The 411 on Upgrading Your ATMs

THE 411 ON UPGRADING YOUR ATMS What financial institutions need to know about recent and upcoming industry changes to security and software standards. Crucial Dates March 2012 Compliance deadline to adopt 2010 Americans with disabilities Act (ADA) Standards. All POS and ATM Maestro acquirer processors must support EMV transactions, according to MasterCard® and VISA. - April 2013- Counterfeit fraud liability shifts to ATM transaction acquirers that do not accept EMV chip cards for Maestro inter-regional transactions, according to MasterCard. Microsoft ends support for Windows XP: ATM software should be migrated to Windows 7 and Agilis® 3. April 2014- ATMS purchased and installed or moved after this date will require the EPP7 to remain PCI compliant. New Canyon quad core processor available, replacing Sierra for Windows 7 operation. OCTOBER APRIL All ATM acquirer processors must support EMV transactions, according to VISA. 2015 Counterfeit card fraud liability shifts to transaction acquirers that do not accept EMV chip cards at U.S. POS terminals, according to MasterCard and VISA. OCTOBER Counterfeit card fraud liability shifts to transaction acquirers that 2016 do not accept EMV chip cards at U.S. ATMS, according to MasterCard. 2017 OCTOBER Counterfeit card fraud liability shifts to transaction acquirers that do not accept EMV chip cards at U.S. ATMS, according to VISA. Solution color key EMV Windows 7 PCI 3.0 Guidelines ADA Compliance The 411 on EMV EMV is a payment systems standard named after Europay, MasterCard and Visa that ensures the security and global interoperability of chip-based payment cards. Ability to use cards anywhere in the world Positioning the industry for NFC, mobile and contactless payments Reduction in card fraud Reduction of domestic issuer ATM losses in Europe following implementation of EMV, from €62 million in the first half of 2006 to €23 1.24 BILLION 63% EMV chip-based payment cards in use worldwide at the end of 2010. million in the last half of 2010. Source: EMVCO Source: European ATM Security Team (EAST) To facilitate EMV transactions at the ATM, changes must be made... Hardware Software & Network Other Considerations • Card readers that accept embedded chip cards. • Security modules that support EMV requirements. • Software updates may be necessary to allow chip card usage. • Transaction-processing network must support • Consumer education on use and benefits of new cards. • Chip card issuing strategy. • Certification requirements. EMV transactions. TOP TRENDS MOST LIKELY TO IMPACT THE NORTH AMERICAN ATM MARKET OVER THE NEXT FIVE YEARS: Security standards 66% Mag-stripe to EMV chip conversions 59% Mobile integration 56% and other compliance issues Source: ATMmarketplace.com ATM Future Trends Survey, 2012 The 411 on Windows 7 5 Reasons to Migrate to Windows 7 Stay Up-to-Date Keep Costs Down Save Time Improved Security Superior Software Windows XP is two generations Costs can soar with older Address security issues quickly, reduce system reboots and faster help desk response can increase uptime with newer technology. Staying with Windows XP Windows 7 delivers 6 benefits behind Microsoft's current operating systems. exposes you to security risks and your old software cannot. offering. resource waste. 6 Benefits of Windows 7 HEIGHTENED PERFORMANCE Secure, visually compelling solutions · Supported on industry-leading software DO YOU NEED A HARDWARE UPGRADE, TO0? A Sierra dual-core processor of the Denver Pentium 4 processor is BETTER RELIABILITY Built with trusted Windows technology · Dependable operation for your financial institution and consumers E SYSTEMS COMPATIBILITY Compatible with production-quality, off-the-shelf applications, services and certified drivers E CONNECTIVITY Supporting industry standards · Fast and safe access to your network and its infrastructure recommended for O BUILT FOR YOUR SYSTEMS Customized to meet your financial institution's needs optimal performance of Windows 7. O LOWER TOTAL COST OF OWNERSHIP Rapid time-to-market · Supported by Microsoft's community of experts, overall proven track record with embedded devices When financial institutions plan to upgrade to Windows 7 16% Will only upgrade when absolutely Will complete upgrade by end of 2014 Would prefer running a non-Microsoft operating system (e.g. Linux) 29% Will begin upgrading by end of 2014 22% Not Sure necessary 3% 29% Source: ATMmarketplace.com ATM Software Trends Survey, December 2012 The 411 on PCI 3.0 Guidelines EPP7 Security Enhancements & New Features: Compliant with industry regulations (PCI v.3, X9, etc.) To remain PCI compliant, all ATMS purchased and installed or moved after April 2014 will require a new, more robust, electronic PIN pad version known as EPP7. New certificates for Remote Key Loading (RKL) Secure communications EPP7 will be released for network certification in mid-2013. PIN Pad Shield continued support EPP7 will fit into same space as existing EPP5. Removal switch Dual control installation You can continue to use EPP4 or EPP5 unless: ATM is moved - EPP needs replaced Meets 2010 ADA requirements WHAT COMPRISES PCI SOFTWARE MERCHANTS & Payment Card Industry Security Standards MANUFACTURERS DEVELOPERS PROCESSORS PCI SECURITY STANDARDS & COMPLIANCE PCI PED PCI PA-DSS PCI DSS Protection of Cardholder Payment Data PIN Entry Devices Data Security Standard Payment Application Vendors Source: pcisecuritystandards.org GET THE FULL 411 ON UPGRADING YOUR ATMS Diebold.com/411 Presented by: atm marketplace EBOLD