Security checks and cleaning

Protect PIN entry

Aera always delivers terminals that are PCI PTS approved at the time of delivery. PCI PTS is the security standard for PIN entry devices.

Always ask customers to be careful when they type their PIN, and to block the view from people nearby.

A terminal may come with a privacy shield fitted at the factory, or with a privacy shield accessory. If it comes as an accessory, fit it before you use the terminal. If you need a privacy shield and haven't received one, contact Aera support. See Get support.

If the terminal comes without a privacy shield (fitted or in the box), use it as a handheld device. Ask customers to:

hold the terminal in their hand while they enter their PIN
keep a distance from others
cover the keypad with their body or hand
make sure no cameras or other surveillance point at the keypad

Tell customers if you notice suspicious behaviour from others before or during PIN entry.

Check terminals regularly

You are ultimately responsible for protecting cardholder data in your equipment. Focus on PCI DSS requirement 9.5: protect terminals from tampering and from being swapped. Aera highly recommends that you:

check new terminals when you receive them, and all terminals regularly, for obvious signs of tampering: broken seals over cover plates or screws, odd or different cables, or unknown or suspicious parts
keep a detailed list of all terminals in the store, with pictures, and compare against it regularly
keep terminals out of customers' reach, both during and outside opening hours
never accept delivery or installation of a terminal from anyone not authorised
only give access to terminals to staff who are independently verified and trustworthy
contact Aera immediately if you are in doubt about a terminal

If a terminal has been tampered with

If a terminal detects serious tampering, it wipes its security keys and blocks itself permanently. It can't be fixed in the store: it must be replaced and sent back to Aera. Contact Aera support, and see Replace a terminal. How the terminal protects itself: Terminal security.

Cleaning

Aera has cleaning instructions for its Android terminals. Ask your Aera contact for them.