PCI PIN Security
Control Objective 1: PINs used in transactions governed by these requirements are processed using equipment and methodologies that ensure they are kept secure – PCI PIN Security

PCI PIN Security 2-2: PCI PIN 2-2

Online PIN translation uses only DUKPT, fixed key or master key and session key management; from 1 January 2023 fixed-key TDEA PIN encryption is disallowed in POI devices and on host-to-host links.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 1: PINs used in transactions governed by these requirements are processed using equipment and methodologies that ensure they are kept secure – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls