EMV Chip/Pin Update – 08/25/2015
EMV Chip/Pin Update – 08/25/2015
EMV (Europay, MasterCard, Visa) is the standard for electronic payment cards with a smart card processor embedded in the card. Among it’s features are:
- Card holder data and payment application are stored on the processors system.
- PIN based or Signature based security.
- Requires EMV Card Reading Hardware.
- Credit Card remains in an EMV reader for the entire duration of the a payment transaction.
What are the Benefits of EMV?
- Because of the smart card processor embedded in the payment card, and the hardware required to read the card, creation of fraudulent cards is much less likely than with other card types.
- PIN based implementations have a far less likelihood of being fraudulent.
- Has about the same speed as a Pin Debit Card.
- Consumer retains possession of the card at all times.
What are the limitations of EMV?
- Does not encrypt personal account data, so it will be up to each POS provider and/or EMV device manufacturer to come up with standards for encryption and retention.
What is the current status of the EMV roll-out in the U.S.?
As of the end of the first quarter of 2015, many financial institutions are starting to mail out the new EMV cards to their customer base.
With the industry goal currently being that all Retail merchants should be able to start supporting the full feature use of EMV Chip/Pin cards there is some rush to both compliant hardware and software in place on time. However, this demand has created some backlogs on getting compliant Pin Pads ordered and installed. This means that if you want this equipment in place by the last quarter of 2015, you need to be placing your equipment orders in now.
What does this mean for NCR Counterpoint installations?
- One of the requirements to take advantage of the EMV capabilities inherent in the Ingenico iSC250is a Retail Base Application (RBA) firmware version which requires and upgrade to v14.0.6.
- Regardless of a merchant’s plans to use EMV, if the upcoming NCR Counterpoint Service Pack (8.4.6.13) is installed, it will require that all existing iSC250 devices be updated to v14.0.6 firmware. This applies to all devices in the field. At the time that this is done, a software configuration change from using the "Lacy Device Framework" to the "New Device Framework".
- This applies to all merchants, whether they process cards through CPGateway or NCR Secure Pay and regardless of whether of not the merchant plans to enable the use of the EMV feature.
- If the firmware update is not done prior to the service pack update, the device will not be operable in NCR Counterpoint until the firmware update is completed. It is strongly suggested the devices be updated and verified to work for both Credit Cards and Debit Cards (if applicable) prior to upgrading to the 8.4.6.13 Service Pack.
- If using P2PE encryption, verify on the NCR Secure Pay Settlement portal that transactions show ‘Yes’ in the “P2PE?” column after the firmware is updated on the device, and before updating the Service Pack.
- The steps are different for P2PE and non-P2PE devices, so it needs to be confirmed if the device is P2PE or not prior to upgrading the firmware. Running the wrong updated procedure could permanently damage the unit and may require an RMA.
Please contact the CCS Sales Department for more detailed information on the above process.
– John
