PCI PIN Security
Normative Annex B: Key-injection facilities – PCI PIN Security

PCI PIN Security B:32-9: PCI PIN B:32-9

What does B:32-9 require?

A KIF where any key or component appears in memory outside an SCD during injection has a physically secure injection room meeting 32-9.1 to 32-9.12; since 1 January 2024 clear-text injection is not allowed for entities injecting on behalf of others, and since 1 January 2026 for entities injecting devices they process for, both for POI v5 and higher devices, so that only encrypted injection remains, components entered on a PTS-approved device's own keypad excepted.

Maintained by Gerard BlokdykControl text last updated

Other controls in Normative Annex B: Key-injection facilities – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls