Global Payments Genius Smart P2PE User manual

Genius Smart
P2PETM
P2PE Instruction Manual
Public Use
Doc no: CO-PUB-0101
Version 2.0 - November 17, 2023

Copyright notice
Copyright © 2023 Global Payments, Inc. All rights reserved.
No part of this publication may be reproduced, copied, manipulated, altered, or transmitted in any
form or by any means, electronic or mechanical, including, without limitation, by photocopy,
imaging, or recording, without the express prior written consent in each case of the copyright
owner. The names, trademarks, logos, and service marks displayed in this publication will be
protected by the owner to the fullest extent of the law, and any use without the express prior
written permission of the trademark owner is strictly prohibited. The information contained in this
publication is current when published; however, the publisher reserves the right to update and
modify the specifications or other product information at any time without notice.

Table of contents
Table of contents 3
1. P2PE Solution Information and Solution Provider Contact Details 4
1.1 P2PE Solution Information 4
1.2 Solution Provider Contact Information 4
2. Confirm devices were not tampered with and confirm the identity of any third party personnel 5
2.1 Instructions for ensuring POI devices originate from trusted sites/locations only 5
2.2 Instructions for confirming POI device and packaging were not tampered with, and for establishing
secure, confirmed communications with the solution provider 5
2.3 Instructions to confirm the business need for, and identities of, any third-party personnel claiming
to be support or repair personnel, prior to granting those personnel access to POI devices. 8
3 Approved POI Devices, Applications/Software, and the Merchant Inventory 9
3.1 POI Device Details 9
3.2 POI Software/Application Details 14
3.3 POI Inventory & Monitoring 20
4 POI Device Installation Instructions 22
4.1 Installation and connection instructions 22
4.2 Guidance for selecting appropriate locations for deployed devices 23
4.3 Guidance for physically securing deployed devices to prevent unauthorized removal or
substitution 23
5. POI Device Transit 25
5.1 Instructions for securing POI devices intended for, and during, transit 25
5.2 Instructions for ensuring POI devices are shipped to trusted sites/locations only 25
6 POI Device Tamper & Modification Guidance 26
6.1 Instructions for physically inspecting POI devices and preventing skimming, including instructions
and contact details for reporting any suspicious activity 26
6.2 Instructions for responding to evidence of POI device tampering 30
7 Device Encryption Issues 31
7.1 Instructions for responding to POI device encryption failures 31
8 POI Device Troubleshooting 32
8.1 Instructions for troubleshooting a POI device 32
9 Additional Guidance 33
9.1 Additional Guidance for the Genius Smart P2PE solution 33
9.2 Instructions for how to confirm hardware, firmware, and application versions on POI devices 33
10. Appendix: Checklist for Remote Key Injection 36

1. P2PE Solution Information
and Solution Provider
Contact Details
1.1 P2PE Solution Information
Solution name:
Genius Smart P2PE
Solution reference number per PCI SSC website:
2021.00056.002
1.2 Solution Provider Contact Information
Company name:
Global Payments Direct, Inc.
Company address:
5995 Winward Pkwy, Alpharetta, GA 30005
Company URL:
Contact name:
Contact Center Services
Contact phone number:
(1) [phone]
Contact e-mail address:
P2PE and PCI DSS
Merchants using this P2PE Solution may be required to validate PCI DSS compliance and should be
aware of their applicable PCI DSS requirements. Merchants should contact their acquirer or
payment brands to determine their PCI DSS validation requirements.
5

2. Confirm devices were not
tampered with and confirm the
identity of any third party
personnel
2.1 Instructions for ensuring POI devices originate from trusted
sites/locations only
To confirm that your device was shipped from a trusted location, do the following:
●Check the shipping label to confirm that the device was shipped from one of the following
two secure sites:
○POS Portal, 1627 Main Ave, Sacramento, CA 95838
○POS Portal, 1920 Watterson Trail # A, Louisville, KY 40299
Important: If you receive your device from any other site or location, do NOT use the device.
Contact our Customer Support Team at (1) [phone]
2.2 Instructions for confirming POI device and packaging were not
tampered with, and for establishing secure, confirmed
communications with the solution provider
To confirm that your device was not tampered with during shipping, complete the following checks:
1. Open the shipping box and remove the packing slip and the Genius box.
2. Open the Genius box.
6

3. Check that the Genius device is packed in a tamper-evident bag.
4. Confirm that the tamper-evident bag has no rips or evidence of tampering.
5. Check the tape that seals the top of the bag for evidence of tampering. If anyone has tried to
remove the tape, the word “VOID” is displayed.
6. . Check that the serial number of the tamper-evident bag matches the serial number printed on
the packing slip. ‒The serial number of the tamper-evident bag is located underneath the barcode
on the front of the bag.
7

The corresponding serial number is printed in the rightmost column of the packing slip, after the
letters TE.
7. Check that the serial number of the device matches the serial number printed on the packing slip.
The serial number of the Genius device is located on the back of the device:
●If you have a Wireless e285, the serial number is under the back cover.
●If you have a Genius Handheld, the serial number is under the battery.
The corresponding serial number is printed in the rightmost column of the packing slip.
8

Physically secure POI devices in your possession, including devices:
●Awaiting deployment
●Undergoing repair or otherwise not in use
●Waiting transport between sites/locations
2.3 Instructions to confirm the business need for, and identities of,
any third-party personnel claiming to be support or repair
personnel, prior to granting those personnel access to POI
devices.
We do not repair deployed devices; therefore, you should NOT grant access to any person that
claims to be repair or support personnel.
9

3 Approved POI Devices,
Applications/Software, and the
Merchant Inventory
3.1 POI Device Details
The following information lists the details of the PCI-approved POI devices approved for use in this
P2PE solution. Note: All POI device information can be verified by visiting:
https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_se
curity.php See also Section 9.2 Instructions for how to confirm hardware, firmware, and application
versions on POI devices” on page 30.
PCI PTS approval
#:
POI device
vendor:
POI device model
name and
number:
Hardware
version #(s):
Firmware version
#:
4-10177
Verifone
MX915:
M177-40xxx-xxx,
Version 4.x
P177-40x-xx-xxx
Vault: 11.x.x;
12.x.x, 13.x.x,
AppM: 5.x.x;
5A.x.x; 6.x.x;
7.x.x, SRED: 4.x.x;
5.x.x, OP: 5.x.x;
6.x.x; 7.x.x, Vault:
14.x.x; AppM:
8.x.x; SRED: 7.x.x,
Vault: 16.x.x;
AppM: 10.x.x,
Vault: 17.x.x
4-10177
Verifone
MX925:
M177-50xxx-xxx,
Version 4.x
P177-50x-xx-xxx
Vault: 11.x.x;
12.x.x, 13.x.x,
AppM: 5.x.x;
5A.x.x; 6.x.x;
7.x.x, SRED: 4.x.x;
5.x.x, OP: 5.x.x;
6.x.x; 7.x.x, Vault:
14.x.x; AppM:
8.x.x; SRED: 7.x.x,
Vault: 16.x.x;
AppM: 10.x.x,
10

Vault: 17.x.x
4-10110
Verifone, Inc.
MX915:
M132-40xxx-xxx,
Version 3.x
P132-40x-xx-xxx,
Vault: 14.x.x;
AppM: 8.x.x;
SRED: 7.x.x,
Vault: 16.x.x;
AppM: 10.x.x
Vault: 1.x.x, 3.x.x,
4.x.x, 11.x.x,
12.x.x, AppM:
1.x.x; 3.x.x; 4.x.x;
5.x.x, 5A.x.x,
6.x.x, SRED: 1.x.x,
3.x.x; 4.x.x; 5.x.x,
OP: 1.x.x, 3.x.x;
4.x.x; 7.x.x, SRED
5.x.x.xxx, Vault:
13.x.x, AppM:
7.x.x, Vault:
17.x.x, AppM:
10.x.x, SRED:
7.x.x, OP: 7.x.x
4-10110
Verifone, Inc
MX925:
M132-50xxx-xxx,
Version 3.x
P132-50x-xx-xxx,
Vault: 14.x.x;
AppM: 8.x.x;
SRED: 7.x.x,
Vault: 16.x.x;
AppM: 10.x.x
Vault: 1.x.x, 3.x.x,
4.x.x, 11.x.x,
12.x.x, AppM:
1.x.x; 3.x.x; 4.x.x;
5.x.x, 5A.x.x,
6.x.x, SRED: 1.x.x,
3.x.x; 4.x.x; 5.x.x,
OP: 1.x.x, 3.x.x;
4.x.x; 7.x.x, SRED
5.x.x.xxx, Vault:
13.x.x, AppM:
7.x.x, Vault:
17.x.x, AppM:
10.x.x, SRED:
7.x.x,
4-10239
Verifone, Inc
P400, P400 Plus,
P400 DMSR
H435-07-02-xxx-x
0- B0,
H435-07-32-xxxx
0-B0,
H435-07-02-
xx0-x0-A0, H435-
07-02-xx0-x0-A1
(P400),
H435-07-32-
xx0-x0-A0, H435-
07-32-xx0-x0-A1
(P400 Plus),
H435-
07-02-xxx-x0-B0
Vault: 7.x.x.x,
AppM: 11.x.x.x,
SRED: 7.x.x.x, OP:
1.x.x, VAULT:
8.x.x, AppM:
12.x.x, VFSRED:
9.x.x, Vault:
10.x.x, AppM:
14.x.x, SRED:
11.x.x, OP: 2.x.x,
Vault: 11.x.x,
AppM: 15.x.x,
SRED: 12.x.x
11

(P400),
H435-07-32-
xxx-x0-B0 (P400
Plus),
H435-07-02-
xx0-x0-A0 (P400),
H435-07-32-xx0-x
0- A0 (P400 Plus),
H435-07-02-xxx-x
0- A2 (P400),
H435-07-
02-xxx-x0-B1
(P400),
H435-07-32-
xxx-x0-A2 (P400
Plus),
H435-07-32-
xxx-x0-B1 (P400
Plus),
H435-17-02-
xxx-x0-B1 (P400
DMSR), H435-07-
02-xxx-x0-B2
(P400),
H435-07-32-
xxx-x0-B2 (P400
Plus),
H435-17-02-
xxx-x0-B2 (P400
DMSR)
4-30276
Verifone, Inc
e285
H445-07-30-0xx-0
0- B0 (BT/WiFi),
H445-
07-34-0xx-00-B0
(2G/BT/WiFi),
H445-
07-38-0xx-00-B0
(3G/BT/WiFi),
H445-
07-30-0xx-xx-B0
(BT/WiFi),
H445-07-
34-0xx-xx-B0
(2G/BT/WiFi),
H445-
07-38-0xx-xx-B0
VAULT: 6.x.x,
AppM: 10.x.x,
VFSRED: 7.x.x,
VFOP: 1.x.x,
VAULT: 7.x.x,
AppM: 11.x.x,
VAULT: 8.x.x,
AppM: 12.x.x,
VFSRED: 9.x.x,
VAULT: 10.x.x,
AppM: 14.x.x,
VFSRED: 11.x.x,
VFOP: 2.x.x,
VAULT: 11.x.x,
AppM: 15.x.x,
VFSRED: 12.x.x
12

(3G/BT/WiFi),
H445-
07-98-0xx-xx-B1
(BT/3G/512MB/M
Fi 3.0/Dual
SIM/Dual Band
WiFi), H445-
07-90-0xx-xx-B1
(BT/512MB/MFi
3.0/Dual Band
WiFi),
H445-07-38-
0xx-xx-B1
(BT/Single Band
WiFi/3G/512MB/
MFi 3.0/Dual
SIM),
H445-07-30-0xx-x
xB1 (BT/Single
Band
WiFi/512MB/MFi
3.0), H445-07-30-
0xx-xx-B2
(BT/Single Band
WiFi/512MB/MFi
3.0), H445-07-38-
0xx-xx-B2
(BT/Single Band
WiFi/3G/512MB/
MFi 3.0/Dual
SIM),
H445-07-90-0xx-x
xB2
(BT/512MB/MFi
3.0/Dual Band
WiFi),
H445-07-98-
0xx-xx-B2
(BT/3G/512MB/M
Fi 3.0/Dual
SIM/Dual Band
WiFi)
4-10231
Verifone, Inc
M400
H405-07-00-xx0-0
0- B2 (M400; No
Wi-Fi; No
Bluetooth),
Vault: 10.x.x;
8.x.x; 7.x.x,
AppM: 14.x.x;
12.x.x; 11.x.x,
13

H405-07-30-xx0-0
0- B2 (M400;
Wi-Fi; Bluetooth),
H405-
07-10-xx0-00-B2
(M400;
Bluetooth),
H405-07-00-xx0-0
0- B1 (M400; No
Wi-Fi; No
Bluetooth),
H405-07-30-xx0-0
0- B1 (M400;
Wi-Fi; Bluetooth),
H405-
07-00-xx0-00-B0
(M400; No Wi-Fi;
No Bluetooth),
H405-07-30-xx0-0
0- B0 (M400;
Wi-Fi; Bluetooth),
H405-
07-x0-xx0-00-B0
(M400), H405-07-
00-xx0-00-B3
(M400; No Wi-Fi;
No Bluetooth),
H405-07-30-xx0-0
0- B3 (M400;
Wi-Fi; Bluetooth),
H405-
07-10-xx0-00-B3
(M400;
Bluetooth)
VFSRED: 11.x.x;
9.x.x; 7.x.x.xxx,
VFOP: 2.x.x; 1.x.x
14

4-30260
Verifone, Inc.
V400m
H475-07-38-xxx-x
1- B0 (V400m
Plus 3G),
H475-07-70-
xxx-x1-B0
(V400m Plus 4G),
H475-07-
F0-xxx-x1-B0
(V400m Plus 4G
WW)
VAULT: 6.x.x,
AppM: 10.x.x,
VFSRED: 7.x.x,
VFOP: 1.x.x,
VAULT: 7.x.x,
AppM: 11.x.x,
VAULT: 8.x.x,
AppM: 12.x.x,
VFSRED: 9.x.x,
VAULT: 10.x.x,
AppM: 14.x.x,
VFSRED: 11.x.x,
VFOP: 2.x.x,
VAULT: 11.x.x,
AppM: 15.x.x,
VFSRED: 12.x.x
4-10204
BBPOS
International
Limited
WSX2
WSX2XXX-XX-XXX
(WSX2)
WSX1.002-
08.x.xx.xx.xx.xx
(WSX2)
3.2 POI Software/Application Details
Important: The Genius application is installed and sold on terminals distributed only by Global
Payment Direct, Inc. The following information lists the details of all software/applications (both
P2PE applications and P2PE non-payment software) on POI devices used in this P2PE solution.
All applications with access to clear-text account data must be reviewed according to Domain 2 and
are included in the P2PE solution listing. These applications may also be optionally included in the
PCI P2PE list of Validated P2PE Applications list at vendor or solution provider discretion.
Application
Vendor, Name
and Version #
POI
Device
Vendor
POI Device
Model
Name(s) and
Number:
POI Device
Hardware &
Firmware Version #
Is
Application
PCI Listed?
(Y/N)
Does
Application
Have Access to
Clear-Text
Account Data?
(Y/N)
Global
Payments,
Inc., Genius
version 5.2.x.x
Verifone,
Inc
MX915,
MX925,
MX915 ECR
Hardware version:
P177- 40x-xx-xxx
(Mx915), P177-
50x-xx-xxx (Mx925),
Y
Y
15

P177- 409-xx-xxx
(Mx915 ECR)
Firmware version:
Vault: 11.x.x; 12.x.x,
13.x.x, AppM: 5.x.x;
5A.x.x; 6.x.x; 7.x.x,
SRED: 4.x.x; 5.x.x,
OP: 5.x.x; 6.x.x;
7.x.x, Vault: 14.x.x;
AppM: 8.x.x; SRED:
7.x.x, Vault: 16.x.x;
AppM: 10.x.x, Vault:
17.x.x, Vault:
14A.x.x, AppM:
8A.x.x, Vault:
12A.x.x, AppM:
6A.x.x
Global
Payments,
Inc., Genius
version 6.4.x.x
Verifone,
Inc
MX915,
MX925,
MX915 ECR
Hardware version:
P177- 40x-xx-xxx
(Mx915), P177-
50x-xx-xxx (Mx925),
P177- 409-xx-xxx
(Mx915 ECR)
Firmware version:
Vault: 11.x.x; 12.x.x,
13.x.x, AppM: 5.x.x;
5A.x.x; 6.x.x; 7.x.x,
SRED: 4.x.x; 5.x.x,
OP: 5.x.x; 6.x.x;
7.x.x, Vault: 14.x.x;
AppM: 8.x.x; SRED:
7.x.x, Vault: 16.x.x;
AppM: 10.x.x, Vault:
17.x.x, Vault:
14A.x.x, AppM:
8A.x.x, Vault:
12A.x.x, AppM:
6A.x.x
Y
Y
Global
Payments,
Inc., Genius
versions
6.4.x.x and
6.5.x.x
Verifone,
Inc
P400, P400
Plus, P400
DMSR
Hardware version:
H435-
07-02-xxx-x0-B0,
H435-07-
32-xxx-x0-B0,
H435-07-02-
xx0-x0-A0,
Y
Y
16

H435-07-02-xx0-
x0-A1 (P400),
H435-07-32-
xx0-x0-A0,
H435-07-32-xx0-
x0-A1 (P400 Plus),
H435-07-
02-xxx-x0-B0 (P400),
H435-
07-32-xxx-x0-B0
(P400 Plus),
H435-07-02-xx0-x0-
A0 (P400),
H435-07-32-xx0-
x0-A0 (P400 Plus),
H435-07-
02-xxx-x0-A2 (P400),
H435-
07-02-xxx-x0-B1
(P400),
H435-07-32-xxx-x0-
A2 (P400 Plus),
H435-07-32-
xxx-x0-B1 (P400
Plus),
H435-17-02-xxx-x0-
B1 (P400 DMSR),
H435-07-02-
xxx-x0-B2 (P400),
H435-07-
32-xxx-x0-B2 (P400
Plus),
H435-17-02-xxx-x0-
B2 (P400 DMSR)
Firmware version:
Vault: 7.x.x.x, AppM:
11.x.x.x, SRED:
7.x.x.x, OP: 1.x.x,
VAULT: 8.x.x, AppM:
12.x.x, VFSRED:
9.x.x, Vault: 10.x.x,
AppM: 14.x.x, SRED:
11.x.x, OP: 2.x.x,
Vault: 11.x.x, AppM:
15.x.x, SRED: 12.x.x
Global
Verifone,
e285
Hardware version:
Y
Y
17

Payments,
Inc., Genius
versions
6.4.x.x and
6.5.x.x
Inc
H445-
07-30-0xx-00-B0
(BT/WiFi),
H445-07-34-0xx-00-
B0 (2G/BT/WiFi),
H445-07-38-
0xx-00-B0
(3G/BT/WiFi),
H445-07-30-0xx-xx-
B0 (BT/WiFi),
H445-07-34-0xxxx-B
0 (2G/BT/WiFi),
H445-
07-38-0xx-xx-B0
(3G/BT/WiFi),
H445-07-98-
0xx-xx-B1
(BT/3G/512MB/MFi
3.0/Dual SIM/Dual
Band WiFi),
H445-07-90-0xx-xx-
B1 (BT/512MB/MFi
3.0/Dual Band WiFi),
H445-07-38-
0xx-xx-B1 (BT/Single
Band
WiFi/3G/512MB/MFi
3.0/Dual SIM),
H445-07-30-
0xx-xx-B1 (BT/Single
Band
WiFi/512MB/MFi
3.0), H445-
07-30-0xx-xx-B2
(BT/Single Band
WiFi/512MB/MFi
3.0),
H445-07-38-0xx-xx-
B2 (BT/Single Band
WiFi/3G/512MB/MFi
3.0/Dual SIM),
H445-07-90-
0xx-xx-B2
(BT/512MB/MFi
3.0/Dual Band WiFi),
H445-
07-98-0xx-xx-B2
18

(BT/3G/512MB/MFi
3.0/Dual SIM/Dual
Band WiFi)
Firmware version:
VAULT: 6.x.x, AppM:
10.x.x, VFSRED:
7.x.x, VFOP: 1.x.x,
VAULT: 7.x.x, AppM:
11.x.x, VAULT: 8.x.x,
AppM: 12.x.x,
VFSRED: 9.x.x,
VAULT: 10.x.x,
AppM: 14.x.x,
VFSRED: 11.x.x,
VFOP: 2.x.x, VAULT:
11.x.x, AppM:
15.x.x, VFSRED:
12.x.x
Global
Payments,
Inc., Genius
versions
6.4.x.x and
6.5.x.x
Verifone,
Inc
M400
Hardware version:
H405-
07-00-xx0-00-B2
(M400; No Wi-Fi; No
Bluetooth), H405-
07-30-xx0-00-B2
(M400; WiFi;
Bluetooth),
H405-07-10-
xx0-00-B2 (M400;
Bluetooth),
H405-07-00-
xx0-00-B1 (M400;
No Wi-Fi; No
Bluetooth),
H405-07-30-
xx0-00-B1 (M400;
Wi-Fi; Bluetooth),
H405-07-00-
xx0-00-B0 (M400;
No Wi-Fi; No
Bluetooth),
H405-07-30-
xx0-00-B0 (M400;
Wi-Fi; Bluetooth),
H405-07-x0-
xx0-00-B0 (M400),
H405-07-
Y
Y
19

00-xx0-00-B3
(M400; No Wi-Fi; No
Bluetooth), H405-
07-30-xx0-00-B3
(M400; WiFi;
Bluetooth),
H405-07-10-
xx0-00-B3 (M400;
Bluetooth)
Firmware version:
Vault: 10.x.x; 8.x.x;
7.x.x, AppM: 14.x.x;
12.x.x; 11.x.x,
VFSRED: 11.x.x;
9.x.x; 7.x.x.xxx,
VFOP: 2.x.x; 1.x.x
Global
Payments,
Inc., Genius
versions
6.4.x.x and
6.5.x.x
Verifone,
Inc
V400m
Hardware version:
H475-
07-38-xxx-x1-B0
(V400m Plus 3G),
H475-07-70-xxxx1-B
0 (V400m Plus 4G),
H475-07-F0-xxx-x1-
B0 (V400m Plus 4G
WW) Firmware
version: VAULT:
6.x.x, AppM: 10.x.x,
VFSRED: 7.x.x,
VFOP: 1.x.x, VAULT:
7.x.x, AppM: 11.x.x,
VAULT: 8.x.x, AppM:
12.x.x, VFSRED:
9.x.x, VAULT: 10.x.x,
AppM: 14.x.x,
VFSRED: 11.x.x,
VFOP: 2.x.x, VAULT:
11.x.x, AppM:
15.x.x, VFSRED:
12.x.x
Y
Y
20

3.3 POI Inventory & Monitoring
●All POI devices must be documented via inventory control and monitoring procedures,
including device status (deployed, awaiting deployment, undergoing repair or otherwise not
in use, or in transit).
●This inventory must be performed annually, at a minimum.
●Any variances in inventory, including missing or substituted POI devices, must be reported to
Global Payments, Inc. via the contact information in Section 1.2 above.
●Sample inventory table below is for illustrative purposes only. The actual inventory should be
captured and maintained by the merchant in an external document.
You must maintain an inventory of all your P2PE devices, and include at least the following
information about each device:
●Make and model – The make and model information of the Genius device is located on the
back of the device.
○If you have a Wireless e285, the make and model information is under the back
cover.
○If you have a Genius Handheld, the make and model information is under the
battery. For more information about how to remove the battery of a Genius
Handheld device, refer to the Quick Start Guide for the Genius Handheld.
●Serial number – The serial number of the Genius device is located on the back of the device.
○If you have a Wireless e285, the serial number is under the back cover.
○If you have a Genius Handheld, the serial number is under the battery. For more
information about how to remove the battery of a Genius Handheld device, refer to
the Quick Start Guide for the Genius Handheld.
●Location – Where you physically located the device in your business. If you have a Wireless
Genius device, you should record where you store the device when it is not in use.
●Status – Description of the device’s status, which can be one of the following:
○Awaiting deployment – The device is working correctly, and you are currently
storing the device before using it in your business.
○Deployed – The device is working correctly, and you are using it in your business.
○Not in use – The device is working correctly, but you do not need to use it in your
business. You must securely store any devices that are not in use. ‒
○Awaiting replacement – The device is not working correctly, and you are waiting for
us to send you a replacement device. You must securely store any devices that are
awaiting replacement.
Important: You must use only PCI-approved P2PE devices to process transactions. If you
process any transactions using devices that are not P2PE validated, you are no longer considered
P2PE compliant.
21