PCI Requirements

PCI Requirements

Due to Payment Card Industry (PCI) certification requirements, the device must automatically reset at least once every 24 hours. This is required for security purposes, so that the device can reinitialize memory and perform a self-test. Host software developers and potentially end users should be aware of this.

By default, the device will automatically reset 23 hours after it boots up and it will attempt to send a warning notification message to the host 3 minutes before the reset occurs.

The default behavior is adjustable. See the following for more information:

• Property 1.2.7.1.1.4 Auto Reset Configuration

• Device Reset Will Occur Soon notification in

One way the host software could handle receiving a device reset-will-occur notification:

1. Cancel any operation that is in process (for example, a transaction) if it is unlikely to end before the reset.

2. Optionally send instead of waiting for the automatic reset to occur.

3. Re-connect with the device and re-start any operation that was in process.

The purpose of locking a device is to disable most of the device’s functionality for use cases that need this extra layer of security. When a device is locked, it will reject all commands except for a few. Use of the device lock feature is optional. It is not required by PCI.

• The device lock state can be either unlocked or locked. The device lock state can be retrieved by getting a property.

• The device lock state can be changed by setting a secure property or it can be changed with a command that requires knowledge of the device lock passcode.

• The device can be configured to always have the device lock state set to locked after a reset or power cycle by setting a property.

Commands and properties to manage the device lock feature:

Only the following commands are allowed when the device lock state is set to locked: