Setting Up NACHA 2021 Data Security Rules

You can enable NACHA 2021 Data Security rules to do the following:

• Store the account number of Automated Clearing House (ACH) in encrypted form so that users cannot view the account number.

• Hide the Account Number field in view mode on the Company Bank Details and Entity Bank Details pages. The data entered in this field is stored in an encrypted form.

To configure the ACH Encryption after enabling the NACHA 2021 rules, you must perform the following actions:

• You must disable the edit permission of the ACH payment encrypted files to prevent them from being edited as they are stored in the file cabinet. For more information on disabling the permissions, see the SuiteAnswers support article Role Able to Access Restricted Files via 'Attach File' Column or via File URL, ID 34568.

• To get the decrypted account number, first you must check the Encrypt Account Number box on the custom template. Then replace the account number in the Account Number field on the custom ACH Bank File format template. Follow the same process for all custom ACH templates.

  When you enable the Encrypt Account Number box, you must make sure you the following fields are added in their respective custom templates.

  Field Type	Field Name	Field ID	Required
  Reference Fields	Account Number	custrecord_2663_acct_num	No
  Entity Reference Fields	Bank Account Number	custrecord_2663_entity_acct_no	No

• The existing variable ebanks still holds all the values of the Entity Bank Details record. But, to get the decrypted account number, you must replace the value with ebanks_accountnums.list variable which will provide a list of account numbers in decrypted form. Replace the existing value with the new value ebankAccNum.custrecord_2663_entity_acct_no.

  Example:

                  <#assign ebank = ebanks[payment_index]>
              <#assign ebankAccNum = ebank_accountnums.list[payment_index]>
               ${setLength(ebankAccNum.custrecord_2663_entity_acct_no,17)}.    =>> Will print decrypted account number.
               ${setLength(ebank.custrecord_2663_entity_acct_no,17)}.          =>> It will print encrypted account number(as stored in DB) 
  
                

Using the Encryption for Account Numbers

After you enable the NACHA 2021 rules and configure the ACH payment file encryption, account numbers of company bank and entity bank details are stored in encrypted form. This action can break any existing scripts, workflows or account number fields in use. In such scenarios, you can get access to the decrypted account numbers from the Encryption Details page. for the following fields in the custom records with account numbers.

To access the decrypted account numbers, you must send an HTTP POST request with the required parameters from the Encryption Details page. The script can be run from any scheduled, UE, or MR scripts.

Electronic Payments Encryption Suitelet Details:

Parameter Request Details:

NACHA secret key is used to get the default GUID value. A sample string is first encrypted, then the cipherPayload form is displayed with IV and Ciphertext values. This output is again fed as input for the decryption request and the result becomes plain text. The following script demonstrates the usage of encryption suitelet for encryption and decryption.

          /**
 *
 *
 * @NApiVersion 2.x
 * @NScriptType ScheduledScript
 */
define(['N/url','N/https'],

function(url, https) {

    function execute(context){
 
        try{
            var scriptID = 'customscript_15152_encryption_suitelet';
            var deployementID = 'customdeploy_15152_encryption_suitelet';
    
            var encryptParameters = {
                action : 'encrypt',
                actionInput : '12345678901234567890',
                featureKey : 'NACHA' //can be blank for NACHA
            };
    
            var suiteletURL = url.resolveScript({
                scriptId: scriptID,
                deploymentId: deployementID,
                returnExternalUrl : true
            });
    
            var response = https.post({
                url: suiteletURL,
                body: encryptParameters
            });
            log.debug('Encryption Response',response.body);//response.body.toString()

            var encryptedObj = JSON.parse(response.body);

            //Try decrypting 
            var decryptParameters = {
                action : 'decrypt',
                actionInput : encryptedObj.actionOutput,
                featureKey : 'NACHA'
            }; 

        

General Notices