P2PE Validation Help

The SAQ P2PE is available to merchants that process account data only via a validated PCI-listed P2PE solution. One way to confirm a merchant is running a validated PCI-listed P2PE solution is to view the firmware version running on the device to see if it matches the firmware listed in the PIM for that device and P2PE solution. Below are some solutions, devices and corresponding firmware validation instructions.

FreedomPay Commerce Platform P2PE 

PCI SSC Listed Company Name:  FreedomPay, Inc.
PCI SSC Listed Solution Name: Commerce Platform P2PE
PIM: https://corporate.freedompay.com/pim/

P2PE Solution Validation Instructions
Here are the instructions for accessing the firmware versions so you can confirm the device is running a validated solution. These instructions were tested successfully on Ingenico iPP 310, iPP 320, iPP 350, iSC 250, Lane/3000, Lane/5000, Move/5000, and Desk/5000 devices.

1. Stop the FreeWay Commerce Connect (FCC) Service on the Client Workstation by shutting down the workstation or turning off the service as an admin.
2. Reboot POI Device
3. When the POI Device is on the “Lane Closed” screen, type 2634 on the keypad.
4. The device will prompt to press “F” for menu.  Press the "F" key.
5. On the next screen press the “Control Panel” button on the screen
6. The Control Panel will open, from there choose the “Terminal Information” button on the screen
7. On the Terminal Information screen select the option for “Firmware PCI PTS”
8. After hitting the “Firmware PCI PTS” button it will ask how you would like to view this information. Click the “Display” button. This will provide the Base Firmware versions to validate against the FreedomPay PIM.

ID Tech SREDKey2

The ID Tech SREDKey and SREDKey2 POI devices are commonly found as part of several P2PE solutions such as Bluefin P2PE, Paciolan P2PE, Shift4 P2PE, etc.  It's a common POI device and the instructions for finding the firmware on the ID Tech SREDKey and SREDKey2 devices are the same.

PCI SSC Listed Company Name:  Various
PCI SSC Listed Solution Name: Bluefin P2PE, Paciolan P2PE, Shift4 P2PE, etc.
PIM: Reach out to your P2PE solution provider for the PIM. The firmware version has been pretty consistent across all P2PE solutions tested. 

P2PE Solution Validation Instructions
Here are the instructions for accessing the firmware versions so you can confirm the device is running a validated solution. These instructions were tested successfully on Bluefin P2PE, Paciolan P2PE, Shift4 P2PE and other solutions.

1. Download the SREDKey USB Demo app  80137802-006-A SREDKey USB Demo V1.02.6 .zip

2. Install the program onto a computer that is connected to a SREDKey POI device.

3. Launch the SREDKey USB Demo app

4. Under "File" in the menu there is an option to retrieve the current Firmware Version. Select that option. You should see a firmware version 1.01 or similar as shown in the image below. 

Clover (Mobile, Mini, Flex, Station)

The Clover Mobile, Mini, Flex and Station are all devices that run the Clover P2PE solution. 

PCI SSC Listed Company Name: Clover Network, Inc.

PCI SSC Listed Solution Name: Clover - TransArmor P2PE Solution – RSA/PKI

PIM: https://help.clover.com/wp-content/uploads/Clover-P2PE-Implementation-Manual.pdf

P2PE Solution Validation Instructions

Here is a way to confirm whether the Clover device is running a validated P2PE solution.

1. Log into the device

2. Click on "Settings" and then "About"

3. Scroll down on the About page to see the model number (e.g. "C403") and then on the bottom of the About page it will show the Build number that looks something like "0 02.XX.XXXX 02.XX.XXXX (01.XXXXX) SRED Enabled".

On page 49 of the PIM it says: "After the firmware version number, it will display “SRED Enabled” in order to be P2PE validated". So check to make sure that "SRED Enabled" is the setting. Sometimes you'll find that setting to say "SRED Disabled" which means that the device is not a valid implementation of the Clover P2PE solution. Sometimes the Clover devices are shipped in a SRED Disabled configuration because they are sensitive to tampering and if someone drops the device then it puts the device into a tamper mode and it is unable to process any payments (also called "bricked"). 

Windcave P2PE Solution

PCI SSC Listed Company Name: Windcave Ltd.

PCI SSC Listed Solution Name: Windcave P2PE Solution

PIM: Reach out to https://www.windcave.com/ to request the Windcave P2PE Instruction Manual V3-1

P2PE Solution Validation Instructions

Here are the instructions for viewing the firmware on a Windcave Lane/3000 device.

1. Reboot the terminal, and click on the Clear (Yellow button) when you see the Windcave splash screen.

2. When you see “ENTER MENU NAME,” enter the code: 5210

3. Select "HW CONFIG".

4. Now press the "Menu" button on the device.

5. Next select the "Terminal Information".

6. Lastly, Select "Firmware PCI PTS" and then "Display".  The next screen should show the Firmware, something like "M1 : 820547v01.04", which should match up with the versions listed in the PIM.