Table of Contents
Advertisement
3. POI Device Installation Instructions
Do not connect non-approved cardholder data capture devices.
The P2PE solution is approved to include specific PCI-approved POI devices. Only these devices denoted
above in table 2.1 are allowed for cardholder data capture.
If a merchant's PCI-approved POI device is connected to a data capture mechanism that is not PCI approved,
(for example, if a PCI-approved SCR was connected to a keypad that was not PCI-approved):
▪
The use of such mechanisms to collect PCI payment-card data could mean that more PCI DSS
requirements are now applicable for the merchant.
▪
Only P2PE approved capture mechanisms as designated on PCI's list of Validated P2PE Solutions and
in the PIM can be used.
Do not change or attempt to change device configurations or settings.
Changing or attempting to change device configurations or settings will invalidate the
PCI-approved P2PE solution in its entirety. Examples include, but are not limited to:
▪
Attempting to enable any device interfaces or data-capture mechanisms that were disabled on the
P2PE solution POI device
▪
Attempting to alter security configurations or authentication controls
▪
Physically opening the device
▪
Attempting to install applications onto the device
3.1 Installation and connection instructions
General installation and connection instructions
This section includes general device installation and connection instructions that must be followed to begin
processing. For specific instructions about each device, see "Device-specific installation and connection
instructions" below.
The following are strictly prohibited and will invalidate the EPX P2PE Solution:
●
Use of any devices not denoted in Section 2.1 of this document for cardholder data capture
●
Changing the device or its configuration settings
●
Attempting to enable any device interfaces or data-capture mechanisms that were disabled
●
Attempting to alter security configurations or authentication controls
●
Physically opening the device
●
Attempting to install applications onto the device
When setting up a POI device:
1.
Review the instructions in Sections 4.2 and 5.1 of this document to ensure that the device is not
compromised.
2.
Review the placement guidance and security recommendations in Section 3.3 of this document.
3.
Unpack the device and other components.
4.
Securely connect the device to its approved data source. You may need to remove the cover on the
back of the device to locate the connection port or use the connection box, if applicable. The external
PIM Template for PCI P2PE v2.0
Payment Card Industry Point-to-Point Encryption Standard
© 2021 PCI Security Standards Council, LLC. All Rights Reserved.
Page 9
Hide quick links:
Advertisement
Table of Contents
