Summary

Effective January 1, 2025- All ATMs in the United States must utilize TR31 key blocks to maintain PCI compliance. All ATMs will need a software update, some will need a software update and keyboard update. This update is mandatory. Failure to update your ATM will mean the ATM will cease to operate after the deadline.

Although January 1, 2025 may seem far away, do not delay in updating your ATM. We have been in business for over 25 years and we have worked through our fair share of updates – Triple Des, ADA, EMV, Windows XP, Win 7 & Win 10 for FI’s to go down the list. Our 25+ years of experience has taught us that updating your ATM early on – is always the least expensive way to navigate mandatory updates. Delaying, waiting until the last minute, or holding out in hopes that they will grant extensions – experience has proven – will just result in higher priced upgrade kits, manufacturer delays, and may mean a technician may not get to your location before the deadline. We can not stress the urgency of signing up for this as early as possible!

What is this update exactly?

In 2019, The Payment Card Industry Security Standards Council (PCI) announced new mandatory security requirements for ATMs and processors. PCI is the unified governing body of ATM networks. They are the group who officially own the processing networks. They come up with the rules that ATMs and credit card terminals, and processors need to abide by in the United States. They are self policing. Their goal is to keep their networks as secure as possible within reason and limit their liability, which ultimately makes the industry more secure and economical. To achieve this goal PCI has set a more advanced encryption standard (similar to Triple Des) which requires updates at the processor level, updates to the ATMs software for the keyboard and processor to sync as well as a more secure ATM hardware, specifically the Electronic Pin Pad (EPP). The EPP (or keyboard) is the device that cardholders enter their PIN numbers. PCI had planned for a phased implementation of updates however Covid-19 resulted in a delay/ revisions to the compliance deadline dates. The dates below reflect the revised deadlines.

PCI EPP Compliance Dates

• December 31, 2022: Replace ATMs and upgrade EPP for ATMs with PCI PTS v1 or older (v1 EPPs with Less secure technology) – WE ARE IN THIS PHASE
• January 01, 2025: EPP hardware, firmware and software must utilize TR31 Phase 3 “Key Blocks” FAILURE TO UPDATE PRIOR TO THIS DEADLINE WILL RESULT IN THE ATM NO LONGER OPERATING

Are your ATMs Compliant?

No. As of Dec 31st, 2022 – there are no ATMs compliant in the US. Software has software has not been released. So at a minimum your ATM, along with all other ATMs in the US will require software update. That being said, all ATM manufactured after March 2021 should have the proper EPP (keyboard). ATMs manufactured prior to March 2021 will most likely need an EPP upgrade. Certain older models will not be upgradable. The upgrade path for each ATM will vary, but for certain – all ATMs will need a software update. More than likely a tech will need to visit each ATM, load new software, possibly install a new EPP, and related accessories and reprogram the ATM to the new protocol.

Next Steps

This upgrade is mandatory. Failure to upgrade your ATMs for this mandate will mean that after January 1, 2025 – your ATMs will not process transactions.

Due to the enormous scope of this mandate (every ATM in the country) – we strongly urge you to not delay. Upgrade your ATMs as soon as you can. PCI has already pushed back their deadline once due to Covid 19. As stated above historically speaking, upgrades are always least expensive early on. Waiting until the last minute may mean not meeting the deadline and going dark, or paying a higher price for an upgrade due to manufacturer price increases the closer we get to the deadline.

Additional Information

Hyosung – ATM Security PCI Compliance Update

Visa PIN Security Bulletin

PCI Security Standards Council

What are we doing?

We have known about this for quite some time. In 2020 we stopped selling and re-deploying ATMs that do not have the correct style EPP. We are currently in the process of contacting large affiliates/ customers and relaying this information to them and signing them up for the upgrade/ selling kits. As of 12/31/22- the software has not been released and both of our processors (Columbus Data Services and Switch Commerce) are not certified. Once they are certified, we will begin installing upgrades/ loading software. We expect to begin early 2023.

What can you do to prepare?

Contact us to help you navigate this update. We will help you in determining which ATMs need software vs. need software and a keyboard upgrade vs needing to replace the entire machine. For large IAD’s – although this cost may seem daunting – we can not stress that it is always less expensive early on. If you can financially handle it, we recommend upgrading as soon as possible. Do as many machines you can early on and then do the remainder in the coming months. Start preparing by raising surcharges, start saving and prepare for this endeavor. Gather lists of equipment that needs to be replaced, vs just needs a software update/ keyboard update. You have several months to prepare, do not wait until the last minute! We do have financing options available for large operators who process with us.

If you are just starting out- and you are thinking about buying a used machine – do your homework! We never recommend buying a used ATM! Make sure you understand what the cost will be to upgrade it, OR if an upgrade is even available for that model. In the coming months there is going to be a huge influx of used equipment as people get rid of old hardware. If we had to guess- most of this will not be upgradable. Spending a few hundred dollars to only use a machine for a few month to me, may not make great business sense.

As always, we encourage questions. Feel free to contact us by phone at 877-663-6128 during sales hours M- F 8:30 AM – 4:30 PM Eastern Time. To contact us 24/7 email info@bpsands.com