Download Print this page

Advertisement

Quick Links

P2PE Instruction Manual
Global Payments UK P2PE Solution September 2020
© 2020 Global Payments Inc.
All Rights Reserved.

Advertisement

loading
Need help?

Need help?

Do you have a question about the P2PE and is the answer not in the manual?

Questions and answers

Summary of Contents for Global Payments P2PE

  • Page 1 P2PE Instruction Manual Global Payments UK P2PE Solution September 2020 © 2020 Global Payments Inc. All Rights Reserved.
  • Page 2: Table Of Contents

    Contents 1. P2PE Solution Information and Solution Provider Contact Details ........3 2. Approved POI Devices, Applications/Software, and the Merchant Inventory ....4 3. POI Device Installation Instructions ................... 10 4. POI Device Transit ......................13 5. POI Device Tamper Monitoring and Skimming Prevention ..........15 6.
  • Page 3: P2Pe Solution Information And Solution Provider Contact Details

    P2PE and PCI DSS Merchants using this P2PE Solution may be required to validate PCI DSS compliance and should be aware of their applicable PCI DSS requirements. Merchants should contact their acquirer or payment brands to determine their PCI DSS validation requirements.
  • Page 4: Approved Poi Devices, Applications/Software And The Merchant Inventory

    2. Approved POI Devices, Applications/Software and the Merchant Inventory 2.1 POI Device Details The following information lists the details of the PCI-approved POI devices approved for use in this P2PE solution. Note all POI device information can be verified by visiting: https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php...
  • Page 5 Note that all applications with access to clear-text account data must be reviewed according to Domain 2 and are included in the P2PE solution listing. These applications may also be optionally included in the PCI P2PE list of Validated P2PE Applications list at vendor or solution provider discretion.
  • Page 6 Privacy shield), MOV50DB, (CTLS + Privacy shield), MOV50JB (CTLS + Privacy shield + Desktop case lid) Firmware version # 820547v01.xx, 820376v01.xx, 820555v01.xx (SRED), 820549v01.xx (SRED OnGuard FPE), 820556v01.xx (SRED OnGuard SDE), 820559v01.xx (SRED ANL), 820565v01.xx (SRED FF1) P2PE Instruction Manual...
  • Page 7 DES50CA (Non CTLS); DES50DA (CTLS), DES50AB (Non CTLS), DES50BB (CTLS), DES50CB (Non CTLS), DES50DB (CTLS) Firmware version # 820547v01. xx; 820376v01. xx, 820549V01.xx (SRED OnGuard FPE), 820555v01.xx (SRED AWL), 820556v01.xx (SRED OnGuard SDE), 820559v01.xx (SRED ANL), 820565v01.xx (SRED FF1) P2PE Instruction Manual...
  • Page 8 LIN25IA (Companion version with rear connector and no CTLS support), LIN25JA (Companion version with rear connector and with CTLS) Firmware version # 820547v01.xx <Add additional rows for each POI device type used in this solution, if applicable> P2PE Instruction Manual...
  • Page 9 The full inventory must be completed on an annual basis at a minimum. To help you with your audit responsibility Global Payments will provide to you a report on a Quarterly basis detailing the location and status of all dispatched POI devices on our records.
  • Page 10: Poi Device Installation Instructions

    • Physically opening the device applicable for you. • Attempting to install applications onto the device • Only P2PE approved capture mechanisms as designated on PCI’s list of Validated P2PE Solutions and in the PIM can be used. P2PE Instruction Manual...
  • Page 11 3.1 Installation and connection instructions All supported devices in the P2PE solution are listed in Section 2.1 and GPN will only provide these POI model devices to P2PE enabled merchants as per their contract. GPN will ship devices in a P2PE ready state.
  • Page 12 • Secure devices in a locked room when not in use • Assign responsibility to specific individuals when device is in use • Observe devices at all times • Sign devices in/out and keep this log P2PE Instruction Manual...
  • Page 13: Poi Device Transit

    • Do not install any devices that show any signs of tampering or suspicious activity • Do not install any devices that have not been received from a trusted merchant site or trusted source P2PE Instruction Manual...
  • Page 14 Global Payments will communicate with you as follows: • All POI devices you receive will be from Global Payments through our trusted service partner Ingenico and their logistics partner DPD • Shipments will be marked as being sent from:...
  • Page 15: Poi Device Tamper Monitoring And Skimming Prevention

    If you have any doubts, you must ensure that the POI device is NOT used for transaction processing and that the GPN Service Desk has been contacted (details in Section 1.2). They will evaluate and advise you of appropriate action to take. P2PE Instruction Manual...
  • Page 16 An email from the 3rd party confirming the individual and the reason for access must be part of the validation process to minimise the risk of unauthorised access. A list of all trusted partners should be maintained as per section 4.2. P2PE Instruction Manual...
  • Page 17: Device Encryption Issues

    6.2 Instructions for formally requesting of the P2PE solution provider that P2PE encryption of account data be stopped Global Payments are not permitting opt outs for P2PE customers. If you do wish to terminate your service you will need to discuss it with Global Payments support teams.
  • Page 18: Appendix

    Global Payments Services desk as per detail in section 1.2 and should not use your device. Serial number...
  • Page 19 Serial number Link2500 rear including case off and front Serial number Lane 3000 rear and front P2PE Instruction Manual...
  • Page 20 The below images represent the security seals on the box, both how it should look undamaged and how it will look damaged Seal complete and undamaged Seal sticker on box that has been damaged. If this has happened then you should contact the helpdesk immediately and not use the device. P2PE Instruction Manual...
  • Page 21 Global Payments is HSBC’s preferred supplier for card processing in the UK. Global Payments is a trading name of GPUK LLP. GPUK LLP is authorised by the Financial Conduct Authority under the Payment Services Regulations 2017 (504290) for the provision of payment services and under the Consumer Credit Act (714439) for the undertaking of terminal rental agreements.