Clover Mobile Security Policy 11
a. The device has no functionality that gives access to security
sensitive services, based on roles. Such services are managed
through dedicated tools, using cryptographic authentication.
2. Environmental Requirements
a. The device should be operated under the following environmental
parameters
i. Maximum temp 135C
ii. Minimum temp: -70C
iii. Voltage (V
DD
) high: 3.8V
iv. Voltage (V
BAT
) high: 3.8V
v. Voltage (V
BAT
) low: 2.1V
b. Crossing these thresholds will trigger the tamper mechanisms.
Tripping the tamper will require the device to be sent back to
Clover.
3. Hardware Security
a. The device contains a tamper mechanism.
b. After a tamper event, all payment related keys are permanently
erased. Payments will not be processed in this state.
c. The device must be returned upon a tamper event and will not be
reused.
4. Visual inspection
a. Before using the device the user must conduct a regular inspection
to check for evidence of tampering. The following is a partial list
of procedures. Check the PCI website for the latest best practices.
i. Exterior should show no evidence of cutting or disassembly
ii. No evidence of unusual wires or overlays connected inside
the ICC slot nor on or near the PIN entry area.
iii. No changes to the resistance when inserting or removing a
card from the ICC slot.
Decommissioning
1. To decommission your device, a factory reset will remove the payment
keys in the device. A device may then be provisioned to a new user.
To Next Page
Loading...
Need help?
General
