Terminal security

Security starts in the terminal itself. Every Aera terminal meets PCI PTS, the mandatory security standard for PIN entry devices, and Aera adds protection on top.

PCI PTS: what every terminal does

• Protects the PIN and the encryption keys, even if someone attacks the terminal physically
• Runs only approved software: the terminal checks its firmware before it runs
• Keeps its secure parts separate from the rest
• Detects if someone opens it, manipulates it or interferes with its power
• Protects its sensitive parts, such as the card reader and the secure element

If someone tampers with a terminal

When the terminal detects serious tampering, it:

1. Wipes its security keys
2. Blocks itself permanently
3. Must be sent back to be set up again. It can't be fixed in the store.

A blocked terminal can't be used or misused. To swap it, see Replace a terminal.

Lock the terminal in place

The terminal has a lock point. Fasten it to the counter, a stand or other equipment, so it can't be removed, swapped or moved without permission. For stands and poles, see Terminal accessories.

Make sure the ECR talks to the right terminal

The terminal sends its serial number when the ECR logs in. Your ECR can use it to check that it's connected to the right terminal. See Check the terminal's serial number.

What this protects against

Your responsibilities

To keep your terminals secure:

• Keep an overview of all your terminals
• Inspect them regularly
• Replace any terminal that looks suspicious
• Follow your internal routines for security incidents

How to check terminals, and what to look for: Security checks and cleaning.