CCAvenue is a leading payment gateway provider that offers a seamless payment experience for eCommerce platforms.
CCAvenue - Turns 24 - and coherently, ranks 23rd among 452 active competitors globally
- Estimated
Annual Conglomerate Revenue recorded at ₹3,200Cr --on Mar 31, 2024Investors and Valuation Experts (Data Insights)
For all your design imperative individuals who are brand frenzy - here is
India's most trusted payment gateway enables businesses to do seamless transactions with ironclad security.
CCAvenue. Because Every Transaction Counts.
- Steps to integrate your eCommerce platform with CCAvenue for secure payments.
- Download and Fill - Press Release Sample Template - https://bit.ly/46k5DjB
Build a sense of familiarity in large number of forward-thinking customers by integrating CCAvenue's Merchant Services and Assurance Vendors across your line of business.
CCAvenue is empowered with high network businesses and service providers across the country, India (and in Singapore - globally).
With an array of payment options to entrust merchant-buyer acquisition terms of sale, you can be rest assured,
CCAvenue is a safe, secure and quick mode of payment regardless of the mode of payment (.. acceptance) you choose to enable.
At CCAvenue; a new-age payments processing and infrastructure partner based out of the financial capital of India,
a co-herent PCI-DSS 4.0.1 Compliant Solutions and Software as a Service Vendor (2025 January) proves essential
in making it one of the most secure payment gateways across IVY League service partners - Fintech and Non-banking Institution.
In a rapidly provisioning ecosystem of payment products and merchant services acquiring (companies), for ecommerce and beyond,
CCAvenue outlines excellent time to market propositions and incentives across a large user-base.
- Preferred payment partner with a strong reputation.
- Comprehensive support for secure payment ecosystems.
In 2025, India (Bharat) has transitioned in to a quick-commerce --hyperlocal consumer market with ever evolving sales to offset legacy merchant acquisition means and demeanors.
To be acquainted in the discovery lifecycle of new merchant on-boarding to relentlessly maintaining internationally certified security standards, (.. of not just payment acceptance), thus,
making it the most trust worthy Net Authentication Agency in the bustling city of Mumbai, Maharashtra, India. As you tend to grow stronger with better health,
CCAvenue applied Strong Authentication dispositions (applied via VISA such as 3D-Secure CVV OTP Authentication), CCAvenue offsets implied volatility by over 99.96%
-
Enhanced security through acquirer channel partners.
-
Similar to
VISA, byenabling Secure Code across Mastercard Global Payment Services (India), merchants now are able toaccept and transition wide range of paymentsacrossdomestic and international market playerstoday -Residency in Large Sector Markets- offering - not limited to Realty Trendsetters, .. but also--Government Supply Chain Officials,Logistic Partners,Insurance Sectors,Healthcare and Information Technology Manufacturers, and ofcourse --New Age Vendors offering the latestkicks, you got it all!
You can simply distinguish a warm welcoming entity of payment processor at CCAvenue from a legacy paper-pusher, with no means of survival,
across the world of increasingly limited thresholds, chargebacks and no ends to make ambitions meet.
- Overview of challenges faced by market enablers.
Your transactions are simply - Safe and Secure - when processed via CCAvenue - stay back the rest, YOU!
Boost confidence in rapidly provisioned systems and unapologetically highest approval rates whether you are proposing a new-to-market FX retail order slicing
encrypted at rest.
Market challenges today are unidentified entity with no earmark that quite sadly, degrade the overall merchant reputation.
Employ a chain of trust, as the folks at Infibeam Avenues - Avenues India do with theirs
- Register with CCAvenue Merchant Desk to gain benefits from value-added service providers.
- Complete merchant onboarding requisites by entering and saving
Merchant ID,Access Code, andEncryption Keyin Virto Commerce Admin.
- Sign up at
https://www.ccavenue.comto accept, track, and manage payments-on-the-go with strong business insights leveraged acrossCCAvenue Merchant DeskandValue Added Service Providers. Offer your valued customers -discounts across any supply chain and gain that competitive edge over your pre-decessors.
- Stay compliant with international standards and achieve certification of trust.
What's more you ask ?
Stay end-to-end PCI-DSS Compliant 4.0.1 with CCAvenue as your payment-processing solution provider, catering to nearly 18 million merchants across all sectoral and vertical indices.
- Access to expert partner support for seamless integration.
Explore path-breaking technology in the Fintech space, CCAvenue is committed to redefine user experience, improve transaction success rates
and increase the earning potential of merchants exponentially.
Proven unparalleled product differentiation that is meticulously designed to expand the customer reach of its web merchants,
taking their online businesses to the next level. Get your Commerce Platform - 'CCAvenue marked' NOW!
If you are in -- arrange a personalised connect with one of the experts - best in the industry to valuate your needs -
- Locations with market dominance and information about Infibeam Avenues Limited's Chief Business Officers and team leaders.
Global Presence:
Dubai, United Arab Emirates at Dubai Internet City (DIC Metro Station) - ask for Avenues World FZ LLC
Riyadh, Kingdom of Saudi Arabia at Al Murabba - Information Systems Technology Co. - ask for Avenues World FZ LLC
New York, United States of America at One Penn Plaza - ask for CCAvenue Commerce
Domiscile of:
captial city of Delhi, India at DBS Business Centre - World Trade Tower - ask for Connaught Place
financial capital of India - Mumbai at Plaza Asiad - Santacruz - head to Level 2 - Infibeam Avenues Limited
Bengaluru - Cornor Woods - click through to 3rd Floor - Narayan Reddy Complex - Infibeam Avenues Limited
slicing through open roads in Pune - Teerth Exchange - Baner - Infibeam Avenues Limited
CoWorking Sundowners at:
HQ10 Bristol IT Park - Industrial Estate at Guindy - Chennai - Infibeam Avenues Limited
Resident National:
All Geared in at Gandhinagar, Gujarat Gift City - Lift to 28th Floor Please
Infibeam Avenues Limited- ask forChief Business Officer
Spokesperson -
Menon, Sr. Vice President - Alliances and Operations, Infibeam Avenues Ltd. (BSE: 539807, NSE: INFIBEAM)
"CCAvenue's commitment to enhancing digital payment infrastructure and facilitating seamless and efficient transactions across its network."
- Certification of hardware product line-up including EMV L1, L2, PCI PTS, CE, FCC, and RoHS.
Currently, the company foresights re-developing the supply chain across innovative Indian businesses transitioning to Australia and Oman for value-added support.
For Certificate of Conformity Standards and Regulations - CCAvenue Hardware Products are currently certified - EMV L1, L2, PCI PTS, CE, FCC, and RoHS
- Overview of CCAvenue's investments and advisory arm, including support council and trade agreements.
Escalations -
Vishwas Patel, Joint Managing Director
Vishal Mehta, Chairman and Managing Director Spearheads Finance at Infibeam Avenues Limited
Shareholding across major technology platforms - rediff.com - India's finest
Strong ties across American Express - ecology, RuPay and NPCI, BBPS, BHIM UPI, Department of Internet and Telecom Registry of India
Office of Hon. Prime Minister of India and political leaders who envision success at every step,
Indian Business Council (IBC) Summit, State Bank of India (SBIN powered VBV and Escrow Payments) - VISA Debit Card issued in India
QRC Assurance Partner SoA (Vamsi K M), and TÜV SÜD South Asia (PCI DSS Compliance 4.0.1 v.2026) (Mr. Atul Srivastava)
Upload .pdf document file CCAvenue Merchant Agreement (ISO A4 - 17 Pages) to print on
e-Stamp Paper (Non-Judicial) (State of Maharashtra)
Service Charge (eDrafter.in) (Maharashtra) (INR. ₹ 240/-)
First Party Name and Address (Service Provider)
1. INFIBEAM AVENUES LIMITED
28th Floor, Gift Two Tower, Block No. 56, Road 5C, Zone5, Gift City Gandhinagar - 382355, Gujarat India
2. Second Party Name and Address
{Enter Company Name - Merchant}
{Enter Company Address}
eDrafter Service Purchased by - Second Party Name {Enter Merchant Name}
Select Second Party as Payer of Stamp Duty (INR. ₹ 500/-)
1. Add-ons eDrafter Service - Notarial Service (INR. ₹ 170/-)
1.1 Upload Digitally Verified UIDAI Aadhaar with Enrollment Number - Unmasked Colored - True Copy Duly Attested (Prodigy)
1.2 Upload Signature (Sign with Black Ink on Blank Crop Image) - True Copy Duly Attested (Self)
2. Add-ons eDrafter Service - Digital Signature
2.1 Verified UIDAI Aadhaar (INR. ₹ 39/-)
2.1 OTP Authentication (Mobile Number) (INR. ₹ 19/-)
2.2 Name of Authorised Partner (Primary)
{Enter Company Authorised Partner / Signatory First and Last Name}
{Enter Mobile Number of Company Authorised Partner / Signatory}
{Enter Email Address of Company Authorised Partner / Signatory}
2.3 Name of Authorised Partner (Secondary)
{Enter Secondary Partner First and Last Name}
{Enter Mobile Number of Secondary Partner}
{Enter Email Address of Secondary Partner}
Nature of Pre-judice (Document Review by eDrafter.in) (INR. ₹ 199/-)
CCAvenue Merchant - Privilege Plan Fees (INR. ₹ ) 598.1KB ~600KB
OR.
CCAvenue Merchant - StartUp Pro Plan Fees (INR. ₹ ) 598.1KB ~600KB
Page 1.
1.1 Agreement Execution and Effective date - {Enter Signing Date of Agreement}
1.2 Enter Company Name - Merchant / Enter Company Address
1.3 Select Type from Dropdown - Type of Business Registration (Ministry of Corporate Affairs)
Private Limited Company / Trust / Government / Association / Education / Society / Non-Governmental Organization / Partnership Firm / Public Limited Company / Individual as Sole Proprietor / Hindu Undivided Family (HUF) with Registration Number - CIN (Corporate Identification Number) / MCA RoC - Registrar of Companies (ROC) / GSTIN (Goods and Services Tax Identification Number) / TAN (Tax Deduction and Collection Account Number) / PAN (Permanent Account Number) / Trust (Deed Registration Number)/ Certificate of Registration RNI (Registrar of Newspapers for India) / NGO Identification Number (NGO Darpan UID) / Registrar of Societies / UGC (University Grants Commission) or AICTE (All India Council for Technical Education)
1.4 Merchant Site URL - Working eCommerce Website URL or Commerce Portal for which CCAvenue Internet Payment Gateway is to be implemented - https://www. or https://
1.4.1 Merchant Site URL - Terms and Conditions - Order Checkout, Order Fulfilment Policies, Order Cancellation, Part Payments, Offer and EMI Bank Cards, Refund Conditions as per Deductions, Privacy Policy, Product HAZMAT Declaration as per Commodity HSN, About Merchant - Contact Information - Level Matrix - Escalations, Grievance Officer Information, Acceptable Terms of Use - Non-impeachment Clause or Arbitrage, and Declaration of Service End-user Agreement - Exclusive Jurisdiction to Mumbai Metropolitan Magistrate Court
1.5 Enter Product or Service (Nature of Commerce - Goods or Services Rendered) - Select from Dropdown / Enter Merchant Category Code
1.6 Self-attest with Signature (all pages on bottom left corner)
"This Non-Judicial Stamp Paper forms an integral part of the Infibeam Avenues Ltd. Internet Gateway Merchant Legal Agreement executed by ______________________ (Firm name) on DD / MM / YYYY (date)"
Fascimile for Sending - Completed Document (Digitally Scanned)
Fascimile for Sending - Physical Attested Copy to Mailing Address (Hard-copy)
You can use a Cover Page when sending out Fax.Plus or HP Smart Fax Service or Mitsumi Corporation (FedEx Notary Service) to CCAvenue Merchant Services (Attn: Legal Agreement)
Primary Fax +91 22 26480772 or Telephone +91 22 67425542
Attach Merchant TID or Terminal ID (if enrolled via a CCAvenue Merchant Partner Associate)
For queries in regards to Deduction and With-holding of Taxes as per Annual Information Summary / Tax Information Summary as per issued TAN Document
- Attach latest TDS Certificate (as per TDS-CPC-IT) separately to Dedicated Account Manager
Acceptable Documents as per F.R.I.S.K - Merchant Underwriting
1. Individual or Sole Proprietorship
Bank Cheque (Cancelled), PAN Document issued via Income Tax Department, UIDAI Aadhaar Unmasked with Enrollment Number, Resident Domiscile or Citizenship Proof - Authorised and Co-Sigantories (ex-gratia)
2. Goods and Services Tax (GSTIN Certificate) - Check Applicable e-Invoicing across IMS (Invoice Management System) Dashbaord or Quarterly Filing, Shop and Establishment License (Municipal Coporation as per Ward Office), CENVAT CESS Registration Certificate (GSTIN), Board Resolution Format described from Company Secretary (On Company Letterhead - Latest), Restaurant or Commercial Establishment FCOS FSSAI (FBO or eCommerce.fbo), Pharmacy License Department Underwriting, and eWaste Handler Certification (Manufacturing Escrow Payments)
3. Business Valuation Report as per Line of Business (LoB) - Certified Public Accountant or equivalent CFO - Solvency Report as per CCAvenue Merchant Agreement
3.1 RTGS enabled Bank Account - Statement for eCMS and Overdraft Enrollment (ASBA) - Line of Credit
Public Limited Company
- Shareholding Pattern with Ultimate Beneficial Ownership (UBO Declaration)
- Year to Date Price Ratio Valuation of Listed Equity, Debentures and Liquidation Policy Framework as per BSE and equivalant Mutual Fund AMFI sectorship
Code-signing Certificate can be issued via eMudhra CA
[] Use Postman API Collection to Outline Error Troubleshooting with payload response encrypted and decrypted
- Explanation: `encrypted`
Key Generation: Ensure that the key used for encryption is kept secret and is 32 bytes long for AES-256.
Initialization Vector (IV): A random IV is generated for each encryption to ensure that the same plaintext will encrypt to different ciphertexts each time.
Encryption Process: The encrypt function takes the plaintext and the key, encrypts the data using AES-256-CBC, and returns the IV along with the encrypted data.
Sending Encrypted Data: You can then send the encryptedRequest to the payment gateway instead of the plain JSON request.
In Postman, you can use the pre-request script feature to run JavaScript code before sending the request.
You can include the encryption logic there to encrypt the request body dynamically.
Always handle encryption keys securely and avoid hardcoding them in your source code.
Use environment variables or secure vaults for sensitive information.
param `order_date` has been omitted for code integrity.
- Explanation: `decrypted`
Decryption Function: The decrypt function uses the AES-256-CBC algorithm to decrypt the data. It splits the encrypted text into the IV and the encrypted data, then uses the IV to initialize the decipher.
Environment Variable: The encryption key is retrieved from an environment variable named encryption_key. Ensure that this key is a 32-byte string for AES-256 decryption.
Getting the Encrypted Response: The encrypted response body is obtained from the server response using pm.response.text().
Decrypting the Response: The encrypted response body is decrypted using the decrypt function. The decrypted data is logged to the console for verification.
Storing Decrypted Response: Optionally, the decrypted response can be stored in an environment variable named decrypted_response for further use in subsequent requests or tests.
View - Postman Workspace API
- Information on CCAvenue's global corporate office locations and 24x7 infrastructure support.
[] Corporate Office Address - Payment Gateway with Global Presence
- Infibeam Avenues Limited (India - IN)
- Mumbai Office - Level II, Plaza Asiad, S. V. Road, Santa Cruz (West), Mumbai - 400054. Maharashtra, India.
+91 22 35155072
-
Ahmedabad Office - 28th Floor, Gift Two Tower, Block No. 56, Road 5C, Zone 5, Gift City, Gandhinagar - 382355. Gujarat, India
-
Pune Office - TRIOS CoWorkplace, Mont Vert Spectra, Office #106, 3rd floor, Opp. Hotel Wadeshwar, Baner Rd, Pallod farms, Baner, Pune - 411045, India
-
Delhi Office - Insta Office B-39, Near PVR Plaza, Block B, Connaught Place, New Delhi - 110001, India
-
Bengaluru Office - Narayan Reddy Complex, 3rd Floor, Cornor Woods, Opp Vaibhav Theatre, Above Karnataka Bank, Sanjay Nagar, Bangalore - 5600094, India
-
Chennai Office - HQ10 CoWorking Office, Bristol IT Park, Plot No. 10, 4th Floor, South Phase, Thiru.vi.Ka Industrial Estate, Guindy, Chennai - 600032, India
-
Avenues World FZ LLC (United Arab Emirates - UAE)
- Dubai Office - Avenues World FZ LLC
- Dubai Internet City Building # 17, Level 2, Office # 253 Opp. DIC Metro Station (seaside), P.O. Box 500416, Dubai, United Arab Emirates
+971 4 5531029
-
Infibeam Avenues Saudi Arabia For Information Systems Technology Co. (Kingdom of Saudi Arabia - k.s.a)
- Riyadh Office - Unit No. 2, First Floor, Alakhwin Building, Al Amir Abdulaziz Ibn Musaid Ibn Jalawi, Al Murabba, 12613, Riyadh, Kingdom of Saudi Arabia. +966 55 024 6031
-
AI Fintech Inc. (United States of America - USA)
- New York Office - One Penn Plaza 36th Floor - New York 10119, US
[] Important Emails for Corporate Communications and Risk Assessment
- Marketing contact@ccavenue.com / Technical service@ccavenue.com / Account accounts@ccavenue.com / Cardholder - Risk risk@ccavenue.com
- Overview of the CCAvenue Merchant App - Business QR - Soundbox Max - Pay by Link - LinkPay - Google Playstore and Apple iOS
CCAvenue India for Business
Presenting CCAvenue Merchant App - the most advanced omni-channel payments platform, designed to track all your transactions on the go and request for payments via LinkPay & QRPay in a jiffy.
The CCAvenue App makes it easy to track your business performance and manage it effectively even on the move.
With our 100% digital KYC, you get on-boarded instantly and can start accepting payments within minutes at zero cost.
CCAvenue offers payment solutions that suit all types of businesses, be it private or public limited company,
shop owners, teachers, doctors, freelancers or home business owners.
You can go cashless and receive payments through 200+ payment options including credit card, debit card, Netbanking, UPI, wallets & more.
Accepting payments is now simpler, easier & faster.
Accept Payments Instantly via:
CCAvenue LinkPay:
Create & share payment links with customers via SMS, Email or WhatsApp & receive payments immediately with just a single click!
CCAvenue QRPay:
Offer secure & contactless payments with CCAvenue QR, UPI QR or Bharat QR.
Google Play and the Google Play logo are trademarks of Google LLC.
Your customers can simply scan & pay via any UPI enabled App. Contact Email : contact@ccavenue.com
- Benefits of merchant services compared to standard integration.
You will now be able to integrate CCAvenue with your existing Merchant Services Account of choice where you host your Merchant Account
Merchant Account or Cash Collection Service Account with India's Leading Banks allow high order value or high frequency volume (recurring trxns.) -
SBI Cards & Payment Services Limited (formerly known as SBI Cards & Payment Services Private Limited) / SBIePay
Benefits of Merchant Services as opposed to standard Integration -
Get an integrated, rules-based, proactive risk management system that is supported by industry standard security
Enjoy 99.9% uptime and a 24-hour helpdesk support
Get customised MIS solutions for your business needs
- Configure secure email clients and S/MIME certificates for secure communication.
Mail Client for Secure OSAMLx
Thunderbird Mail Client with .asc and PGP via Actalis S/MIME Outlook ZohoMail Premium Plan (Lowest Fee) direct billing Zoho Corporation
S/MIME Certificate by Actalis .p12 and .pfx
You can issue and upload S/MIME Certificate from Actalis via ZohoMail Premium Plan (Valid for 1 Year) on your Custom Domain for validity and authenticity across your email communication recipient/s,
ZohoMail Premium Plan (Paid - Valid for 1 Year) - https://www.zoho.com/mail/zohomail-pricing.html
Actalis S/MIME Certificate - https://shop.actalis.com/store/it-en/s-mime-certificates or https://www.actalis.com/s-mime-certificates.aspx
Learn More about Actalis - Follow the Link here - https://www.actalis.it/documenti-it/caact-free-s-mime-certificates-policy.aspx
Certs are issued in .p12 and .pfx - Fully supported across ZohoMail Custom Email Address (Upload either one) and a valid password whilst uploading to Zoho Mail for Server Side Rendering (One-time Setup till Cert Validity) - You can push mails via Web Mail, Desktop Client, or Mobile Client once configured on the server. Provide Zoho User ID 6xxx241xxx7 to Zoho Customer Support for Live Support in case you run into unexpected errors. You can add funds to Zoho Subscription Balance as a Payment Method for Automatic Renewals and Issue of GST Invoice for your Monthly/Quarterly GSTR 1/3B and 9 Filing. Zoho Invoices are fully compliant and allow Audit Trail. You can also enable your Zoho Books Account for Seamless Accounting across SELF or Zoho Books Partner in your region (India, Australia, United Arab Emirates, Bahrain, Oman, Qatar, Saudi Arabia, Kuwait, Canada, Germany, Kenya, Mexico, South Africa, United Kingdom, United States)
If you wish to use S/MIME Certificate across Paid Business Google Workspace/Gmail (Paid) - Xenia Systems Private Limited - Refer to Article
If you wish to use S/MIME Certificate across Microsoft Outlook (with Paid Microsoft 365 Plan) Cloudstrats - CBO - Meet Badiani - Refer to Article - Setup S/MIME via Exchange Online - Active Directory - Refer to Article and Refer to Article - (Adding Custom Domain via Microsoft 365 Plan is required prior to enable sending communication across Active Directory configured Mail Client of Choice. Also, DNS Records need to point across Exchange Online)
If you wish to use S/MIME Certificate across Amazon WorkMail (Paid - Valid for 1 Year) Amazon Web Services Private Limited - Refer to Article (Adding Custom Domain via Route53 is required prior to Enabling sending communication across Amazon Workmail. Also, DNS Records need to point across Amazon Workmail Servers. Billing for Amazon Workmail is calculated for your respective Billing Cycle across GST Invoice with Charges for Route 53 Zones Enabled and other AWS services such as EC2, ECS, EKS, SES, or SNS (if enabled)).
If you wish to use S/MIME Certificate across Sify Business Email with S/MIME Certificate (Paid) Sify Technologies SifyCorp (Paid - Valid for 2 Year)
If you wish to use S/MIME Certificate across Airtel Xstream Apps or Vodafone Business Cloud Apps (Paid)
- Overview of two-step authentication processes and security guidelines.
Post-Quantum Cryptography for IoT devices
- Extended Domain Validation (EV) trust certificate
- Chain of Trust via legacy X.509 certificates on Device Lifecycle Manager
- DigiCert CA, comodo CA, thawte CA, Actalis, Cloudflare Inc. (incl. Business Plan - Advanced Certificate Manager
- OCSP Stable Origin / CRL Status / HTTP enforced - DNSSEC / RSA)
- On-premise Server Certificates (Exchange Server - Microsoft IIS, and Apache Tomcat)
- Basic understanding of Certificate Signing Request
- Decoding Cipher - PFX, DER, or PEM - CAA OpenTLS
Several IoT Devices that link to - Merchant Services and Payments Acceptance mode (Post-Quantum Cryptography)
You can request a fully qualified Extended Domain Validation (EV) trust certificate (via primitive Unique Identifier
to approve Chain of Trust via legacy X.509 certificates on Device Lifecycle Manager) as per issuer policy mandates set in place.
Providers include - DigiCert CA, comodo CA, thawte CA, Actalis, Cloudflare Inc. (incl. Business Plan - Advanced Certificate Manager
OCSP Stable Origin / CRL Status / HTTP enforced - DNSSEC / RSA) and other On-premise Server Certificates (Exchange Server - Microsoft IIS, and Apache Tomcat)
Basic understanding of Certificate Signing Request (Decoding Cipher - PFX, DER, or PEM - CAA OpenTLS) is required.
Norton SiteLock (.. coupled with EV SSL*) or TrustedSite Pro (McAfee) - Automatic Sitemap Submission
You can apply for Norton SiteLock (.. coupled with EV SSL*) or TrustedSite Pro (McAfee) - Automatic Sitemap Submission to large user base and industry experts (Non-OEM)
Attestation of Compliance For use with PCI DSS Version 4.0
You can also push an email to CCAvenue compliance@ccavenue.com for enabling PCI DSS Compliance (Redirect or Whitelist) for Accepting Payments across Terminal IPG Service with IVR Collect + VAS (Tap to Pay and UPI Collect)
Attach Filled Word Document - Self-Assessment Questionnaire D for Merchants and Attestation of Compliance For use with PCI DSS Version 4.0
Accepting Payments across Terminal IPG Service with IVR Collect + VAS (Tap to Pay and UPI Collect) Self-Assessment Questionnaire D for Merchants - PCI-DSS-v4-0-SAQ-D-Merchant-r1.docx to CCAvenue Account Manager PCI Security Standards Council Website (Document Library) AOC + SAQ (PCI Level 1 - High) or SAQ for PCI Level 4 (Low)
PCI-DSS-v4-0-SAQ-D-Merchant-r1.docx for sending an email to your respective CCAvenue Account Manager
Download latest applicable ver. via PCI Security Standards Council Website (Document Library) - https://www.pcisecuritystandards.org/document_library
You will be required to file AOC + SAQ (PCI Level 1 - High) as your business grows. As a starting point, you will be required to enable SAQ for PCI Level 4 (Low).
AOC stands for Attestation of Compliance and SAQ - Self-Assessment Questionnaire
Refer to Stripe's Documentation to simplify your understanding of PCI Compliance and Why is it Necessary for Merchants - Refer to Article
To assist with PCI Compliance there is Amazon Web Services - AWS Security Assurance Services - highly recommended for seamless payment processing and staying compliant - CISOs at AWS Security Assurance Services
Add a Timestamp Server for Adobe Acrobat Reader or Adobe Acrobat Pro - Note - This solution is to confirm the authenticity of timestamped documents viewed in Adobe Acrobat Reader or Adobe Acrobat Pro - signed across a Qualified Certificate Authority (QCA) via AATL or EU specific region. Timestamp Server for Adobe Acrobat Reader or Adobe Acrobat Pro
entrust, DigiCert, GeoTrust, Sectigo, GlobalSign, ACCV TSA, Signicat TSA, Apple, SignFiles, Free TSA, Certum, Zeitstempel, CesNet, or Aloaha
Acrobat Reader > Preferences > Signatures > Document Timestamping > More > Time Stamp Servers > New > Add Name and URL from the List Below -
Identrust HID Global - http://timestamp.identrust.com
entrust - http://timestamp.entrust.net/TSS/RFC3161sha2TS
DigiCert - http://timestamp.digicert.com
GeoTrust - https://timestamp.geotrust.com
Sectigo - http://timestamp.sectigo.com
GlobalSign - http://timestamp.globalsign.com/scripts/timestamp.dll
ACCV TSA - http://tss.accv.es:8318/tsa
Signicat TSA - https://tsa.signicat.com/tsaproxy/
Apple - http://timestamp.apple.com/ts01
SignFiles - http://ca.signfiles.com/tsa/get.aspx
Free TSA - https://freetsa.org/tsr
Certum - http://time.certum.pl
Zeitstempel - http://zeitstempel.dfn.de
CesNet 01 - http://tsa.cesnet.cz:3161/tsa
CesNet 02 - https://tsa.cesnet.cz:3162/tsa
CesNet 03 - http://tsa.cesnet.cz:5816/tsa
CesNet 04 - https://tsa.cesnet.cz:5817/tsa
Aloaha - http://card.aloaha.com:8081/tsa.aspx
You can Sign a Document via Adobe Acrobat Reader Pro DC - Open > All Tools > Use a Certificate > Digitally Sign > Configure New Digital ID by Saving to Windows Certificate Store
Tools Menu in Adobe Acrobat Reader or Adobe Reader Pro DC has Digitally Sign Tab which is different from Fill and Sign or Request e-Signatures.
Alternatively, you can Timestamp which will create a Read-only Copy with File Name.
If you would like to Sign a Legal Document via ZohoSign - https://www.zoho.com/sign/sign-documents-with-aadhaar-esign.html
Configure New Digital ID by Saving to Windows Certificate Store
Fill and Sign or Request e-Signatures via Adobe Acrobat DC Reader
Sign Documents with (Aadhaar) E-Signature using Zoho Sign (India, Singapore, South Africa, EU, Switzerland, Japan)
What is Signpass for Singapore, AES - South Africa, eIDAS for EU, ZertES for Switzerland, and JADAC (JAPAN)
UIDAI Aadhaar eSign (2 Zoho Credits) or eMudhra eSign (100 Zoho Credits/year)
Estamping for India
Singpass for Singapore
Advanced electronic signatures for South African businesses
eIDAS-compliant qualified electronic signatures for the European Union
ZertES-compliant electronic signatures for Switzerland
Japan Data Communications Association (JADAC)
Configure strict HTTP Layer 7 rules across ZeroTrust - Cloudflare Zero Trust Gateway - Exclude Apps (Mobile Device)
To ensure maximum security on your smartphones, you'd want to configure strict HTTP Layer 7 rules across ZeroTrust and enforce protective measures for a healthy outlook in the payment acceptance and processing space. Create an account on Cloudflare and navigate to Zero Trust via Menu on the left. You'll want to configure extensive options available for maximum security along with enablement of TwoFactor Authentication (2FA).
PGP Secure eMail to CCAvenue / Merchant Services / Attestation / DSC Services
If you're using ZohoMail as your default mailclient, it's advised to upgrade to Premium and register OpenPGP signature and .asc file to send encrypted mails. Mozilla Thunderbird (Donate to Opensource) is preferred Desktop PC client to access emails via IMAP/POP3. You can request uptodate public keys and add them to Thunderbird Mail Client to send encrypted mails to Security Experts at CCAvenue / Merchant Services / Attestation / DSC Services. Disable various ZOHO Applications included as per usage - You'd ideally want to disable integrations to external Zoho services (except Zoho Workdrive) for quick responses across Zoho Co-location Datacenter.
UPI Protection Plans - Cyber Sachet Policy - Personal Accident Policy - Marine Inland Transit Insurance - Cargo Handling
- e-Insurance Account and CKYC Master Group Policy that is issued to Individual
- Essential CERSAI Information to Account Executives
- Biometric, Authorisation and Authentication - DigiLocker and meriPehachan
- Virtual ID - CDAC to complete Payment Acceptance License
- Aadhaar Seva Kendra Enrolment - Doorstep Banking
- Income Tax of India CPC-IT Login by enablement of Aadhaar Authentication
- Login to Central Processing (TRACES) from your Netbanking
- Annual Information Statement (AIS) . Tax Information Summary (TIS) - UTILS or
NSDLto download your `Electronic (Digitally Signed) PAN Card - ABHA ID update Co-WIN Registration on your reissue Passport (India) for eBoarding via CSIA Arrivals
To get started, purchase UPI Protection Plan offered via HDFCErgo (Cyber Sachet Policy) via Paytm Insurance Broking available via Paytm. Link Policy to HDFCErgo CKYC (Individual) Web Interface. Your annual coverage includes UPI Protection upto INR 10,000/- It is essential to fill the CERSAI (.pdf) and share the same with your account manager of your respective bank account. You will be required to update your address, date of birth, phone number and other KYC details instead of set defaults as it is a Master Group Policy that is issued to Individual. It takes less than 24 hours to link and dispatch a physical copy to your registered address.
- Steps to recognize a charge on your statement and immediate resolution via CCAvenue Merchant Services.
Recognise a Charge on your Statement - Guided Steps for Immediate Resolution via CCAvenue Merchant Services (ISV) - risk@ccavenue.com - *Stipulated Fees Apply*
Sale Date (as shown on card statement)
`DD/MM/YYYY` as `01/JAN/1975`
Credit Card Statement `Generation Date` from Merchant Services
`DD/MM/YYYY` as `01/JAN/1975`
Credit Card Statement reflects `Merchant Name` `Shortcode` or `Company Name` from Acquirer Merchant Services
- `CCAvenue.com`
- `Avenues India Private Limited`
- `Avenues World Pte. Ltd.`
Enter Reference Details (Ultimate Beneficial `Ownership` Declaration `of Payment Mode Applied to Inquire`)
Select Mode of Payment
- `eCommerce via CCAvenue Checkout` (`Self-hosted` / `Re-direct Seamless` / `Seamless`) - Enter `URL starting with https://www. or https://`
Select if `CCAvenue Checkout was Enabled across your Checkout Experience` or `requisite a charge associated via (Redirect / Landing / External Checkout via Bank Channel)`
- `Magento OS Commerce (Bitnami on AWS / GCP / Azure Hosting) (Bitnami on Kubernetes) (Bitnami on Headless Commerce - GraphQL Framework)`
- `Shopware` / `Demandware` / `HCL Commerce Cloud` / `Sanity CMS Framework` / `OroCommerce` - Extended Order Management
- `WooCommerce` or `WooCommerce Payments` or `WordPress Checkout`
- `Shopify Plus Checkout` (Hosted and Headless via Nuxt.js version: GitHub Deployment)
- `PayPal Hosted Checkout` (`iZettle` / `Braintree` / `Payflow Pro` / `PayPal Payments via Authorise.net or Cybersource Vendor` / PayPal Checkout)
- `Medusa Commerce` / `Salesforce Commerce Cloud` / `Bigcommerce` / `Squarespace Commerce (Godaddy Payments)`
- `ZOHO Workspace (Zoho Mail, Zoho Inventory, Zoho Books and Zoho Payments)` / `Odoo ERP (Commerce Integration)` / `Snipcart (Rich Snippets)`
- `Payment via SMS (DLT-TRAI DoT approved Commerce Vendors)` `(Kaleyra.io - TATA Communications)`
- `Exchange Mail Active Directory (Mailmerge) (Newsletter Communication) (Redistributable Payment Channel Provider)` `(Google Campaign Sitelinks)`
- `Links via Web Framework (HTML) (Forms - Embedded or Clickable)` `(Chat Messaging Apps or Pop-ups)` `(Frequency set via XML / RSS Distribution / Internal or External Back-links / Pingback for UM Trackback)`
- `Payments to Sponsorships (Event Host Information) (Approved Confirmation) (Technology as a Service) (Non-Merchandise Payments) (Legal - Independent Software Contracts)`
- `Payments to Naaptol.com (Digital TV Commerce Network)`
- IVR Payment via Phone Commerce Authorisation - Self-checkout - `Mention (UCC or SMS Shortcode)`
- `WhatsApp (Multimedia Calling) - RCS (Rich Communication Service)` `WhatsApp Business (API) (On-premise)`
- `Instagram (Multimedia Calling) - Payments Channel (Endorsements)`
- `Limited Release SDKs (Non-Origin Communication Services)`
- `UCC Complaints Registration` - `https://myjio-trueconnect.jio.com/preference`
- Tele-sales (Live Agent) / SMS / IVR / MMS / WhatsApp Commerce / API
Category (Select applicable category or categories - Bulk Payments)
- eCommerce Marketplace (International / Domestic Secure Transaction / Utility Payments / External Providers)
- Entertainment or Infotainment (Subscription to Service D2H Provider - Native or In-built Digital Commerce Links)
- Trade Experience Center (International / Domestic Expo / ITPO - Arts and Theatre)
- Travel Card (Frequent Flyer Member) (Redeemed or Issued) (Employee Receipts - Excluded)
- Insurance (Health Assurance Desk) (Acko General Insurance / HDFC Ergo General Insurance / ICICI Lombard General Insurance / Niva Bupa Health Insurance)
- Hospital Billing (Clinical Health) (Smart Admissions) (Domiciliary Patient Care) (Day Care and Scientific)
- Veterinarian (Pet Store or Clinical) (Consumable / Disposable / Pharmaceutical)
- Real-estate (Payment towards Brokerage / Housing Allowance / RERA or MAHARERA - Land Department Payments) (ISO: Transliteration and Translation)
- Government Payments (Cash at Counter OTC / Bank Transfer UTR)
- Ed-tech Coaching (Tutor Payments)
- Restaurant / Cafeteria / FnB Chains / Nightlife (Privy Memberships)
- Cab Service (International / Domestic) (OLA - Smart Mobility Solutions - Intercity Travels - Volvo - Bharat Benz Daimler)
- Taxi Rentals (International / Domestic) (Permit Assurance Desk)
- Passenger Rail (Domestic) and Rail Transit Insurance (Insured by TPA - Incl. Personal Accident Policy)
- Telecommunication (Postpaid or Prepaid Plans incl. 5G 4G Data Recharge or International Calling Service)
- Medical Practioner (Payments to Registered Medical Practioners) (Clinical) (Ayush) (Homeopathy) (State Dispensaries) (Senior Care) (Nursing Home - Medical Board) (Domiciliary Warden - CMO)
- Imaging Departments (Medical - NGO Assisted - PMJAY)
- Stationery Stores (Xerox and Printing) - Confectionery
- Ration Marts (Exclusive) (Domestic / International)
- Payments towards Cybersecurity Framework Association - Demand Generation - Lead Broking and Terminal Desk (International)
- Exchange and Asset Management (Advisory Payments - Scope of Work and Completed Projects)
- IoT Device Registration (AI-assist) / Coverage (API) / Vending Machines (Terminal Payments - Smart Mobility / Food and Beverage (Smart Tracking and Route Optimisation) / Optics / Bullion Service Providers)
- Reseller Payments (Outward: Merchant Induced)
- Microsoft Store (Windows) (Bing Shopping Search)
- Amazon Web Services (AWS Gov Cloud / AWS India / UK) Ubuntu Linux Open Source (CIS)
- Redhat On-premise (Hosting) / Azure Marketplace (Kubernetes)
- Google Cloud Platform (GCP) (Docker) (Google Shopping Console) (Google Manufacturer Center)
- Redis / MongoDb / NVIDIA / Radeon Labs (Language Models)
- Meta facebook Instagram twitter reddit Taboola Display Advertising (Promotional Credits and Certification)
- Print and Display Advertising (Promotional Credits and Certification) - Newspaper / Digital OOH / D2H and (Print Packaging and Authenticity)
- Sales via QR Ads (WhatsApp Commerce / UPI Intent Apps / Marketplace and Retail Commerce Vendor Apps) (CCAvenue Business Promotion)
- Music Distribution (Radio Ads) (Payments applied via Phone IVR 3-way Connect Call CCAvenue Merchant Desk Payment Systems)
- Spotify Artists (Private Label and Promotions)
- Netflix Entertainment (Private Label and Promotions)
- Amazon Prime (Channel) (Private Merchandise)
- Apple TV and Apple TV+ (Proprietary Content Merchandising)
- Disney+ (Proprietary Content Merchandising)
- Sony Networks (Proprietary Content Merchandising)
- Apple Music (Promotions and Private Artists)
- Dobly Vision UHDR - Dolby Labs (Movies - IMAX) / Dolby Atmos Encoding (Partnerships)
- Kodak Film Processing (Geo-spatial Film Processing - Application Engineering (Access Engineering - EXIF Data and Acquisitions)) (Release Rights) (Cinematic Experiences)
- CCAvenue Reseller Payments (Affiliates and Merchant Provisioner) (In-ward: Customer Induced)
- DPIIT approved Entities at Commerce Expo and World Convention Centers
- Jio World Plaza (Bandra Kurla Complex - Mumbai)
- Bharat Mandapam (New Delhi ITPO)
- Lincoln Center (Global)
- NCPA Cultural Exchange (South Mumbai AVSK)
- US-India Dosti House and World Trade Center - (Bandra Kurla Complex - Mumbai) Delhi
- Secretariat House (Parliament House - New Delhi and Mumbai)
- Bharat Diamond Bourse (Bandra Kurla Complex - Mumbai)
- Aviation Hanger (Commercial Expo / India Cargo Complex - Sahar JNPT (Bandra Kurla Complex - Mumbai)) var.
- Inland Ports and Maritime Cargo Complex - JNPTU / KA / MIDCO var.
- Aditya Birla Cultural and Heritage Center (South Mumbai AVSK)
- Changi Airport Terminal (Goh Choon Phong)
- Vande Bharat Express Lounges (Indian Rail Corporation) (HAL)
- Toll Transfers (Reserved Spaces) (City Limits)
- Advanced Computing Channel Partners (Government eMarketplace) - Data Centers (NIC) - Quantum Cryptographic Modulisation (SMM) - Circuit Boards
- Patent Application and Trademark Office (Datamatics)
- Judiciary Establishments (Advocacy - Human Rights Commissions Office)
- Merchant Kiosk with Merchant Name
- CCAvenue Business Payment Link or (Pay by Link on Invoice generated by Merchant)
- Soundbox Max (QR Pay / QR UPI / QR Intent Collect)
- Select if Applicable (NFC Tap to Pay / Visa Wave Collect / Membership Card / Barcode Token - Redeemable Giftcard / Loyalty Points)
- Issued by - Organisation Name and Expiry Set on Card (DD / MM / YY or YYYY) (MM / YY) or (MM / YYYY)
- Contact Information (Any) (Owner of Establishment) (FSSAI) (License Number) (Ward Office)
- Shipment Returns (Auction or Proceeds) (Insolvency) (Asset Restructuring) (Disposables)
- Software or Software as a Service (Applied under Export Control Laws - Sanctioned or Non-Sanctioned)
Dispute Collection Officer Information Report
- Legal Name (Salutation / First / Middle / Last) as per verified KYC Documents
- Company Name (Private Limited / Public Limited / Limited Liability / Donations to Charitable Institutions Non-profit NGO)
- Email (@outlook.com MS IIS Exchange or Business 365 Apps Domain / @sifymail.com SifyCorp Business / @gmail.com Google Workspace / @awsapps.com Amazon WorkMail / @india.gov.in NIC MeITY)
- Address Line 01
- Address Line 02
- Address Line 03
- Mobile Number (+91) Country Code (India) or (+65) Country Code (Singapore) or (+1) Country Code (United States of America)
- Billing Address same as Shipping Address (Yes / No / Enter Shipping Address if Applicable)
- Shipment / Cargo (International / Domestic) Tracking Information - Enter AWB DDP or In-transit Airway Bill Information
- Insurance (Marine Cargo / In-land / Retail) (Docket or Scheme ref. Number via IRDAI) (Value Self-insured - Commercial Cargo / Insured via Logistics Provider (Organisation Name) - International / Domestic)
- Goods and Service Tax Invoice (Sale of Goods - HSN) or Bill of Sale (Cargo - IMPEX Freezone Gift City IBU) or Freelancer Invoice (Individual - Services SAC) or Donations Receipt (Exempted or Inclusive Charities)
- Does Sale of Goods or Service fall under Restricted or Prohibited Category (Exports awaiting clearance Non-DPU)
- Electronic Transfer Remittance Details (Sale - Outward or Inward) (Payments towards Compliance) (Remittance Exchange House MCX) (Contractual) (ISV or Independent Service Provider)
- If Inward Transfer (Specific Payment Mode - Authorise or Authorise and Capture - Cancelled due to Declined) (Apply Transaction Mapping) (EMI - Installments Approved Rating for Merchant)
`Previous Communication ref. trxn. ticket.id`
- Supports INR, USD, AED, SAR
- AES-256 encryption with retry logic
- SHA-256 checksum validation
- Timestamp validation (15-minute tolerance)
- BIN detection for Visa, MasterCard, RuPay, Amex
- Pincode serviceability check via JSON/CSV/TSV
- Webhook + Success/Failure controllers
- Logging with Serilog
- Monitoring with Application Insights + Prometheus + Grafana
- Unit testing with xUnit, Moq, AutoFixture, Coverlet
Directory File Structure for Code as a Service inside VirtoCommerce on Microsoft Azure 1-click Deploy
The link points to the Official VirtoCommerce ARM template published on the Azure Marketplace.
When clicked, Azure Portal opens with the VirtoCommerce template pre‑loaded, prompting you to fill in parameters like:
Parameter |
Example Value |
Notes |
|---|---|---|
Resource Group |
virto-ccavenue-rg |
Logical container for all resources |
Region |
Central India |
Closest Azure region to Mumbai |
App Service Plan |
virto-ccavenue-plan (S1) |
Standard tier compute plan |
SQL Server & Database |
Server: virto-ccavenue-sql |
Globally unique server name |
Database: VirtoCommerce |
Default DB name |
|
Storage Account |
virtostorage2026 |
Blob storage for media/assets |
Search Service |
virto-search (Basic) |
Azure Cognitive Search for catalog indexing |
Redis Cache |
virto-redis (C1 Standard) |
Provides session caching |
Admin Email & Password |
admin@yourdomain.com |
VirtoCommerce admin portal login |
Adm1n!Virto2026 |
Strong default password |
Microsoft for Startups provides a range of technical benefits designed to help startups build and scale their businesses.
Free Azure credits: Startups receive Azure credits to help them get started with building their solutions quickly and efficiently on the Azure platform.
Access to AI tools: Startups can leverage industry-leading AI services and tools for software development, enabling them to create innovative and intelligent applications.
Technical resources: Startups have access to various resources that assist in building better products, scaling faster, and increasing sales. This includes documentation, guides
process:
> Visit Microsoft for Startups
Go to the official Microsoft for Startups India page at https://www.microsoft.com/en-in/startups and click Get started.
>> Create or sign in account
Use a personal Microsoft account (not work/school email) to sign in or create a new one.
>>> Provide business details
Enter your legal company name, industry, website, Mumbai address, and GSTIN if registered.
>>>> Verify identity
Complete OTP phone verification and provide a valid payment method.
>>>>>
Enter referral code from a VC or accelerator in Microsoft’s Investor Network, enter it during signup.
>>>>>> Activate Azure credits
Standard signup gives ₹13,300 (~$200) credits; referral codes can unlock up to $150,000 credits.
>>>>>>> Deploy your solution
Use your credits to deploy VirtoCommerce with the 1‑Click Deploy button and configure secrets securely.
To provision resources, you can create an Azure Account with a valid payment method.
Azure Domain Group with IAM must be configured
Azure CLI installed locally to connect to your Azure Instance ID
- Install Azure CLI: `curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash`
- az login / - az account list
- Login to Admin Console for VirtoCommerce
- https://{replacedomain.com}.azurewebsites.net/admin >> Modules >> Installed Modules >> Configure Enable / Disable
Bind in Program.cs
builder.Services.Configure<CCAvenueOptions>(
builder.Configuration.GetSection("Payment:CCAvenue"));
Run Tests by navigating to
cd site/wwwroot
cd Modules/VirtoCommerce.CCAvenue/Tests
dotnet test
(Optional) Generate coverage
dotnet test /p:CollectCoverage=true /p:CoverletOutputFormat=lcov
Modules/VirtoCommerce.CCAvenue/
├── Controllers/
│ ├── CCAvenueController.cs
│ ├── SuccessController.cs
│ ├── FailureController.cs
│ ├── CheckoutController.cs
│ └── WebhookController.cs
│
├── Services/
│ ├── CCAvenuePaymentService.cs
│ ├── CCAvenueChecksumValidator.cs
│ ├── CCAvenueTimestampValidator.cs
│ ├── CCAvenueResponseHandler.cs
│ ├── CCAvenueTokenService.cs
│ ├── CCAvenueCurrencyService.cs
│ ├── CCAvenueBINProcessor.cs
│ ├── PincodeValidator.cs
│ └── PincodeMetricsCollector.cs
│
├── Views/
│ ├── Success.cshtml
│ └── Failure.cshtml
│
├── Data/
│ └── pincodes.json
│
├── Tests/
│ ├── ControllersTests.cs
│ ├── PincodeServiceabilityTests.cs
│ ├── ResponseAndTokenTests.cs
│ ├── ChecksumValidatorTests.cs
│ ├── BINProcessorTests.cs
│ ├── CurrencyServiceTests.cs
│ └── PaymentServiceTests.cs
│
├── Monitoring/
│ └── GrafanaDashboard.json
│
├── Module.cs
├── README.md
└── composer.json
1. Add module to VirtoCommerce.Platform.
2. Configure appsettings.json with MerchantId, WorkingKey, AccessCode, and Domain
3. Place pincode files in Data/pincode.json /pincode.csv /pincode.tsv
4. Build and deploy.
- Clone into
Modules/directory of your VirtoCommerce installation:git clone https://github.com/dravasp/virtocommerceccavenuepaymentseamless Modules/VirtoCommerce.CCAvenue
To keep sensitive values like your **CCAvenue MerchantId, WorkingKey, and AccessCode** out of `appsettings.json`,
you can use **`secrets.json`** in .NET
Run this command in your project directory:
dotnet user-secrets init
This is part of the Secret Manager tool that stores configuration securely during development.
## Step 2: Add secrets
Use the CLI to store sensitive values:
Run the following command in Azure CLI
az ad sp create-for-rbac \
--name "github-actions-sp" \
--role contributor \
--scopes /subscriptions/<YOUR_SUBSCRIPTION_ID>/resourceGroups/<YOUR_RESOURCE_GROUP> \
--sdk-auth
to generate AZURE_CREDENTIALS that is to be stored at https://github.com/username/repositoryname/settings/secrets/actions/AZURE_CREDENTIALS
{
"clientId": "11111111-2222-3333-4444-555555555555",
"clientSecret": "abcdEFGHijklMNOPqrstUVWXyz123456",
"subscriptionId": "66666666-7777-8888-9999-000000000000",
"tenantId": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"activeDirectoryEndpointUrl": "https://login.microsoftonline.com",
"resourceManagerEndpointUrl": "https://management.azure.com/",
"activeDirectoryGraphResourceId": "https://graph.windows.net/",
"sqlManagementEndpointUrl": "https://management.core.windows.net:8443/",
"galleryEndpointUrl": "https://gallery.azure.com/",
"managementEndpointUrl": "https://management.core.windows.net/"
}
az account show --query id --output tsv
to generate AZURE_SUBSCRIPTION_ID that is to be stored at https://github.com/username/repositoryname/settings/secrets/actions/AZURE_SUBSCRIPTION_ID
Name CloudName SubscriptionId State IsDefault
--------------------------------------- ----------- ------------------------------------ ------- ----------
Pay-As-You-Go AzureCloud 66666666-7777-8888-9999-000000000000 Enabled True
dotnet user-secrets set "Payment:CCAvenue:MerchantId" "YOUR_MERCHANT_ID"
dotnet user-secrets set "Payment:CCAvenue:WorkingKey" "YOUR_32CHAR_WORKING_KEY"
dotnet user-secrets set "Payment:CCAvenue:AccessCode" "YOUR_ACCESS_CODE"
## Step 3: Bind in Program.cs
builder.Services.Configure<CCAvenueOptions>(
builder.Configuration.GetSection("Payment:CCAvenue"));
If you have already generated your credentials then you can use Github CLI express commands by replacing the values
gh secret set Payment__CCAvenue__MerchantId --body "YOUR_MERCHANT_ID"
gh secret set Payment__CCAvenue__WorkingKey --body "YOUR_32CHAR_WORKING_KEY"
gh secret set Payment__CCAvenue__AccessCode --body "YOUR_ACCESS_CODE"
gh secret set AZURE_SUBSCRIPTION_ID --body "66666666-7777-8888-9999-000000000000"
gh secret set AZURE_RESOURCE_GROUP --body "virto-ccavenue-rg"
Copy output as referenced via CLI - JSON (from az ad sp create-for-rbac --sdk-auth)
gh secret set AZURE_CREDENTIALS --body '{
"clientId": "11111111-2222-3333-4444-555555555555",
"clientSecret": "abcdEFGHijklMNOPqrstUVWXyz123456",
"subscriptionId": "66666666-7777-8888-9999-000000000000",
"tenantId": "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
"activeDirectoryEndpointUrl": "https://login.microsoftonline.com",
"resourceManagerEndpointUrl": "https://management.azure.com/",
"activeDirectoryGraphResourceId": "https://graph.windows.net/",
"sqlManagementEndpointUrl": "https://management.core.windows.net:8443/",
"galleryEndpointUrl": "https://gallery.azure.com/",
"managementEndpointUrl": "https://management.core.windows.net/"
}'
To save Repository Variables >> https://github.com//settings/secrets/actions >> New Secret > New Repository Secret >>
AZURE_CREDENTIALS →
AZURE_RESOURCE_GROUP →
AZURE_SUBSCRIPTION_ID →
PAYMENT__CCAVENUE__ACCESSCODE →
PAYMENT__CCAVENUE__MERCHANTID →
PAYMENT__CCAVENUE__WORKINGKEY →
To save Repository Variables >> https://github.com//settings/secrets/actions >> New Variable > New Repository Variable >>
Payment__CCAvenue__Currency → "INR"
Payment__CCAvenue__RedirectUrl → "https://domainrequired.com/payment/success"
Payment__CCAvenue__CancelUrl → "https://domainrequired.com/payment/failure"
Payment__CCAvenue__IsTestMode → "false" (or "true" in localhost)
AZURE_RESOURCE_GROUP → "virto-ccavenue-rg" (matches your ARM template)
AZURE_WEBAPP_NAME → "virto-ccavenue-plan-site" (your App Service name)
AZURE_PLAN_NAME → "virto-ccavenue-plan" (your App Service plan name)
- Subscribe to future updates for ongoing support and information. Subscribe to future updates to this repo by click here - View .atom RSS file to import to Thunderbird