Page 100
Copyright © 2019 Ingenico
Security of the terminal
This device fulfils current applicable PCI PTS security requirements. Upon receipt
of the terminal you should check for signs of tampering of the equipment. It is
strongly advised that these checks are performed regularly after receipt. Check,
for example: that the keypad is firmly in place; that there is no evidence of unusual
wires that have been connected to any ports on the terminal or associated
equipment, the chip card reader or any other part of the terminal. Such checks
would provide warning of any unauthorised modifications to the terminal, and
other suspicious behaviour of individuals that have access to your terminal. The
terminal detects any “tampered state”. In this state the terminal will repeatedly
flash the message ”Irruption!” and further use of the terminal will not be possible.
If the “Irruption!” message is observed, contact the terminal helpdesk
immediately.
It is strongly advised that privileged access to the terminal is only granted to staff
that have been independently verified as being trustworthy.
The terminal must never be put in or left at a location where it could be stolen or
replaced by another device.
Fixed installation
If the device is to be used in a situation where it is not possible for the cardholder
to pick up and shield their PIN entry themselves, the device may be used without
PIN shield, but it must be installed in the following manner:
a) The device must be angled at 45 or more, so that oversight of the PIN entry from
the rear of the device is not possible.
b) The device must either be fitted in a swivel stand, so that the customer can
position the device in the best angle to prevent oversight or the device must be
fixed in the best possible position to prevent oversight if such a generic position
exists in the specific environment to which the device is installed.
c) The device environment must be accompanied with conspicuous notices and
educational material which informs the customer to shield their PIN during PIN
entry.
d) The device must be deployed so that oversight from other customers, either in
different payment lanes, or in other areas of the shopping environment, is
prevented. This may be achieved through the placement of the lanes and device,
so that the customer is automatically positioned between the device keypad and
other customers. Alternatively, it may be achieved by the environment in which
the device is installed, so that the checkout itself shields the PIN entry process.
e) The terminal is exclusively made for indoor use.