Visual Shielding - Clover Mini Security Policy

5. Self-tests are not initiated by the user. They include:
6. The following Open Protocols were considered during the PTS
evaluation:

Visual Shielding

1. The device comes with a PIN Shield and supplied instructions on the
proper installation and use. Use of the device for PIN Entry without the
supplied PIN shield will invalidate the PCI PTS approval. The custom PIN
Shield lays over the screen as follows:
Clover Mobile Security Policy
a. When required, the device must install software updates. Updates
are done over the air. If updates are not installed, the device will
no longer be able to access the payment processing network.
b. The user is not required to do anything to receive the software
updates.
c. Software updates cannot be performed via USB.
a. Checking the integrity and authenticity of the software.
b. Checking the security mechanisms for sign of tampering.
a. Interfaces
i. HSPA
ii. USB
iii. WiFi
iv. Bluetooth [Disabled in Firmware and therefore excluded
from PCI PTS Review]
b. Protocols
i. USB HID (keyboard & mouse), Serial, 3G modem driver,
Ethernet
ii. ICMP
iii. TCP
iv. UDP
v. HTTPS (client)
vi. DNS (client)
vii. DHCP (client)
viii. Bluetooth (L2CAP, ATT, AVCTP, AV Remote, AVDTP,
Advanced Audio, AV Remote) [Disabled in Firmware and
therefore excluded from PCI PTS Review]
9