TR31 Compliance Deadline

Why is this needed?

PCI designation is a requirement for the ongoing operations of ATMs. Without PCI designation, there is no ATM business.

ATM transaction security is critical to ensure integrity of the payment infrastructure and the current hardware/software requires upgrades.

•   Non-compliant ATMs are considered at significant risk of fraud, brand damage and a loss of revenue
•   Failure to implement TR-31 ("Key Blocks") could leave an ATM vulnerable to more attacks and could ultimately result in payment and customer data compromises
•   PCI and Networks’ (card brands) requirements are intended to improve and enhance security and will change the way encryption keys are protected and managed
•   "Key Blocks" will further secure the PINs and data to be transferred through the ATM and payment network ecosystem and infrastructure
  •   Key Blocks make it more difficult to exploit weaknesses
  •   Key Blocks protect the cryptography that, in turn, protects payment data