PDA

View Full Version : Tsys compliant


Joselyn
09-17-2008, 06:55 AM
I am working on an engagement trying to find out if a third party device/app is compliant - it is a change machine. I could not find them on Visa's site but they said they were rated compliant by Tsys - here is the link:
http://www.tsysacquiring.com/partner_program/resource_center/docs/archived_solutions/Dial.pdf

They also said:
"To get the approval we had to do a lot of testing of the system with Vital technicians at that time to verify that it worked correctly and handled errors and exceptions properly. Afterwards we were certified to use our system with credit card processors and have been doing so for seven years.
There has not been a need for me to do any further work except making sure that our embedded software meets the guidelines that now and then are issued by Vital/Tsys."

I haven;t run into this before and don't know what to make of it.

jbhall56
01-04-2009, 07:55 AM
A change machine?

The change machines that I have seen require paper currency and then covert the currency to either coinage or a different currency. No credit cards are involved. So, I'm at a loss as to what the issue is here.

Only ATMs take in credit/debit cards and dispense cash. ATMs have to meet PCI PED requirements as well as other regulatory requirements in the US. Compliance with PABP/PA-DSS of the ATM software is up to the software vendor. However, using PA-DSS certified software is not a pre-requisite of being PCI DSS compliant.

andrewj
01-04-2009, 09:49 PM
ATMs have to meet PCI PED requirements

To be clear, PCI SSC do not have any standards for an entire ATM at this time. The 'Encrypting PIN Pad' (EPP) of the ATM - the keypad into which you type your PIN - is covered by the PCI EPP requirements, but no ATM requirements have been published yet (and probably won't be for awhile).