Installing The Vp8800; Site Planning; Pci Ped Compliance; Verifying Pci Compliance - ID Tech VIVOpay VP8800 User Manual

Table of Contents

Advertisement

4. Installing the VP8800

Before connecting and mounting the VP8800, plan the installation to conform to PCI 5.X requirements
and minimize radio frequency interference. After determining the location and mounting of the VP8800,
connect it to power and the POS terminal. Finally, test the VP8800 to make sure the installation is
successful.

4.1. Site Planning

Two environmental considerations affect VP8800 installation. PCI certification has specific restrictions
on how the reader is positioned to prevent PIN theft. Also consider objects and devices near the reader
that may affect the performance of the contactless radio frequency antenna.

4.2. PCI PED Compliance

The VP8800 is a PCI 5.x certified PIN/Debit payment device. PCI 5.x certification requires that sufficient
protection be provided to ensure that entering a PIN number CANNOT be viewed by a third party (such
as another customer standing nearby, the cashier, or a security camera).
The VP8800 has design elements, such as a recessed keypad, that meet some of these requirements.
However, to fully implement PCI 5.x, be sure to consider the following:
1. The VP8800 must be in a location that will NOT force a customer to enter a PIN that can be
viewed by a third party (for example, a customer must tilt or rotate the device for better
accessibility due to objects blocking a card swipe).
2. If the VP8800 is elevated on a mounting stand, shielding must be provided on the mount to
prevent a PIN being viewed by a third party.
3. If the VP8800 is mounted on a counter top, additional shielding (which can include other devices
such as a cash register as long as conditions in (1) above are met) must be provided to ensure
that the PIN cannot be viewed by a third party (including cashier and security camera).
WARNING: PCI requires that the device be mounted so that manual PIN entry cannot be observed by a
third party (such as another customer standing in line, the cashier at the counter, or a security camera
mounted in the ceiling to observe the cash register area). If the PIN entry can be observed, the store
owner may be responsible for any losses incurred by the customer if it can be determined that the
customer's PIN was stolen at this location.

4.3. Verifying PCI Compliance

Before completing the installation, verify that the VP8800 is positioned so that the PIN entry is not
visible to other customers, the cashier behind the counter, or video surveillance cameras. If PIN entry is
visible, the VP8800 must be repositioned or shielding added until none of the above parties can observe
PIN entry.
These tests usually require at least two people—one to simulate entering the PIN while the other
attempts to view the keypad:
Can Another Customer View the PIN: While one person stands at the VP8800 with their hand
positioned to enter the PIN, the other tester should try to observe the keypad from behind and
beside the first person.
Page | 7

Advertisement

Table of Contents
loading

Table of Contents