Global Payments P2PE User manual

P2PE Instruction Manual
Global Payments UK P2PE Solution September 2020
© 2020 Global Payments Inc.
All Rights Reserved.

Contents
1. P2PE Solution Information and Solution Provider Contact Details ..................................... 3
2. Approved POI Devices, Applications/Software, and the Merchant Inventory .................... 4
3. POI Device Installation Instructions ................................................................................... 10
4. POI Device Transit .............................................................................................................. 13
5. POI Device Tamper Monitoring and Skimming Prevention ................................................ 15
6. Device Encryption Issues ................................................................................................... 17
7. POI Device Troubleshooting ............................................................................................... 17
Appendix ................................................................................................................................ 18

P2PE Instruction Manual 3
1. P2PE Solution Information and Solution Provider
Contact Details
1.1 P2PE Solution Information
Solution name: Global Payments UK P2PE Solution
Solution reference number per PCI SSC website: 2020-01314.001
1.2 Solution Provider Contact Information
Company name: GPUK LLP trading as Global Payments
Company address: Granite House, Granite Way, Syston, Leicester, LE7 1PL
Company URL: www.globalpaymentsinc.com
Contact name: Global Payments Service Desk
Contact phone number: 0345 702 3344, select the option for terminal support
Lines are open every day (except Christmas day)
8am - 11pm Monday to Saturday
10am - 5pm Sunday
10am - 4pm Public Holidays
Contact e-mail address: [e-mail]
P2PE and PCI DSS
Merchants using this P2PE Solution may be required to validate PCI DSS compliance and should be aware of their applicable PCI DSS
requirements. Merchants should contact their acquirer or payment brands to determine their PCI DSS validation requirements.

P2PE Instruction Manual 4
2. Approved POI Devices, Applications/Software
and the Merchant Inventory
2.1 POI Device Details
The following information lists the details of the PCI-approved POI devices approved for use in this P2PE solution.
Note all POI device information can be verified by visiting:
https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php
POI device vendor: Ingenico
POI device model name and number: Move/3500
Hardware version #(s): MOV35AB (non CTLS), MOV35BB (CTLS), MOV35EB (CTLS),
MOV35CB (non CTLS), MOV35DB (CTLS), MOV35FB (CTLS),
MOV35JB (CTLS)
Firmware version #(s): 820547v01.xx, 820376v01.xx, 820555v01.xx (SRED),
820549v01.xx, 820556v01.xx, 820565v01.xx (SRED FF1)
PCI PTS Approval #(s): 4-20320
POI device model name and number: Move/5000
Hardware version #(s): MOV50AB, (Non CTLS), MOV50BB, (CTLS), MOV50CB, (Non
CTLS + Privacy shield), MOV50DB, (CTLS + Privacy shield),
MOV50JB (CTLS + Privacy shield + Desktop case lid)
Firmware version #(s): 820547v01.xx, 820376v01.xx, 820555v01.xx (SRED),
820549v01.xx (SRED OnGuard FPE), 820556v01.xx (SRED
OnGuard SDE), 820559v01.xx (SRED ANL), 820565v01.xx
(SRED FF1)
PCI PTS Approval #(s): 4-20316
POI device model name and number: Desk/5000
Hardware version #(s): DES50AB, (Non CTLS), DES50BB, (CTLS), DES50CB, (Non
CTLS + Privacy Shield), DES50DB(CTLS + Privacy Shield)
Firmware version #(s): 820547v01.xx, 820376v01.xx, 820555v01.xx (SRED),
820559v01.xx (SRED ANL), 820549v01.xx (SRED OnGuard
FPE), 820556v01.xx (SRED OnGuard SDE), 820565v01.xx
(SRED FF1)
PCI PTS Approval #(s): 4-20317
POI device model name and number: Desk/5000
Hardware version #(s): DES50AA (non CTLS); DES50BA (CTLS), DES50CA (Non
CTLS); DES50DA (CTLS), DES50AB (Non CTLS), DES50BB
(CTLS), DES50CB (Non CTLS), DES50DB (CTLS)

P2PE Instruction Manual 5
Firmware version #(s): 820547v01.xx; 820376v01.xx, 820549V01.xx (SRED OnGuard
FPE), 820555v01.xx (SRED AWL), 820556v01.xx (SRED
OnGuard SDE), 820559v01.xx (SRED ANL), 820565v01.xx
(SRED FF1)
PCI PTS Approval #(s): 4-20281
POI device model name and number: Lane/3000
Hardware version #(s): LAN30AA, LAN30BA, LAN30CA, LAN30DA, LAN30EA,
LAN30FA, LAN30GA, LAN30HA, LAN30AN, LAN30BN,
LAN30EN, LAN30FN
Firmware version #(s): 820547v01.xx, 820561v01.xx (base firmware)
PCI PTS Approval #(s): 4-30310
POI device model name and number: Link/2500
Hardware version #(s): LIN25AA (Basic version no CTLS support), LIN25BA (Basic
version with CTLS), LIN25CA (Companion version no CTLS
support), LIN25DA (Companion version with CTLS), LIN25EA
(Touch version no CTLS support), LIN25FA (Touch version
with CTLS), LIN25GA (Dual head version no CTLS support),
LIN25HA (Dual head version with CTLS), LIN25IA (Companion
version with rear connector and no CTLS support), LIN25JA
(Companion version with rear connector and with CTLS)
Firmware version #(s): 820547v01.xx
PCI PTS Approval #(s): 4-30326
<Add additional tables for each POI device type used in this solution, if applicable>
2.2 POI Software/Application Details
The following information lists the details of all software/applications (both P2PE applications and P2PE non-payment software) on
POI devices used in this P2PE solution.
Note that all applications with access to clear-text account data must be reviewed according to Domain 2 and are included in the
P2PE solution listing. These applications may also be optionally included in the PCI P2PE list of Validated P2PE Applications list at
vendor or solution provider discretion.

P2PE Instruction Manual 6
Application
vendor, name and
version #
POI device
vendor
POI device model
name(s) and
number:
POI Device Hardware &
Firmware Version #
Is application
PCI listed?
(Y/N)
Does application
have access to
clear-text account
data (Y/N)
Ingenico,
Matsu P2PE,
97.12.01.2055.x
Ingenico Move/3500 Hardware version #
MOV35AB (non CTLS),
MOV35BB (CTLS),
MOV35EB (CTLS),
MOV35CB (non CTLS),
MOV35DB (CTLS),
MOV35FB (CTLS),
MOV35JB (CTLS)
Firmware Version #
820547v01.xx,
820376v01.xx,
820555v01.xx (SRED),
820549v01.xx,
820556v01.xx,
820565v01.xx
(SRED FF1)
Yes Yes
Ingenico,
Matsu P2PE,
97.12.01.2055.x
Ingenico Move/5000 Hardware version #
MOV50AB, (Non CTLS),
MOV50BB, (CTLS),
MOV50CB, (Non CTLS +
Privacy shield),
MOV50DB, (CTLS
+ Privacy shield),
MOV50JB (CTLS +
Privacy shield + Desktop
case lid)
Firmware version #
820547v01.xx,
820376v01.xx,
820555v01.xx (SRED),
820549v01.xx (SRED
OnGuard FPE),
820556v01.xx (SRED
OnGuard SDE),
820559v01.xx (SRED
ANL),
820565v01.xx (SRED
FF1)
Yes Yes

P2PE Instruction Manual 7
Application
vendor, name and
version #
POI device
vendor
POI device model
name(s) and
number:
POI Device Hardware &
Firmware Version #
Is application
PCI listed?
(Y/N)
Does application
have access to
clear-text account
data (Y/N)
Ingenico,
Matsu P2PE,
97.12.01.2055.x
Ingenico Desk/5000 Hardware version #
DES50AB, (Non CTLS),
DES50BB, (CTLS),
DES50CB, (Non CTLS
+ Privacy Shield),
DES50DB(CTLS +
Privacy Shield)
Firmware version #
820547v01.xx,
820376v01.xx,
820555v01.xx (SRED),
820559v01.xx (SRED
ANL), 820549v01.xx
(SRED OnGuard FPE),
820556v01.xx (SRED
OnGuard SDE),
820565v01.xx (SRED
FF1)
Yes Yes
Ingenico,
Matsu P2PE,
97.12.01.2055.x
Ingenico Desk/5000 Hardware Version #
DES50AA (non CTLS);
DES50BA (CTLS),
DES50CA (Non CTLS);
DES50DA (CTLS),
DES50AB (Non CTLS),
DES50BB (CTLS),
DES50CB (Non CTLS),
DES50DB (CTLS)
Firmware version #
820547v01.
xx; 820376v01.
xx, 820549V01.xx
(SRED OnGuard FPE),
820555v01.xx (SRED
AWL), 820556v01.xx
(SRED OnGuard SDE),
820559v01.xx (SRED
ANL), 820565v01.xx
(SRED FF1)
Yes Yes

P2PE Instruction Manual 8
<Add additional rows for each POI device type used in this solution, if applicable>
Application
vendor, name and
version #
POI device
vendor
POI device model
name(s) and
number:
POI Device Hardware &
Firmware Version #
Is application
PCI listed?
(Y/N)
Does application
have access to
clear-text account
data (Y/N)
Ingenico,
Matsu P2PE,
97.12.01.2055.x
Ingenico Lane/3000 Hardware version #
LAN30AA, LAN30BA,
LAN30CA, LAN30DA,
LAN30EA, LAN30FA,
LAN30GA, LAN30HA,
LAN30AN, LAN30BN,
LAN30EN, LAN30FN
Firmware version #
LAN30AA, LAN30BA,
LAN30CA, LAN30DA,
LAN30EA, LAN30FA,
LAN30GA, LAN30HA,
LAN30AN, LAN30BN,
LAN30EN, LAN30FN
Yes Yes
Ingenico,
Matsu P2PE,
97.12.01.2055.x
Ingenico Link/2500 Hardware Version #
LIN25AA (Basic version
no CTLS support),
LIN25BA (Basic version
with CTLS), LIN25CA
(Companion version no
CTLS support),
LIN25DA (Companion
version with CTLS),
LIN25EA (Touch version
no CTLS support),
LIN25FA (Touch version
with CTLS),
LIN25GA (Dual head
version no CTLS
support),
LIN25HA (Dual head
version with CTLS),
LIN25IA (Companion
version with rear
connector and no CTLS
support),
LIN25JA (Companion
version with rear
connector and with
CTLS)
Firmware version #
820547v01.xx
Yes Yes

P2PE Instruction Manual 9
2.3 POI Inventory & Monitoring
• All POI devices must be documented via inventory control and monitoring procedures, including device status (deployed,
awaiting deployment, undergoing repair or otherwise not in use, or in transit).
• This inventory must be performed annually, at a minimum.
• Any variances in inventory, including missing or substituted POI devices, must be reported to Global Payments via the contact
information in Section 1.2 above.
• Sample inventory table below is for illustrative purposes only. The actual inventory should be captured and maintained by you in
an external document.
Device vendor Device model
name(s) and number:
Device Location Device Status Serial Number
or other Unique
Identifier
It is imperative that an inventory is maintained to ensure that the whereabouts and status of each device is known at all times. This
must also include devices that are not in use or waiting for an engineer to install and these devices must be stored in a secure manner
such as a lockable cabinet. The full inventory must be completed on an annual basis at a minimum.
To help you with your audit responsibility Global Payments will provide to you a report on a Quarterly basis detailing the location and
status of all dispatched POI devices on our records. This will not contain updates for terminals that have been moved under your
control or put in storage unless Global Payments have been made aware and our systems updated to reflect this. This report can
be used to assist your audit. If there are any variances on this report which require updating these should be reported to the Global
Payments (GPN) Service Desk.
You must also review your devices as per instructions detailed in section 5.1
Also, If there is any suspicion that a device has been tampered with or replaced, you must contact the GPN Service Desk immediately
(detailed in 1.2) where you will receive advice on the next steps to take.
For further instructions on how to monitor and handle a device that you believe has been tampered with see section 5.2.
GPN will replace and dispose of the device in a secure manner and no attempt to clean, repair or otherwise amend the device should
be made as it may become part of a forensic investigation.
Sample Inventory Table

P2PE Instruction Manual 10
3. POI Device Installation Instructions
Do not connect non-approved cardholder data
capture devices.
The P2PE solution is approved to include specific PCI-approved
POI devices. Only these devices denoted above in table 2.1 are
allowed for cardholder data capture.
If your PCI-approved POI device is connected to a data capture
mechanism that is not PCI approved, (for example, if a
PCI-approved SCR was connected to a keypad that was not
PCI-approved):
• The use of such mechanisms to collect PCI payment-card data
could mean that more PCI DSS requirements are now
applicable for you.
• Only P2PE approved capture mechanisms as designated on
PCI’s list of Validated P2PE Solutions and in the PIM can
be used.
Do not change or attempt to change device configurations
or settings.
Changing or attempting to change device configurations or
settings will invalidate the PCI-approved P2PE solution in its
entirety. Examples include, but are not limited to:
• Attempting to enable any device interfaces or data-capture
mechanisms that were disabled on the P2PE solution
POI device
• Attempting to alter security configurations or
authentication controls
• Physically opening the device
• Attempting to install applications onto the device