PCI PIN Security
Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

PCI PIN Security 20-3: PCI PIN 20-3

What does 20-3 require?

Keys derived from a single base derivation key are produced with unique derivation data in line with ISO 11568, so each device gets its own initial key, and the base key is never itself loaded into a POI; uniqueness fails where one BDK is used with one KSN across several injection systems, or repeatedly within a single system.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls