Go Live
Once you have completed test integration, you are ready to switch to the production environment.
Prerequisites
Required Before Switching
Before switching to production, you must complete your contract with Hecto Financial and obtain your production merchant ID and keys.
Source Approval Status
Verify that the source approval for each payment method you plan to use has been completed.
| Payment Method | Source | Verification Item |
|---|---|---|
| Credit Card | Individual card companies (BC, Samsung, Hyundai, etc.) | Approval completion status |
| Virtual Account | Individual banks (Kookmin, Shinhan, Woori, etc.) | Account issuance availability |
| Bank Transfer | Korea Financial Telecommunications & Clearings Institute | Integration approval status |
| Mobile Payment | Individual carriers (SKT, KT, LGU+) | Approval completion status |
NOTE
Checking Approval Status
Source approval status can be checked through your Hecto Financial representative or the merchant admin page.
Test Checklist
The following items must be tested before switching to production.
- Confirm successful payment and notiUrl reception
- Confirm pktHash verification logic operates correctly
- Confirm all payment methods to be used operate correctly
- Confirm encryption/hash keys exist only on the server (must not be exposed to the client)
- Confirm error handling on payment failure
- Confirm payment cancellation operates correctly
Environment Changes
Items to Change
| Item | Sandbox | Production |
|---|---|---|
| Checkout URL | https://tbnpg.settlebank.co.kr | https://npg.settlebank.co.kr |
| API URL | https://tbgw.settlebank.co.kr | https://gw.settlebank.co.kr |
| SDK URL | https://tbnpg.settlebank.co.kr/resources/js/v1/SettlePG_v1.2.js | https://npg.settlebank.co.kr/resources/js/v1/SettlePG_v1.2.js |
| Merchant ID | Sandbox ID (e.g., nxca_jt_il) | Issued production merchant ID |
| License Key | ST1009281328226982205 | Issued production license key |
| AES Key | pgSettle30y739r82jtd709yOfZ2yK5K | Issued production AES key |
Key Replacement Warning
When deploying to the production environment, you must verify that the keys have been replaced with the production keys. Deploying to production with sandbox keys will cause payment failures.
Firewall Configuration
Allow notiUrl IPs
To receive webhooks, Hecto Financial server IPs must be allowed through your firewall.
IPs to Allow (Production Environment)
| Center | IP Address | Purpose |
|---|---|---|
| Primary | 14.34.14.23 | Webhook delivery (main) |
| Secondary | 61.252.169.24 | Webhook delivery (backup) |
Both Centers Must Be Allowed
Both the Primary and Secondary IPs must be allowed through the firewall. If either is missing, webhooks may not be received during a center failover.
Outbound Firewall Configuration
The following configuration is required when your server calls the Hecto Financial API.
| Item | Configuration |
|---|---|
| Protocol | HTTPS (TCP/443) |
| Domain | gw.settlebank.co.kr (Primary)npg.settlebank.co.kr (Checkout) |
| IP | DNS Lookup recommended (hosts file pinning not recommended) |
Post-Switch Verification
Check the following items immediately after switching.
Immediate Check (Within 1 Hour of Switching)
- Perform a small test payment: Confirm that actual payments work correctly
- notiUrl receiving normally: Check logs to confirm webhooks are being received correctly
- Database storage: Confirm payment information is being stored accurately in the DB
- Error log monitoring: Check the production environment error logs
First Day of Production
- Confirm all payment methods operate correctly
- Confirm payment cancellation process operates correctly
- Monitor customer inquiries
- Check payment success rate (verify no sharp drop compared to testing)
Responding to Issues
Common Problems and Solutions
Payments are not working at all
- Verify production keys are applied (mchtId, license key, AES key)
- Verify the SDK URL has been changed to the production environment
- Verify source approval has been completed
Webhooks are not being received
- Verify Hecto Financial IPs are allowed through the firewall (Primary + Secondary)
- Verify the notiUrl is HTTPS (HTTP is not supported)
- Verify the notiUrl response returns "OK" as Plain Text
- Verify the notiUrl server is operating correctly (200 OK response)
pktHash mismatch error
- Verify the license key is correctly applied
- Verify the hash generation order is correct (refer to Before You Begin documentation)
- Verify that plaintext values are used for encrypted fields
Intermittent payment failures
- Check network timeout settings (recommended: 30 seconds or more)
- Check for insufficient server resources (CPU, memory)
- Check database connection pool size
Emergency Contact
If you have difficulty resolving an issue, contact the Hecto Financial technical support team.
NOTE
What to Prepare When Contacting Technical Support
Please prepare the following information when contacting support: Merchant ID, time of occurrence, transaction number (trdNo), error message, and related logs
Related Documentation
Additional Resources
Need technical support?
Code Samples
HectoFinancial GitHub