Need to manage a key injection program? Information Exchange can help.
Key injection can only be performed by certified firms. The payments industry refers to these mandated review certifications as the TR39, VISA PIN and PCI PSR reviews.
Cryptographic keys must be managed and secured. To comply with the requirements set forth by the major card issuers, the program’s methods and standards need to be assessed by an auditor that has been trained and certified. A secure key injection facility must undergo a field review in order to be approved for use when injecting equipment.
Information Exchange can facilitate the review and will highlight any weaknesses found in the program that must be addressed when attempting to achieve certification. During the field audit, the details of the cryptographic structure will be examined, the key injection procedures will be reviewed, and the life history of all keys will be discussed. PIN security procedural documents will be generated, and the management designee will also be briefed on the auditor’s findings. An auditor’s final certification will then be issued.