G8 has been successfully integrated to Ingenico PCI PTS approved PIN pads that run the Ingenico On-Guard security application and also to Verifone devices that utilise the Verifone P2PE toolkit. Both these options leverage independently verified P2PE applications and components. We plan to add support for additional P2PE approved solutions and PIN pads over time.
The alternative P2PE approach uses strong network segmentation, locked down routers with firewalls and a hosted G8 implementation. Here the PIN pad connects to G8 across a fast-secured communications link that supports Transport Layer Security. This protects all data communication, not just the sensitive card details. As the PIN pad is not connected to the EPOS and G8 sits outside of the store environment then the EPOS and store can be deemed to be out of scope for PCI DSS compliance purposes. This simplified architecture has cost and time advantages over a fully certified solution.
Features and benefits
Choice of P2PE approach
Supporting multiple PIN pads
Phased implementation options
Card details protected by strong encryption
EPOS is removed from PCI scope
Always following PCI guidelines
Lower PCI DSS program cost
Reduced annual compliance costs
Implementation plan savings