Elavon Secured P2PE User manual

Secured P2PE –
Point to Point Encryption Instruction
Manual (PIM)
Tetra Version 1.14
Issued 14 February 2021
Elavon FinancialServicesDAC.Registered in Ireland–Number418442.
Registered Office: Building8, Cherrywood BusinessPark, Loughlinstown, Co. Dublin,D18 W319, Ireland.
Elavon FinancialServicesDAC,trading asElavon Merchant Services, isregulated bythe CentralBankof Ireland.
Elavon FinancialServicesDAC. Registered in Irelandwith CompaniesRegistrationOffice. The liabilityof thememberislimited.
United Kingdombranch registered inEngland andWalesunderthe numberBR022122.
Elavon FinancialServicesDAC,trading asElavon Merchant Services, isauthorised and regulated by the CentralBankof
Ireland. Authorised bythe PrudentialRegulationAuthorityandwith deemed variationof permission. Subject to regulationby the
FinancialConduct Authorityand limitedregulationby the PrudentialRegulation Authority. Detailsof the TemporaryPermissions
Regime,which allowsEEA-based firmsto operate inthe UK fora limitedperiod whileseeking fullauthorisation, are availableon
the Financial Conduct Authority’s website.

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 2
RevisionHistory
Version
Date
Author
Comments
1
29.03.2019
Stephen
McLaughlin
Draft document for review
1.1
07.05.2019
Stephen
McLaughlin
Updated with Issue Date and Version History
as per PCI Council AQM Request
1.12
19.08.2019
Stephen
McLaughlin
Updated with Changes to facilitate access to
new and emerging markets
1.13
02.10.2019
Stephen
McLaughlin
Updated Application Version Numbers for
Tetra 5 Release
1.14
14.02.2021
KarlRodgers
Updated Application Version Numbers for
Tetra 20.1 Release

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 3
1. P2PE Solution Information and Solution Provider Contact Details
1.1 P2PE Solution Information
Solutionname:
Secured P2PE
Solutionreference numberperPCISSC
website:
2018-01201.001
1.2 Solution Provider Contact Information
Companyname:
Elavon FinancialServicesDAC
Companyaddress:
IDABusinessPark,Ballynattin,Arklow,Co.Wicklow,Ireland
CompanyURL:
www.elavon.ie
Contactname:
Patrick Doyle
Contactphone number:
[phone]
Contacte-mail address:
[e-mail]
P2PEand PCI DSS
Merchants using this P2PE Solution maybe required to validate PCI DSS compliance and should be
aware oftheir applicable PCIDSS requirements. Merchants should contact their acquirer orpayment
brands to determine their PCI DSS validation requirements.
2. Approved POI Devices,Applications/Software, and the MerchantInventory
2.1 POI Device Details
The following information lists the details ofthe PCI-approved POIdevices approved for use in this P2PE
solution.
Note all POI device information can be verified by visiting:
https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php
POI devicevendor:
Ingenico
POI device model name andnumber:
Ingenico, Desk/5000
Hardwareversion#(s):
DES50BB
Firmware version #(s):
820547v01.xx,820548v02.xx(OP),820549v01.xx(SREDOnGuard
FPE)
PCI PTS Approval #(s):
4-20317
POI devicevendor:
Ingenico
POI device model name andnumber:
MOVE/5000

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 4
Hardwareversion#(s):
MOV50BB
Firmware version #(s):
820547v01.xx,820548v02.xx(OP),820549v01.xx(SREDOnGuard
FPE)
PCI PTS Approval #(s):
4-20316
POI devicevendor:
Ingenico
POI device model name andnumber:
LANE/3000
Hardwareversion#(s):
LAN30EA
Firmware version #(s):
820547v01.xx,820548v02.xx(OP),820549v01.xx(SRED OnGuard
FPE)
PCI PTS Approval #(s):
4-30310
2.2 POI Software/application Details
The following information lists the details ofall software/applications(both P2PE applications and P2PE
non-payment software) on POIdevices used in this P2PE solution.
Note that all applications with access to clear-text accountdata must be reviewed according to Domain 2
and are included in the P2PE solutionlisting. These applications may also be optionally included in the
PCI P2PE listof ValidatedP2PEApplicationslist atvendororsolutionproviderdiscretion.
Application
vendor, name
and version #
POI
device
vendor
POI device
model
name(s)
and
number:
POI Device Hardware &
Firmware Version #
Is
application
PCI listed?
(Y/N)
Does application
have access to
clear-text
account data
(Y/N)
Ingenico
RA1 20.0x
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
Y
Y
Ingenico
EN1.22.01c
Ingenico
Desk/5000
Desk/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 5
Ingenico
EFT EN2.23.01c
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
DCC EN3.19.01c
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
TaxFree
EN4.18.01a
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
EN5.14.01b
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
EN6.21.01c
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
N
N

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 6
820547v01.xx, 820548v02.xx
820549v01.xx
Ingenico
MTU EN7.18.01b
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
EN8.14.01b
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
EN9.17.01b
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
ENA.18.01c
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
ENF.15.01b
Ingenico
Desk/5000
Move/5000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
N
N

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 7
Lane/3000
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
Ingenico
EV1.11.01b
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico
EV2.18.01a
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N
Ingenico OS
Version
0387
Ingenico
Desk/5000
Move/5000
Lane/3000
DES50BB
820547v01.xx, 820548v02.xx
820549v01.xx
MOV50BB
820547v01.xx, 820548v02.xx
820549v01.xx
LAN30EA
820547v01.xx, 820548v02.xx
820549v01.xx
N
N

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 8
2.3 POI Inventory & Monitoring
All POI devices must be documented via inventory control and monitoring procedures, including
device status (deployed, awaitingdeployment, undergoing repairorotherwise not in use, orin
transit).
This inventory must be performed annually, at a minimum.
Any variances in inventory, including missing or substituted POI devices, must be reported to
Elavon via the contact information detailed in the section below
Sample inventory table belowis for illustrative purposes only. The actual inventory should be
captured and maintained by the merchant in an external document.
Itis a key requirement for you to maintain an inventoryof all applicable Point of Interaction (POI) devices in orderto
be compliant with PCI P2PE requirements. Inventorymanagement must track the necessary details of the POI device
(detailed below) as well as the up to date status of all devices , in scope for P2PE.
Designated P2PE Role
We recommend that you designate a job role or person responsible for maintaining the POI device inventory and
inspection at eachapplicable site, where the P2PE solution devices are deployed. This person(s)will also be contacted
byElavonwith anyimportant updates around their P2PE solution, including anyupdatesto the P2PE InstructionManual
(PIM) and any changes to your P2PE solution due to changes of P2PE requirements.
POI Inventory
You must define suitable POI inventorycontrols andmonitoring procedures that fit with your businessfor trackingthe
status of all P2PE devices.
The follow items must be considered;
Ensure the inventoryis updated when changes are made, by latest, by the end of the next working day
Create a list of personnel authorised to access the POI devices andmaintain the inventory andensure this is
updated, at least once per annum.
When an authorised person’s employment status has changed (such as moving job roles or leaving the
company) you must ensure that the list is updated immediately as well as ensuring that any keys etc. the
person may have should be returned
Limit access to the inventory & POI devices to authorised personnel only
Conduct a full audit of the inventory every year
Appendix A contains a Sample Inventory Table showing the fields that are required for inventory
management. The fields in the Sample InventoryTable inAppendix A show the information that is required
to be maintained for inventory management. The POI inventory must be captured and maintained in a
separate document (with access granted onlyto authorised users). If youchoseto create yourown document
you must include all fields in the Sample Inventory table
oIn the Device Status column please use one ofthe below labels to record the up to date status ofthe
device.
“Awaiting deployment”
“Live”
“Returned to Elavon” Or “Not In Use”
“In transit (record location as planned destination)”*
“Decommissioned”

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 9
“Anomaly detected”
“Secured Storage” – Awaiting deployment from Merchant’s/3rd Party Service Provider
Secure Storage Facility/Container
“Faulty – Not in Use” – Awaiting return from Merchant’s/ 3rd PartyService Provider Secure
Storage Facility/Container
You will be able to identify the POI device by details on the device itself on. The model number is located near the
screen ofthe POI device and the serial number is located on a silver sticker on the underside of the devices
If you have a POI device with a separate PIN Pad (Desk/5000 with Lane/3000) both the POI device (Desk/5000) &
separate PINPad (Lane/3000) will need to be logged onthe Inventory, separately. You must ensure that yourinventory
is updated to track any change in status for any POI device as they occur, this includes, but is not limited to, new
installations, removal from sites, hardware replacements and devices that are no longer in use.
*Please refer to Section 4 with regards to transportation of devices
Annual POI Inspection
Full POI device inventories must be completed, at least once per annum. Duringthis process you must investigate all
the POI devices checking foranyevidence of unauthorised variances to your inventoryreport, anysigns of tampering
or unauthorised POI devices.
If you do detect any tampering or an unauthorised POI device please report this to Elavon on the below details:
IRL (including Northern Ireland) –1850202120 (option 1)
UK –0345 850 0195 (option 1)
POL - 22 306 03 16 (option 1)
Storage
AnyPOI devicesthat are not in use must be storedin a securedarea or a secured container with restricted access, with
access onlyallowedto authorised users. Youmust create and maintaina log to track whohas access to the POI devices.
Please also note that these devices must be recorded in the Inventory table as describe in the POI Inventory section
above.
Securedareas must be monitored at all times, please refer to the ‘PCI Best Practise Guide’for more information as per
Section 3.2
Check POI Device Software Versions
Once your POI device(s) has been set up please check the software versions of the POI device to ensure they match
those that are detailed in this document.
Serial Number is on the underside of the POI device and labelled ‘Serial No.’

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 10
To check the software version on the Desk/5000 and Move/5000 please follow the steps below:
Press the Menu button on the POI device
Use the touch screen to highlight ‘Tests’ and tap or press Enter
Select ‘Printer’ and tap or press Enter
Select ‘Receipts’ and tap or press Enter
Select ‘Short’ and tap or press Enter
This will print off a list of the software components, please check these against those listed in Section 2.2 of this
document.
To check the software version on the Lane/3000 as master connected to ECR/Smartlinkplease followthe steps below:
Press the Menu button on the POI device
Use the arrow keys to highlight ‘Tests’ and press Enter
Select ‘Printer’ and press Enter
Select ‘Receipts’ and press Enter
Select ‘Short’ and press Enter
This will print off a list of the software components, please check these against those listed in Section 2.2 of this
document.
Do not use any device until you have verifiedthe software version. If younotice any variances inthis software please
report this to Elavon immediately
IRL (including Northern Ireland) –1850202120 (option 1)
UK –0345 850 0195 (option 1)
POL - 22 306 03 16 (option 1)
Sample Inventory Table
We have provided you a Sample Inventory Table (Appendix A) which covers the minimumrequirement that you could
use for monitoring purposes, if you do not chose to create your own monitoring table. To help with completing the
table we have provided examples of what information is required:
Device Vendor –This will be Elavon, unless you have P2PE devices provided by another P2PE vendor
Device Model name and Number –you can find the details of the device via the following items
oOn the device itself, normally just above the screen on the device
oOn the email received from our Fulfilment house (see section 4.2)
oYou can also compare the devices against the POI device images in section 3.1 below
Device Location –this willbe where you have placedthe devices in your location. Ifthe devices have not yet
been deployed you should still include the location of where the device is stored
Device Status –this must be the current status of the device using the below headings
Awaiting deployment –device has not yet been installed
Live –device deployed in location and is in use
Returned to Elavon/Not In Use –device either has been sent back to Elavon (such as a
replacement) or is currently not in use
In transit (record location as planned destination)* - Device is being transported to a
different location
Decommissioned –device has been removed from service

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 11
Anomaly Detected –Device suspected of being tampered with. These devices should be
removed from service and reported to Elavon immediately as per Section 6.1
Serial Number of Unique Identifier –This is the serial number ofeach device deployed forSecuredP2PE. You
can find the serial number of the device in a number of ways
oSerial number can be found on the underside of the device, as per the table below
oOn the email sent to you by our Fulfilment house
Model Numbers
You can findthe model numberof each POI device on the front on the device at the bottomof the screen, above the
first line of keyboard button
Move/5000
Desk/5000

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 12
Lane/3000
Serial Numbers
Move/5000
Desk/5000
Lane/3000

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 13
3. POI Device Installation Instructions
Do not connect non-approved cardholder data capture devices.
The P2PEsolution is approved toinclude specificPCI-approvedPOI devices.Onlythese devicesdenoted
aboveintable2.1are allowedforcardholderdatacapture.
If a merchant’s PCI-approvedPOI device isconnected toadata capture mechanism thatisnotPCI
approved,(forexample,ifa PCI-approvedSCR wasconnectedto akeypadthatwas notPCI-approved):
The useofsuchmechanismstocollectPCIpayment-card datacouldmeanthatmore PCIDSS
requirements arenow applicableforthemerchant.
Only P2PEapproved capture mechanisms as designated on PCI’s list of Validated P2PE Solutions and
in thePIM canbe used.
Do not change or attempt to change device configurationsor settings.
Changing or attempting to change device configurationsor settingswill invalidate the PCI-
approvedP2PEsolution initsentirety. Examplesinclude,but are not limited to:
Attempting to enable any device interfaces or data-capture mechanisms that were disabled on the
P2PE solution POIdevice
Attempting to alter security configurations or authentication controls
Physically opening the device
Attempting to install applications onto the device

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 14
3.1 Installation and connection instructions
Installation
Elavon willassist you with the set- up of your POI devices, either via an engineer visit or with support byour telephony
team.
Your Secured P2PE devices willbe deployed to you either already pre -configured or willbe set up on site byour qualified
engineer. You will be contacted by our chosen fulfilment house, see below, before your devices are dispatched, to
confirm the delivery date and will advise whether these devices are pre -configured or not.
Fulfilment Houses
UK - UK Paper Rolls
Ireland/UK/Poland - Lantec
Pre-Configured
If your devices are dispatched to you pre-configured, these would have already been fully set up by our chosen
fulfilment house before being delivered to your chosen location. When the devices have been delivered, Elavon’s
technical helpdeskwillcontact you within24 hours ofdeliveryand will advise of the set-upprocess, ifrequired, you can
contact the helpdeskto assist with the set-upof yourdevice without waiting fora call and talkyou through the on-site
set up process. We recommend that you leave your devices in its original tamperevident packaging in a secure location
until you are ready for your devices to be set up
Engineer Install
For this method your devices willbe delivered to you in the original tamper evident packaging and the engineer will
install the devices whilst on site
For detailed installationand connection instructions please visit www.Elavon.co.uk/resource-centre orcontact the
Elavon helpdesk on the numbers below:
IRL (includingNorthern Ireland) –1850202120 (option 1)
UK –0345 850 0195 (option 1)
POL - 22 306 03 16 (option 1)

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 15
Device Images
Model
Image
Desk/5000
Move/5000
Lane/3000
Note: OnlyPCI-approvedPOI deviceslistedinthePIMareallowedfor use in the P2PE solutionforaccount
datacapture.
Physically secure POI devicesin your possession, includingdevices:
Awaiting deployment
Returned to Elavon or otherwise Not in Use
Waiting transportbetween sites/locations.

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 16
3.2 Guidance for selecting appropriate locationsfor deployed devices
Devices must be deployed in appropriate locations where there is no risk of these being accessed by unauthorised
users. Plan where to put your POI devices andhowto keep them secure, you must perform checks on devices at regular
intervals to ensure these have not been tampered with.
Items to be Considered:
Monitor and control public access to POI devices so that only the applicable part of the device (such as the
PIN Pad) is available to the customer to complete the payment
Place devices in areasso theycanbe monitoredbyauthorised personalto ensure that the regular checks can
be performed as needed
Locate devices in environments that reducing risk of unauthorised access with considerations for ensuring
there is adequate lighting, appropriate access paths to the devices to prevent unauthorised personnel from
tampering with the device and there is visible security measures such as CCTV
Your devices are designedto only be used in attendedenvironment and must never be used in an Unattended
environment
Devices must be monitored at all times
Positionthe device so there is no method of recording or viewing the customer PIN being entered
Portable (Move/5000)or mobile devices should be assigned to a member ofstaffwho will be responsible for
the device during their allocatedtime. This personwill be responsible for ensuringthe POI device(s) are kept
safe whilst in their custody and are not left where they can be tampered with by unauthorised users
Devices must be placed in a well ventilated are ona flat surface and should be away from direct sunlight
Where feasible, use lockingdevicesto secure your POI devicesin place aswell asusing, separately purchased,
poles to mount the customer facing PIN pad.
oHaving a pole will allow the customer to swivel the PIN pad to prevent risk of spying
oPIN Pad poles can be purchased from various providers, please ensure any pole purchased is
compatible with your device
oElavon customers have the optionto purchase consumable related items from UKPR and can place
orders via phone or email, UKPR detailsbelow:
UK/IRE Sales: [e-mail] or [phone]
POLAND Sales : [e-mail] or [phone]
Devices not in use should be storedin a secure locationwith restricted access to authorised users only
For more information, please refer to, PCI Best Practise Guide V3.0 found onthe www.pcisecuritystandards.org website
3.3 Guidance for physically securingdeployed devicesto prevent unauthorized removalor
substitution
You should physicallysecure your POI devicesto prevent unauthorised removal or substitution whilst devices are in
use.
For countertop devices(Desk/5000 and Lane/3000);
Mount and secure the POI devicesandcables with locking stands, cable trays, andother securing mechanisms
such as space poles.
For the Move/5000 (with 3G/WiFi/BT) devices, which cannot be physically secured, you must consider:

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 17
Store the devices in a securedlocationwith restrictedaccess whennot inuse
Assign the device to authorised personal whenin use
Ensure the devicesare monitored at all timesandthat these are not left unattended at anytime
Ensure that the POI devices are signed in andout
Devices that are not in use should also be storedsecurelywith restricted access. This includes devices that are
Awaitingdeployment
Undergoing repair
Awaitingto be returned toElavon
You must also verify anycouriers or engineers when they aredeliveringof POI devices, collecting of POI devices no
longer required or attendingyour site to complete repairs to your POI devices. Including;
Verify the identity of the courier/engineer
Refuse accessto anyunexpected engineers
Escort and monitored authorised engineers at all times
4. POI Device Transit
4.1 Instructionsfor securing POI devicesintended for, andduring,transit
Elavon willarrange for POI devices to be dispatched to your chosen location(s) in a secured manner, by our chosen
fulfilment house, see below. Elavonwill alsoarrange for the collectionof anyPOI devices that need to be returned to
Elavon.
Fulfilment Houses
UK - UK Paper Rolls
Ireland/UK/Poland - Lantec
You must not relocate the POI device to anyother site(s) yourself. If you do need to relocate a device, please contact
us on the numbers below whowill work with you on your requirements anddiscussthe appropriate next steps:
IRL (includingNorthern Ireland) –1850202120 (option 1)
UK–0345 850 0195 (option 1)
POL - 22 306 03 16 (option1)
If you have a faulty POI device or require a hardware replacement, please contact the Elavon helpdeskon the
numbers below
IRL –1850202120 (Option1)
UK –0345 850 0195 (Option1)
POL –22 306 03 16 (Option1)
If you need to return a POI device to Elavon, please contact us on the number above to arrange collection. A courier
from our fulfilment house (see Fulfilment Houses above) will be arranged to attendyour site to collect your device(s).
Please ensure the devices are packaged readyfor collection. When the courier attends the site please confirm their
identity before handing over yourdevices to the courier.

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 18
4.2 Instructionsfor ensuring POI devicesoriginate from,and are only shipped to,trusted
sites/locations
Elavon and its chosen partners will ensure that allPOI devices are not tampered with or compromised before these are
shipped to you in a secured manner.
There are 3 methods of delivery applicable to the P2PE POI devices. These are:
Engineer - On Site Configuration
Engineer - Pre-Configured
Courier Delivery
Elavon will work with you before the devices are deployed to confirm the most suitable method for
POI device deployment.
The pages belowdetail the processes foreach deliverytype
Engineer - On Site Configuration
If you are having an Engineer-On Site Configuration delivery the engineer will deliver the POI devices to your chosen
location(s) and will ens ure the POI devices are configured, on site, at the time of delivery.
Prior to the POI devicesbeing dispatched, you will receive an email from our assigned fulfilment house confirming:
Engineer visit
Date of delivery
The details of your devices including serial number(s) and POI device model(s)
Details ofthe tamper evident packagingandwhat to check toensure the device hasnot been tampered with
during transit
The email will come from the below addresses, where applicable:
UK - [e-mail]
UK - [e-mail]
Ireland - [e-mail]
Poland - [e-mail]
When the engineer arrives on site, you should check the details of the email, receivedfrom our fulfilmenthouse, against
the serial number of the device, located on the box and check the box for any tamper evidence. Once the checks are
completed, and you are satisfied there is no evidence of tampering, youcan instruct the engineer to proceed with the
installation.
If the serial numbers do not match or there is evidence of tampering you must reject the device and inform Elavon
immediately via the numbers below
IRL –1850202120 (Option 1)
UK –0345 850 0195 (Option 1)
POL –22 306 03 16 (Option 1)
On-Site Replacement –If needed, the engineer may issue you a replacement device whilst on site. If this is the case
they will arrange for this and you will receive a further email, whilst the engineer is on site, confirming the details of
the replacementPOI device. Youmust follow the steps previouslyoutlinedto checkthe serial numbers ofthe POI device
match as well as checking or evidence of tamper

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 19
Engineer Pre-Configured
If you are having the ‘Engineer Pre-Configured’deployment method, your POI devices will be pre-configured by our
engineers, in a secured manner, prior to attending your site. In this instance you will be informed of this via email
confirming that the device has been pre-configured.
Before the POI devices are dispatched to your site(s) the engineer will remove the device from its original packaging
and will configure your POI devices(s). Once configured, the POI devices(s) will be placed within a Tamper Evident
Envelope (TEE) and then in its original box ready for dispatch
You will receive an email from our assigned fulfilment house, confirming:
Engineer visit to your site
Date of delivery
The serial number & model details of your device(s)
The Serial numbers of the TEE
The emails will come from the following email addresses:
UK - [e-mail]
UK - [e-mail]
Ireland - [e-mail]
Poland - [e-mail]
Upon arrival you should check;
The serial number of the box(s) match the serial number(s)detailed in the email you have previouslyreceived
The serialnumber of the TEE match the serial number(s)provided in the email fromthe fulfilment house, as
well as ensuring that the TEE has not been opened or torn upon arrival
The serial number of the POI device, within the TEE, matches the serial number detailed in the email from
received
Ensure that the POI device does not show anysigns oftampering suchas unexpected cabling exposed panels.
Check for broken security seals and cracks around the device as well as inspecting for any other type of
damage or tampering.
When you are satisfied there is no evidence of tampering and that the serial numbers match, you can authorise the
engineer to proceed with the on-site set up.
Please note the device’s original packaging, will alreadybe openedin line with the above process, this will be acceptable
as long as the TEE, which is inside the box, does not show any signs of tampering
If the serial numbers of the devices donot match that the ones listed in the deployment email, or if you identifyany
signs oftamperingdonot accept the device and inform the engineerimmediately. In some casesthe engineer maybe
able to provide you with a replacement device at the time of delivery, if not that a replacement device will need to be
arranged via the Elavon helpdesk
On-Site Replacement –If needed the engineer may issue you a replacement device whilst on site. If this is the case
they will arrange for this and you will receive a further email, whilst the engineer is on site, confirming the details of
the replacementPOI device. Youmust follow the steps previously outlined tocheckthe serial numbers ofthe POI device
match as well as checking or evidence of tamper
Courier Delivery
For the ‘Courier Delivery’ deployment method, the POI devices will be delivered to you pre-configured. In order to
complete the pre-configuration, our chosen fulfilment house will configure the device at the fulfilment centre, place
this in a Tamper Evident Envelope (TEE) and then place the configured device inside its original packaging
You will receive an email which will confirm;

P2PE Instruction Manual for PCI P2PE v2.0
© 2021 Elavon Financial Services DAC PIM Page 20
Courier visit to site
Date of the visit
Serial number of device(s)
Serial number of TEE
The emails will come from the following email addresses:
UK - [e-mail]
UK - [e-mail]
Ireland - [e-mail]
Poland - [e-mail]
Upon arrival you will be presented with the devices for inspection. You must inspect the packaging and devices
checking:
The serial number of the device on the box matches the serial number detailed in the email you have
previously received
The serial numberof the TEE matches the serial number listed in the previous email as well as ensuringthat
the TEE has not been opened or torn upon arrival
The serial numberof the device within the TEE matches the serial number detailed in the emailreceived as
well as checkingthat the device does notshow anysigns of tampering such as unexpectedcabling exposed
panels. You should look for broken securityseals andcracks around the device as well as inspecting forany
other type of damage or tampering.
Once confirmed you are satisfied there is no evidence of tampering andthat the serial numbers match, you can accept
the delivery.
Please note the device’s original packaging, will alreadybe opened in line with the above process, thiswill be acceptable
as long as the TEE, which is inside the box, does not show any signs of tampering
If the serial numbers of the devices do not match that the ones listed in the deployment email, or if you identify any
signs of tampering do not acceptthe device and inform the courier immediately. Please contact Elavon’s helpdesk on
the numbers below to arrange for a replacement device
IRL –1850202120 (Option 1)
UK –0345 850 0195 (Option 1)
POL –22 306 03 16 (Option 1)
On-Site Replacement –If needed, the courier mayissue youa replacement device whilst onsite. Ifthisis the case they
will arrange for this and you will receive a further email, whilst the engineer is on site, confirming the details of the
replacement POI device. Youmust follow the steps previouslyoutlined to check the serial numbers of the POI device
match as well as checking for evidence of tamper.
Example Email
Below is an example of the email you will receive from our fulfilment house for POI device deployment
“Dear Valued Customer,
We’re delighted to confirm that an engineer will be delivering and installing your Point to Point Encryption (P2PE) device(s) on XX-
XX-XXXX
Attached to this email, you will find a spreadsheet containing the key details of your device including the model and serial number
of your device(s).
Please ensure you read this email before the engineer arrives because you will need to follow these instructions for each individual
device before it can be installed.
As part of the P2PE validation process, set out in your P2PE Instruction Manual (PIM), andto ensure your device is secure upon
arrival, there are some mandatory things you will need to check when the device arrives and before it is installed: