background image

P2PE  Instruction Manual for PCI P2PE  v2.0 
© 2021 

Elavon Financial Services DAC

 

PIM Page  20

 

 

Couri er vi s i t to s i te  

 

Da te of the vi s i t 

 

Seri a l  number of devi ce(s ) 

 

Seri a l  number of TEE 

The ema i l s  wi l l  come from the fol l owi ng ema i l  a ddres s es : 

 

UK

 

[email protected]

  

 

UK -

 

[email protected]

  

 

Ireland 

[email protected]  

 

Pol a nd 

[email protected]

  

Upon a rri val you wi ll be presented wi th the devices for i nspection. You must i nspect the pa ckaging a nd devices 
checki ng: 

 

The s erial number of the device on the box ma tches the s erial number detailed i n the email you have 
previ ous l y recei ved   

 

The s erial number of the TEE matches the serial number listed in the previous email as well as ensuring that 
the TEE ha s  not been opened or torn upon a rri va l  

 

The s erial number of the device within the TEE matches the s erial number detailed i n the email received as 
wel l as checking that the device does not s how a ny s igns of ta mpering s uch a s unexpected cabling exposed 
pa nels. You should l ook for broken s ecurity s eals and cra cks around the device as well as i nspecting for any 
other type of da ma ge or ta mperi ng.  

Once confirmed you are satisfied there is no evidence of tampering and that the s erial numbers match, you can accept 
the del i very. 

Please note the device’s original packaging, will already be opened in line with the above process, this will be acceptable 
a s  l ong a s  the TEE, whi ch i s  i ns i de the box, does  not s how a ny s i gns  of ta mperi ng  

If the serial numbers of the devices do not match that the ones listed in the deployment email, or if you identify any 
s i gns of tampering do not accept the device and i nform the courier i mmediately. Pl ease contact El avon’s helpdesk on 
the numbers  bel ow to a rra nge for a  repl a cement devi ce  

 

IRL – 1850202120 (Opti on 1) 

 

UK – 0345 850 0195 (Opti on 1) 

 

POL – 22 306 03 16 (Opti on 1) 

On-Site Replacement – If needed, the courier may issue you a  replacement device whilst on site. If this is the case they 
wi l l arrange for this and you will receive a further email, whilst the engineer is on site, confirming the details of the 
repl acement POI device. You must follow the s teps previously outlined to check the s erial numbers of the POI device 
ma tch a s  wel l  a s  checki ng for evi dence of ta mper. 

Example  Email 

Bel ow i s  a n exa mpl e of the ema i l  you wi l l  recei ve from our ful fi l ment hous e  for POI devi ce depl oyment 

“Dear Valued Customer, 
 
We’re delighted  to confirm that an engineer will be delivering and installing your Point  to Point Encryption  (P2PE) device(s) on XX-
XX-XXXX  

 

Attached to this email, you will find a spreadsheet containing  the key details of your device including  the model  and serial number 
of your device(s). 

Please ensure you read this email before  the engineer  arrives because you will  need to follow  these instructions  for each individual 
device before it can be installed. 

As part of the P2PE validation process, set out in  your P2PE Instruction  Manual (PIM), and to ensure your device is secure upon 
arrival, there  are some mandatory things you will need to check when the device arrives and before it is installed:  

Содержание Secured P2PE

Страница 1: ...nOffice The liability of themember islimited United Kingdom branch registered inEngland andWalesunder the number BR022122 Elavon Financial ServicesDAC trading asElavon Merchant Services isauthorised a...

Страница 2: ...1 1 07 05 2019 Stephen McLaughlin Updated with Issue Date and Version History as per PCI Council AQM Request 1 12 19 08 2019 Stephen McLaughlin Updated with Changes to facilitate access to new and eme...

Страница 3: ...I DSS compliance and should be aware of their applicable PCI DSS requirements Merchants should contact their acquirer or payment brands to determine their PCI DSS validation requirements 2 Approved PO...

Страница 4: ...text account data must be reviewed according to Domain 2 and are included in the P2PE solutionlisting These applications may also be optionally included in the PCI P2PE list of Validated P2PE Applicat...

Страница 5: ...549v01 xx LAN30EA 820547v01 xx 820548v02 xx 820549v01 xx N N Ingenico Tax Free EN4 18 01a Ingenico Desk 5000 Move 5000 Lane 3000 DES50BB 820547v01 xx 820548v02 xx 820549v01 xx MOV50BB 820547v01 xx 820...

Страница 6: ...2 xx 820549v01 xx MOV50BB 820547v01 xx 820548v02 xx 820549v01 xx LAN30EA 820547v01 xx 820548v02 xx 820549v01 xx N N Ingenico EN9 17 01b Ingenico Desk 5000 Move 5000 Lane 3000 DES50BB 820547v01 xx 8205...

Страница 7: ...B 820547v01 xx 820548v02 xx 820549v01 xx LAN30EA 820547v01 xx 820548v02 xx 820549v01 xx N N Ingenico EV2 18 01a Ingenico Desk 5000 Move 5000 Lane 3000 DES50BB 820547v01 xx 820548v02 xx 820549v01 xx MO...

Страница 8: ...l PIM and any changes to your P2PE solution due to changes of P2PE requirements POI Inventory You must define suitable POI inventorycontrols andmonitoring procedures that fit withyour businessfor trac...

Страница 9: ...es Annual POI Inspection Full POI device inventories must be completed at least once per annum Duringthis process you must investigate all the POI devices checking for anyevidence of unauthorisedvaria...

Страница 10: ...06 03 16 option 1 Sample Inventory Table We have providedyou a Sample Inventory Table Appendix A whichcovers the minimumrequirement that you could use for monitoring purposes if you do not chose to cr...

Страница 11: ...of Unique Identifier This is the serial number ofeachdevice deployedfor SecuredP2PE You can find the serial number of the device in a number of ways o Serial number can be found on the underside of t...

Страница 12: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 12 Lane 3000 Serial Numbers Move 5000 Desk 5000 Lane 3000...

Страница 13: ...ch mechanisms to collectPCIpayment card data could mean thatmore PCIDSS requirements are now applicable for the merchant Only P2PE approved capture mechanisms as designated on PCI s listofValidated P2...

Страница 14: ...y set up by our chosen fulfilment house before being delivered to your chosen location When the devices have been delivered Elavon s technical helpdeskwillcontact youwithin24 hours ofdeliveryand will...

Страница 15: ...sk 5000 Move 5000 Lane 3000 Note Only PCI approved POI devices listed in the PIM are allowed for use in the P2PE solution for account data capture Physically secure POI devicesin your possession inclu...

Страница 16: ...he device during their allocatedtime This personwill be responsible for ensuringthe POI device s are kept safe whilst intheir custody andare not left where they can be tampered with by unauthorised us...

Страница 17: ...nge for POI devicesto be dispatchedto your chosenlocation s ina secured manner byour chosen fulfilment house see below Elavonwill alsoarrange for the collectionof any POI devices that needto be return...

Страница 18: ...s and POI device model s Details ofthe tamper evident packagingandwhat to check toensure the device hasnot beentamperedwith during transit The email will come from the below addresses where applicabl...

Страница 19: ...es not show anysigns oftampering suchas unexpected cabling exposedpanels Check for broken security seals and cracks around the device as well as inspecting for any other type of damage or tampering Wh...

Страница 20: ...any signs of tampering If the serial numbers of the devices do not match that the ones listed in the deployment email or if you identify any signs of tampering donot acceptthe device andinformthe cour...

Страница 21: ...d with the installation of your new device to enable you to start taking payments Kind regards Please note some of the elements of the email will verifydepending onthe delivery method of your P2PE dev...

Страница 22: ...uctions for physically inspecting POI devicesand preventing skimming including instructionsand contact detailsfor reporting any suspiciousactivity Additional guidancefor skimmingprevention on POI devi...

Страница 23: ...ne to measure against when the POI devices are weighed again Post Deployment Once deployed you must perform regular checks onall devicesas per below Perform visual inspections weeklyin high traffic ar...

Страница 24: ...erial number in our emailandthe serialnumber on the box If the device is displayingthe full card numbers on the customer receipts Please alsoconsider anyunauthorisedaccess to the POI devices including...

Страница 25: ...Contact Elavon on the numbers below to report the issue Elavonwillworkwith youto reviewthe issue and where needed will arrange for a replacement device STOP USING THE DEVICE IMMEDIATELY DISCONNECT THE...

Страница 26: ...r packaging whichhas tamper evident safeguards please be aware that the outer box will have alreadybeenopened byour secured engineer and the device will be placedwithina sealedTamper Evident Envelope...

Страница 27: ...r of the device beingreplacedas part ofyour Inventoryprocesses Courier Delivery If you identifya faultydevice please report this to the helpdeskonthe number listedbelow If the packaginghas been tamper...

Страница 28: ...site installation If the box or sealhas been tamperedwithor anyof the numbers donotmatch immediatelyinform Elavon on a IRL 1850202120 Option1 b UK 0345 850 0195 Option1 c POL 22 306 03 16 Option1 If...

Страница 29: ...attendsthe site please ensure youconfirm their identityvia their appropriate Identificationbadge before allowingthem access to your POI devices If you are not certainof the identityof the engineer pl...

Страница 30: ...edP2PE agreement please liaise withyour Account Manager Please note that in this instance your devices willneedto be returned to Elavon which we will arrange collection You will also need to work with...

Страница 31: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 31 8 Additional Solution Provider Information Move 5000 Left View Front View Right View Move 5000 on Base...

Страница 32: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 32...

Страница 33: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 33 MBASE 004 IELV Base with Cover Base without Cover...

Страница 34: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 34 Desk 5000 Left View Front View RightView...

Страница 35: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 35 Rear View Casing Closed Rear View Casing Open...

Страница 36: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 36 Lane 3000 Left View Front View Left View...

Страница 37: ...P2PE Instruction Manual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 37...

Страница 38: ...ual for PCI P2PE v2 0 2021 Elavon Financial Services DAC PIM Page 38 9 Appendix A Sample Inventory Table Device vendor Device model name s and number Device Location Device Status Serial Number or oth...

Отзывы: