PCI Watch

Tracking changes across the Payment Card Industry

Terminal ESD Evaluation Device Test Application

v1.0a.r Type Approval Forms
Contact Acceptance DeviceChip & Platform

EMVCo Type Approval – Terminal ESD Evaluation – Device Test Application EMVCo Type Approval Terminal ESD Evaluation Device Test Application __________________________________________________ Version 1.0a.r September 2025

Application

Legal Notice

This document is subject to change by EMVCo at any time. This document does not create any binding obligations upon EMVCo or any third party regarding the subject matter of this document, which obligations will exist, if at all, only to the extent set forth in separate written agreements executed by EMVCo or such third parties. In the absence of such a written agreement, no product provider, test laboratory or any other third party should rely on this document, and EMVCo shall not be liable for any such reliance. No product provider, test laboratory or other third party may refer to a product, service or facility as EMVCo approved, in form or in substance, nor otherwise state or imply that EMVCo (or any agent of EMVCo) has in whole or part approved a product provider, test laboratory or other third party or its products, services, or facilities, except to the extent and subject to the terms, conditions and restrictions expressly set forth in a written agreement with EMVCo, or in an approval letter, compliance certificate or similar document issued by EMVCo. All other references to EMVCo approval are strictly prohibited by EMVCo. Under no circumstances should EMVCo approvals, when granted, be construed to imply any endorsement or warranty regarding the security, functionality, quality, or performance of any particular product or service, and no party shall state or imply anything to the contrary. EMVCo specifically disclaims any and all representations and warranties with respect to products that have received evaluations or approvals, and to the evaluation process generally, including, without limitation, any implied warranties of merchantability, fitness for purpose or non-infringement. All warranties, rights and remedies relating to products and services that have undergone evaluation by EMVCo are provided solely by the parties selling or otherwise providing such products or services, and not by EMVCo, and EMVCo will have no liability whatsoever in connection with such products and services. This document is provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in this document. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NONINFRINGEMENT, AS TO THIS DOCUMENT. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to this document. EMVCo undertakes no responsibility to determine whether any implementation of this document may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of this document should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, this document may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement this document is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party's infringement of any intellectual property rights in connection with this document.

Application

Revision History

Section Reason for change Editorial Updates

4. 4.

Application 1 SCOPE EMVCo, LLC (“EMVCo”) manages and maintains the EMV Integrated Circuit Card (ICC) Specifications for Payment Systems, hereinafter called the EMV Specifications. This document describes the ESD Device Test Application that a Terminal need to have to perform ESD testing. Also this document describe the Card requirements needed to verify the good functionality of the Device, after the ESD testing. The target audience of this document is:

  • Product Providers,
  • Laboratory (recognised to perform the type approval tests),
  • Auditors (qualified to verify that laboratories comply with the EMVCo processes and procedures). Readers are reminded that evaluation, when granted by EMVCo, shall not be construed as a warranty or representation of any sort, nor may it be relied upon by any party as an assurance of quality or functionality of any product or service. Please note the details of the legal notice incorporated in the front of this document for important limitations on the scope of ESD Evaluation. Application 2 NORMATIVE REFERENCES [N1] [N2] [N3] [N4] [ICS] [TA ESD] [TA Admin] EMV Integrated Circuit Card Specification for Payment Systems – Book 1 – Application Independent ICC to Terminal Interface Requirements EMV Integrated Circuit Card Application Specification for Payment Systems – Book 2 – Security and Key Management EMV Integrated Circuit Card Terminal Specification for Payment Systems – Book 3 – Application Specification EMV Integrated Circuit Card Terminal Specification for Payment Systems – Book 4 – Cardholder, Attendant, and Acquirer Interface Requirements EMVCo Type Approval – Terminal ESD Evaluation Implementation Conformance Statement EMVCo Type Approval – Terminal ESD Evaluation – Test Plan EMVCo Type Approval – Terminal ESD Evaluation – Administrative Process Version 4.3 – November 2011 Version 4.3 – November 2011 Version 4.3 – November 2011 Version 4.3 – November 2011 latest available latest available latest available Application 3 INTRODUCTION In the ESD test cases described in [TA ESD] document, steps 3 and 9 of the test procedure of each test case require that several checks are performed on the device under test, such as performing a transaction with a Chip card or a magstripe card. The goal of the present document is to describes the requirements of the terminal to be able to perform these checks, mainly: - The Device Under test software that shall be present. - The Payment Card requirement to perform the transactions. - The Network requirement to perform the transactions. Application 4 DEVICE SOFTWARE In order to perform a transaction used for Device verification, the Device under Test shall have on board one of the following software: - A EMVCo Application Kernel Level 2, - Or a dedicated Test Application.

4.1 EMVCO APPLICATION KERNEL The Device Under Test may be loaded with an Application Kernel Level 2 preferably approved. This Kernel shall be configured as for a sample submitted for the EMVCo Level 2 Type Approval.

4.2 TEST APPLICATION As a second choice, the Product Provider can load a Test Application. This Test Application shall perform the following steps: - Accept a Card according to EMV L1, - Send a Select ADF command with an AID according to EMV L2 Test Cases (AXP, JCB, MasterCard or VISA AID) and must be able to verify the PDOL data related length. All others data do not need to be parsed. - Send a Get Processing Options command with the PDOL requested length and the values set to zero. - After the GPO response, the Terminal shall prompt the user to enter an amount on the keyboard. - Amount entered shall be displayed at the display. - If terminal is online capable, a message shall be send to the Network simulator, and a responded message shall be accepted by the terminal. When the response is received correctly, the terminal shall show a message on the display. - If terminal support a printer, a paper receipt shall be printed - If terminal support magstripe reader, display shall show the message for swiping the card, and test application shall accept a correctly formatted magstripe card.

Application 5 PAYMENT CARD TO USE The Payment Card to use will be simulated with the L2 Contact Test Tool present in the Laboratory (this imply that the Lab shall be able to run and EMVCo Level2 testing). During the Verification procedure, step 3 and 9 of each ESD test Cases, this Tool will be used to run EMVCo Level 2 test cases:

  • the 2CT.020.00 for Offline only terminal and the 2CT.020.00 for all other Terminal.
  • Also if the terminal supports Magstripe a second test case shall be run the 2CM.109.00, for performing a magstripe transaction Application 6 NETWORK SIMULATOR For an online capable terminal, in order to be able to verify that the network interface works fine, the Product Provider shall provide with the Device under Test a network simulator. This simulator must be able, depending on the Terminal software, to: - If the Device is loaded with an Application Kernel L2: The simulator shall be the same as for Kernel L2 Type Approval. - If the Device is loaded with the Test Application, the simulator must: be able to receive a message from the Terminal, and be able to send a response message back to the terminal. Copyright ©2012-2025 EMVCo, LLC. All rights reserved