Move/3500 PCI PTS Security Policy
Ingenico document - Please check document validity before using
4_Guidance
4_1 Initial Security Inspection
The merchant or acquirer must visually inspect the terminal for sign of tampering when received via
shipping, as it is described in the Installation Guide [8].
It is strongly advised that these checks are also performed on a regular basis after receipt and
installation.
For example, the merchant or acquirer should inspect the terminal to ensure that:
•
There is no evidence of unusual wires that have been connected to any ports of the terminal,
or associated equipment, the chip card reader or any other part of the terminal.
•
There is no shim device in the slot of the ICC acceptor
•
The keypad is firmly in place
•
No warning flashing message is displayed
•
The terminal serial number (on the rear side label) corresponds to the inventory
Such checks would provide warning of any unauthorized modifications to or substitution of the
terminal, or suspicious behavior of individuals that have access to the terminal.
4_2 Installation Guide
An installation guide [8] including the following information is provided with the device:
•
Equipment check list :
−
Device,
−
Cable and connectors,
−
Documents
•
Power and cable connections information,
•
The main characteristics of the device (i.e. temperature, humidity, voltage)
•
Safety recommendations,
•
Security recommendations,
•
Troubleshooting if the device does not work.
4_3 PIN Confidentiality
The device is designed to be used in attended environment.
It’s recommended that the position of the terminal must be in such a way to make cardholder PIN
spying infeasible.
The installation guide [8] provides instructions for the installation and use of the terminal in a secure
manner depending on the device environment.
Further recommendations about the installation of the terminal variants without privacy shield are
specified in the installation guide [8].
NEVER ask the customer to divulge their PIN Code.
With guidance message or logos, indicate to the cardholder to use his hands and/or his body to cover
up the keypad.
The cardholder shall be advised to ensure that he is not being overlooked when entering his PIN code.
To Next Page
Loading...
Need help?
General
