Why does my CounterPoint Password Keep Expiring?

Why does my CounterPoint Password Keep Expiring?

Because credit card related data is passed through Counterpoint, NCR has been required to update all Counterpoint systems be PCI DSS Compliant.

In previous versions, the use of passwords was optional, allowing merchants to decide whether to require users to enter passwords to log in to CounterPoint. In the latest versions, to better protect sensitive cardholder data, the use of PCI-DSS-compliant passwords is no longer optional for merchants who are processing credit card transactions.

All users must log into CounterPoint with a unique password that meets the minimum PCI DSS requirements for password length and complexity (i.e., passwords must include a combination of letters and numbers).

Passwords are not required for merchants that are not processing credit cards or when CounterPoint is operating in Demo mode.  If a CP Practice company has been set-up, The credit card set-up is updated to be in "Simulate" mode only.  While the software may appear to be  functioning normally, as far as credit cards go, no authorizations are settlements are actually done in this usage mode.

Other password settings including the number of days passwords are valid, the number of unique passwords each user must create before re-using a  particular password, and the number of unsuccessful login attempts
allowed before a user is locked out of CounterPoint must also meet minimum PCI DSS requirements.

Current PCI requirements also include that every user MUST change their existing password every 90 days.

In addition, CounterPoint passwords are now case-sensitive, which strengthens their effectiveness, providing additional security against unauthorized access.

If you are updating from a previous version, your users’ existing passwords will be reset during the update process and each user will be prompted to create a new password the first time the user
logs in to V8.4. or higher.

If you need assistance with managing you password security, please contact the CCS Retail Systems Support Department.

Leave a Reply