PCI PIN Security
Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

PCI PIN Security 6-2: PCI PIN 6-2

What does 6-2 require?

Key generation is not performed on multi-purpose computers where a clear-text secret key, private key or component would sit in memory beyond the protected, tamper-resistant boundary of an SCD. A computer used only for key loading may be used provided every other requirement is met, including Requirement 5 and Annex B's Requirement 13, and computers that only administer SCDs, or that have no access to clear-text keys, fall outside scope.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls