details on deploying HCL Commerce+ Transaction Server. It explains how to download the Docker images and Git bundles that comprise the product, how to create a minimal environment, and how to plan for a full deployment. It details supported software versions, patches, and configurations to ensure the platform performs well.
- Migrating
  The following topics show how to migrate an existing HCL Commerce Version 9.1 environment to Commerce+ Transaction Server.
- Operating
  The topics in this section focus on tasks that are performed by business users, marketers, and customer support representatives to connect with partners and attract and satisfy customers.
- Administering
  The site administrator performs the tasks needed to support day to day operations of the Commerce+ Transaction Server site.
- Extending
  Using Commerce+ Transaction Server's xC programming model, you can use HCL-provided extension points to extend existing Commerce logic. You can implement these extensions with the xC Customization toolkit provided by HCL. Commerce+ also provides Packaged Business Capability integrations that extend the product's reach and functionality.
- Securing
  These topics describe the security features of Commerce+ Transaction Server and how to configure these features.
  - Non-applicable security vulnerabilities
    The Commerce+ Transaction Server team has evaluated the following security vulnerabilities identified within the Commerce+ Transaction Server stack and determined there is no impact to default deployments.
  - Commerce+ Transaction Server security model
    Authentication is the process of verifying that users or applications are who they claim to be. In an Commerce+ Transaction Server system, authentication is required for all users and applications that access the system, except for guest customers.
  - Commerce+ Transaction Server authentication model
    The Commerce+ Transaction Server authentication model is based on the following concepts: challenge mechanisms, authentication mechanisms and user registries.
  - Authorization
    Commerce+ Transaction Server views access control or authorization as the process of verifying that users or applications have sufficient authority to access a resource. This section describes the details of several aspects of Commerce+ Transaction Server access control.
  - Hardening site security checklist
    To harden the security of your HCL Commerce site, you can enable and configure various security features. In addition, site customizations must always be made to comply with best practices as outlined in this document.
  - Site security considerations
    To enhance the security of your Commerce+ Transaction Server site, you can enable various features in Administration Console or in the Commerce+ Transaction Server configuration file.
  - Session management
    Browsers and e-commerce sites use HTTP to communicate. HTTP is a stateless protocol, which means that each command is run independently without any knowledge of the commands that came before it. Because it is a stateless protocol, sessions must be managed between the browser side and the server side.
  - Quick reference to user IDs, passwords, and Web addresses
    Administration in the Commerce+ Transaction Server environment requires a variety of user IDs. These user IDs along with their requisite authorities are described in the following list. For the Commerce+ Transaction Server user IDs, the default passwords are identified.
- Performance
  Topics in the Performance section describe the means by which to plan, implement, test, and re-visit the optimization of Commerce+ Transaction Server site performance.
- Troubleshooting
  Topics in the Troubleshooting section highlight common issues that are encountered with Commerce+ Transaction Server, and how they can be addressed or mitigated.
- Reference
  Topics in the Reference section contain all of the Commerce+ Transaction Server reference documentation.

Securing

These topics describe the security features of Commerce+ Transaction Server and how to configure these features.


	The topics detail Commerce+ Transaction Server security issues and features such as authentication, authorization, and access control policies. The objective of this section is to provide the persons responsible for security at your site (which likely includes a system administrator or Commerce+ Transaction Server site administrator) with a comprehensive set of information to enable them to reliably secure an Commerce+ Transaction Server production site. The intended audience for this section is the chief security officer or the security administrator for an Commerce+ Transaction Server site. Important: These topics only cover Commerce+ Transaction Server security issues that are related to deploying an e-commerce site. Issues relating to vulnerabilities of your operating system are not covered. You should consult your operating system vendor or product information to determine the appropriate measures that you should take to secure your operating system.