PCI Compliance Requirements Retail Petroleum

Payment Security Required at Dispensers

– Requires encryption when PIN information is entered

     • Must use PCI certified Encrypting PIN Pad capable of Triple-DES

encryption

– Triple-DES encryption keys required to be fully compliant

     • Retailers assume risk if using Single-DES encryption after July 2010

– PIN encryption must be done within the keypad

– Dispenser upgrade procedures vary by vendor

     • Keypads, electronics, displays, bezel panels, etc.

Here are your options:

– Upgrade dispensers with PCI Encrypting PIN Pads

– Install new TDES-capable PCI compliant fuel dispensers

– Require PIN debit customers to pay in store

– Do nothing now and stop accepting PIN debit as of July 1, 2010

– Assume risk of non-compliance / compromise liability for use of Single-DES DUKPT after the deadline