PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 20-5: PCI P2PE 20-5

What does 20-5 require?

A key-injection facility loading DUKPT keys for several POI types for one entity uses separate BDKs per terminal type where terminal IDs could be duplicated across types, so that no key can be derived for more than one device except by chance.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.