PCI PIN Security
Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

PCI PIN Security 7-2: PCI PIN 7-2

What does 7-2 require?

When higher-level keys are generated, such as MFKs, BDKs and KEKs shared with other organisations, a log records the date and time, the key identifier, its purpose, the names and signatures of everyone involved, the numbers of the tamper-evident packages and the serial numbers of the devices.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 2: Cryptographic keys used for PIN encryption and decryption and related key management are created using processes that ensure it is not possible to predict any key or determine that certain keys are more probable than others – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls