We want to start using CVC codes - but can they be optional? If I set them as required does it actually require them? Or can I still process a contribution if I don't have one?
Required does mean required. But you can still accept a CVV code without this box checked. However, you should also make sure your Tessitura payment processing is configured appropriately in TIM. A misconfiguration here could allow a CVV that is invalid to still be processed without issue. We have our box office merchant ID configured to reject authorizations that indicate the CVV is incorrect, but to allow authorizations that do not have a CVV provided. On the web merchant ID, we of course require CVV and make sure it is valid.