Purpose

This Software Bulletin is intended to provide guidance on a software update for customers that are using older Telium iCT payment terminals with IngeTrust PKI (Public Key Infrastructure) together with the iPP220/3X0 as the customer facing device.

Summary

Since 2008, Ingenico has been deploying its own Public Key Infrastructure software called IngetTrust for Ingenico devices to mutually authenticate a customer facing device. According to security regulations, the secure communication software certificates need to have a defined validity period and an associated expiration date. Based on industry security best practices, the IngeTrust (PKI) software has a ten (10) year validity period.

To prevent any merchant or consumer experience impact or disruption, Ingenico Group has identified Telium terminals in the field that will need to have a software update. Once the software update has been executed, the terminal can continue to authenticate and communicate to an iPP customer facing device. While the impacted devices are end of life and will be close to end of support in 2021, Ingenico is providing a software update as part of our continued efforts to exceed the merchant’s expectations and maximize their investment with Ingenico. The key dates are:

May 14th, 2019 – Telium terminals that are PCI PED v1 or v2. This is a very small number of terminals impacted due to the average age of the terminal, which is eight to nine years old and many may not be in service today.

April 14th, 2021 – Telium 2 terminals that are PCI PTS v3. The vast majority of these payment terminals will be six to eight years old based on the 2021 date and near end of support from Ingenico.

Please keep in mind that this will not impact a Telium 2 iCT2xx terminal from processing payments. However, this may impact the authentication and ability to communicate between the Telium 2 iCT2xx to a customer facing peripheral such as iPP220/3X0.

Ingenico Group has developed a field downloadable software solution that can remotely update the secure communication software (IngeTrust PKI) so that the end customer can continue to use the customer facing terminals as they are today. Ingenico has this software solution available today for pilot testing.

Ingenico needs your cooperation to ensure all of your merchant customer base continue to have the best Ingenico experience. Ingenico will provide support to our partners with the software and terminal serials that may be impacted. The responsibility of our partners includes:

US: Communication of the available solution to any relevant ISO partner that purchased a terminal from you and is managing their merchant estate.

Canada and US: The partner that manages the install base of devices and has the relationship with the merchant customer is responsible for distributing the software update to their terminal estate and working directly with their end merchant in advance of the May 14, 2019 and April 14, 2021 dates.

Please contact your Ingenico account representative to determine the appropriate plan in addressing your install base by the above dates.

-US:Communication of the available solution to any relevant ISO partner that purchased a terminal from you and is managing their merchant estate.-Canada and US:The partner that manages the install base of devices and has the relationship with the merchant customer is responsible for distributing the software update to their terminal estateand working directly with their end merchantin advance of the May 14, 2019 and April 14, 2021 dates. Please contact your Ingenico account representative to determine the appropriate plan in addressing your install base by the above dates.