EMV® Terminal Type Approval – IFM Level 1 – Administrative Process

EMV® Terminal Type Approval IFM Level 1 Administrative Process Version 1.0a.r September 2025 © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page i / iv Legal Notice This document summarizes EMVCo’s present plans for evaluation services and related policies and is subject to change by EMVCo at any time. This document does not create any binding obligations upon EMVCo or any third party regarding the subject matter of this document, which obligations will exist, if at all, only to the extent set forth in separate written agreements executed by EMVCo or such third parties. In the absence of such a written agreement, no product provider, test laboratory or any other third party should rely on this document, and EMVCo shall not be liable for any such reliance. No product provider, test laboratory or other third party may refer to a product, service or facility as EMVCo approved, in form or in substance, nor otherwise state or imply that EMVCo (or any agent of EMVCo) has in whole or part approved a product provider, test laboratory or other third party or its products, services, or facilities, except to the extent and subject to the terms, conditions and restrictions expressly set forth in a written agreement with EMVCo, or in an approval letter, compliance certificate or similar document issued by EMVCo. All other references to EMVCo approval are strictly prohibited by EMVCo. Under no circumstances should EMVCo approvals, when granted, be construed to imply any endorsement or warranty regarding the security, functionality, quality, or performance of any particular product or service, and no party shall state or imply anything to the contrary. EMVCo specifically disclaims any and all representations and warranties with respect to products that have received evaluations or approvals, and to the evaluation process generally, including, without limitation, any implied warranties of merchantability, fitness for purpose or noninfringement. All warranties, rights and remedies relating to products and services that have undergone evaluation by EMVCo are provided solely by the parties selling or otherwise providing such products or services, and not by EMVCo, and EMVCo will have no liability whatsoever in connection with such products and services. This document is provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in this document. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NONINFRINGEMENT, AS TO THIS DOCUMENT. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to this document. EMVCo undertakes no responsibility to determine whether any implementation of this document may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of this document should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, this document may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement this document is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party's infringement of any intellectual property rights in connection with this document. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page ii / iv Revision Log – Version 1.0a.r The following changes have been made to the document since the publication of Version 1.0a: Editorial updates. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page iii / iv Contents 1 Introduction........................................................................................................ 1 1.1 Audience ..................................................................................................... 1 1.2 Normative References ................................................................................ 2 1.2.1 EMV Specifications ......................................................................... 2 1.3 Other References........................................................................................ 2 1.4 Definitions ................................................................................................... 2 1.5 Notational Conventions ............................................................................... 8 1.5.1 Abbreviations................................................................................... 8 1.5.2 Terminology and Conventions ......................................................... 8 2 Type Approval Overview ................................................................................. 10 2.1 Scope of Level 1 Type Approval ............................................................... 10 2.2 Structure of the Type Approval Process.................................................... 10 2.3 The Interface Module (IFM) Concept ........................................................ 11 2.3.1 2.3.2 2.3.3 2.3.4 2.3.5 2.3.6 Mechanical ICC Interface .............................................................. 14 Electrical ICC Interface.................................................................. 14 Logical ICC Interface ..................................................................... 14 APDU Interface ............................................................................. 14 Mechanical Construction ............................................................... 14 Rest of Terminal ............................................................................ 14 2.4 Type Approval Life Cycle Concept ............................................................ 15 2.4.1 IFM Life Cycle and Type Approval Milestones............................... 15 2.5 ICS Submission rules................................................................................ 17 2.5.1 ICS Submission ............................................................................. 17 2.5.2 ICS replacement............................................................................ 17 2.6 EMVCo Type Approval fee structure ......................................................... 18 3 Roles and Responsibilities ............................................................................. 19 3.1 EMVCo CATA Secretariat ......................................................................... 19 3.2 Test Laboratory ......................................................................................... 19 3.2.1 Multiple Test Laboratories ............................................................. 19 3.3 Auditor Team ............................................................................................ 20 3.4 Product Provider ...................................................................................... 20 3.5 EMVCo ..................................................................................................... 20 4 Type Approval Procedure ............................................................................... 21 4.1 Registration............................................................................................... 21 © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page iv / iv 4.1.1 Contract with EMVCo .................................................................... 22 4.2 IFM Type Approval Test ............................................................................ 23 4.2.1 4.2.2 Contract Requirements between Test Laboratories and Product Providers ...................................................................................................... 24 Type Approval Test Report............................................................ 24 4.3 Product Provider Preparation for Approval Request.................................. 26 4.3.1 Product Provider decision on submission to EMVCo for review .... 26 4.3.2 Submission to Review ................................................................... 26 4.4 Product Provider Dossier .......................................................................... 27 4.5 EMVCo Review and Approval ................................................................... 28 4.6 Approval with Conditions........................................................................... 29 4.6.1 Compliance Time Frame ............................................................... 29 4.7 Type Approval Renewal Process .............................................................. 30 4.7.1 4.7.2 4.7.3 4.7.4 4.7.5 4.7.6 4.7.7 Basic Policy ................................................................................... 30 IFM Late Renewal. ........................................................................ 31 IFM Anticipated Renewal............................................................... 31 Restricted Renewal Policy ............................................................. 32 Level 1 renewal versus Level 2 renewal ........................................ 32 Test Laboratory for renewal testing ............................................... 32 ICS Submission ............................................................................. 32 5 Test Version and Specification Change ......................................................... 33 5.1 Test Changes without Specification Update and Application Note ............ 33 5.2 Test Changes Due to Specification Update and Application Note ............. 34 6 IFM Change Management................................................................................ 36 6.1 Major and Minor Changes ......................................................................... 36 6.2 Change of Name and Address .................................................................. 36 6.3 Re-Issuance of LoA .................................................................................. 36 7 Appendix .......................................................................................................... 37 7.1 Product Provider Forms ............................................................................ 37 © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 1 / 37 1 Introduction EMVCo, LLC (“EMVCo”) is the owner of the EMV® Level 1 Specifications for Payment Systems – EMV Contact interface Specification (version 1.0), hereinafter called EMV Specification. The objective of Terminal Type Approval is to verify the conformance of terminals to the EMV Specifications, and thereby facilitate global interoperability with ICCs that conform to the EMV Specifications. The present document, ‘EMVCo Terminal Type Approval: Level 1 Administrative Process’, describes the overall terminal level 1 Type Approval process and the templates and forms to be completed by the participants in the process 1.1 Audience The target audience for this document includes: • Product Providers; • Test Laboratories recognised to perform the Type Approval tests; • Auditors acting on behalf of EMVCo. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r 1.2 Normative References Page 2 / 37 1.2.1 EMV Specifications Table 1-1: EMV Specifications Reference [D01] [SB-284] [SB-298] Publication Name “EMV® Level 1 Specifications for Payment Systems – EMV Contact interface Specification” "Specification Bulletin No. 284 – Contact – Clarification for Procedure Byte Use" "Specification Bulletin No. 298 – Contact – Clarification of Terminal Timing for Consecutive Characters " Version version 1.0, October 2022. First Edition, March 2023 First Edition, September 2023 1.3 Other References Table 1-2: Other documents Reference [TB1] Publication Name Version EMV Terminal Type Approval Bulletin 185: Terminal Latest Version Type Approval Fees available 1.4 Definitions The following terms are used in this specification: Term Recognition Answer to reset (ATR) Table 1-3: Definitions Definition Formal recognition by EMVCo that an auditor or Test Laboratory is competent to carry out specific functions defined as defined by EMVCo Type Approval procedures. String of bytes sent by the ICC in response to the reset by the terminal. These bytes convey information to the terminal that defines certain characteristics of the communication to be established between the ICC and the terminal. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 3 / 37 Term Definition Application protocol data unit (APDU) A message sent from the IFD to the card or conversely. It may contain either a command message or a response message. Auditor Independent, impartial entity that verifies Test Laboratory conformance to EMVCo-defined Type Approval procedures. Block A succession of characters comprising two or three fields defined as prologue field, information field, and epilogue field. Byte 8 bits. Card A payment card as defined by a payment system. Compliance See Conformance. Conformance Meeting all the requirements and also any implemented optional requirements. Delta Testing The difference between the test plan version the product was approved against versus the current version of the test plan, when the product is reaching its Renewal date. Device under test (DUT) System, module, part, or component actually tested or to be tested. Implementation conformance statement (ICS) A form completed by the Product Provider listing all optional functions as specified in the reference specification implemented in the IFM. It includes the IFM’s type identification and external operating conditions. Implementation under A virtual or abstract device, implementing the EMV specification, to test (IUT) be submitted for testing. Integrated circuit card A card into which one or more integrated circuits are inserted to (ICC) perform processing and memory functions. Integrated circuit(s) Electronic component(s) designed to perform processing and/or memory functions. Interface device (IFD) The part of a terminal into which the ICC is inserted, including such mechanical and electrical devices that may be considered part of it. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 4 / 37 Term Definition Interface module (IFM) A virtual or abstract device that contains the necessary hardware and software to power the ICC and to support communication between the terminal and the ICC up to the transport layer. The three main functional components are the mechanical, electrical and logical ICC interfaces. IFM interoperability The minimum requirement as defined in EMV Specification which permits the ICC and the IFM to communicate with each other in a predictable and consistent manner globally. Product Provider The entity that submits the interface modules for level 1 testing. International Electrotechnical Commission (IEC) Formerly known as the International Electromechanical Commission, a standards group that works with the International Organization for Standardization (ISO) and covers the field of electrical and electronic engineering, with all other subject areas being attributed to ISO. ISO collaborates closely with the IEC on all matters of electrotechnical standardization. International Organization for Standardization (ISO) An international body that provides standards for financial transactions and telecommunication messages. ISO works in conjunction with the International Telecommunication Union (ITU) for standards that affect telecommunications. ISO supports specific technical committees and work groups to promulgate and maintain financial service industry standards. Letter of Recognition Written statement that confirms a Test Laboratory is performing Type Approval tests in conformance to the rules defined by EMVCo. Letter of approval Written statement that documents the decision of EMVCo that a specified product type has demonstrated sufficient conformance to the EMV Specification on the date of testing. Level 1 test The execution of a defined set of electrical, mechanical, and communication protocol tests versus requirements described in part 1 of the EMV Integrated Circuit Card Specification for Payment Systems. Level 1 test report The report documenting the results of level 1 testing on an IFM performed by an recognised laboratory. Lower tester (LT) The ICC simulator that allows the IUT to react under normal and error conditions. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 5 / 37 Term Definition Magnetic stripe The stripe on the physical card containing magnetically encoded information. Major modification Technical change to an IFM or its functionality that implies that the Product Provider can no longer guarantee conformance of the modified IFM with the requirements of part 1 of the EMV Integrated Circuit Card Specification for Payment Systems. Message A string of bytes sent by the terminal to the card or vice versa, excluding transmission-control characters. Minor modification Technical change to an IFM or its functionality that does not affect the functionality of the modified IFM with respect to the requirements of part 1 of the EMV Integrated Circuit Card Specification For Payment Systems. Nibble The four most significant or least significant bits of a byte. Open system interconnection (OSI) A seven-layer model, defined by ISO/IEC 7498, for describing interconnected systems. The seven layers are the physical, data link, network, transport, session, presentation, and application layers. Procedure Specified way to perform a set of tasks. Proficiency Ability of a Test Laboratory to perform the specified tests in an exact and reproducible fashion and to provide an accurate test report. Protocol Method of communication between the ICC and the terminal, represented in this specification by T=0 (character protocol) and T=1 (block protocol). Prototype Implementation of a design for evaluation purposes but where Type Approval is not required. Quality system Implemented procedures that mandate the operations to be performed by an organization’s staff in order to assure accomplishment of the organization’s activity with an acceptable level of quality. Reference specification (EMV Specification) A set of documents defining the requirements to which the IFM shall comply. The reference specification consists of the current EMV Integrated Circuit Card Specification for Payment Systems and any additional documentation required to perform Type Approval. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 6 / 37 Term Definition Registration number A unique identification number assigned by EMVCo to an Product Provider . Renewal Extension given to the IFM Approval at the end of its validity date after evaluation that the specified product has demonstrated sufficient conformance to the current EMV specification at the time of the renewal. Request for approval A form that accompanies an IFM submitted to EMVCo for Type Approval. Response A message returned by the ICC to the terminal after the processing of a command message received by the ICC. Restricted Renewal Extension given to the IFM Approval at the end of its validity date, after failing Renewal testing. The specified product has demonstrated sufficient conformance to current critical EMV functionality at the time of the Renewal. Sample A terminal, including the IUT, picked out of production for testing. Service provider The entity that provides a product or a service to customers, using terminals and a payment system. State H Voltage high on a signal line. This condition may indicate a logic one or logic zero depending on the logic convention used with the ICC. State L Voltage low on a signal line. This condition may indicate a logic one or logic zero depending on the logic convention used with the ICC. System integrator the entity that integrates IFM(s) and devices containing IFM(s) into a system for use by a service provider. System under test (SUT) System, module, part, or component actually tested or to be tested (either a part of the terminal or the entire terminal), including the IUT. T=0 Character-oriented asynchronous half-duplex transmission protocol. T=1 Block-oriented asynchronous half-duplex transmission protocol. Terminal application layers (TAL) The part of the terminal that initiates a command. It sends an instruction via the terminal transport layer (TTL) to the ICC in the form of a 5-byte header called the command header. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 7 / 37 Term Definition Terminal The device used in conjunction with the ICC at the point of transaction to perform a financial transaction. It incorporates the IFD and may also include other components and interfaces, such as host communications. Test Any activity that aims at verifying the conformance of a selected product or process to a given requirement under a given set of conditions. Test bench A defined combination of a set of test methods and test equipment used for Type Approval tests. Test case A description of the actions required to achieve a specific test objective. Test Laboratory (or Testing Laboratory or Laboratory) A facility that performs Type Approval testing. Type Approval Acknowledgment by EMVCo that the specified product has demonstrated sufficient conformance to the EMV Specification for its stated purpose. Type Approval documentation Full set of documents and procedures issued by EMVCo to enable the Type Approval process. Section 2.1.2 provides the list of documents associated with terminal level 1 Type Approval. Type Approval process The processes that test a product type for compliance with specification. Type Approval test The execution of a defined set of tests against requirements described in a specification to determine compliance with that specification. Type Approval test information List of documents and procedures provided to the Test Laboratories to facilitate the Type Approval process. Type Approval test report The result of Type Approval testing on a product. Type identification Information describing the form, fit and functionality of the IFM type, to be delivered to the Test Laboratory together with the IFM samples. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 8 / 37 Term Definition Upper tester (UT) The internal (or back external) application of the IFM that emulates a real application in order to test the IUT under all possible conditions. Warm reset The reset that occurs when the reset (RST) signal is applied to the ICC while the clock (CLK) and supply voltage (VCC) lines are maintained in their active state. 1.5 Notational Conventions 1.5.1 Abbreviations The abbreviations listed in Table 1- 4 are used in this specification. Abbreviation APDU ICC ICS IFD IFM Table 1- 4: Abbreviations Description Application Protocol Data Unit Integrated Circuit card Implementation Conformance Statement Interface Device Interface Module 1.5.2 Terminology and Conventions The following words are used often in this specification and have a specific meaning: Shall Defines a product or system capability which is mandatory. May Defines a product or system capability which is optional or a statement which is informative only and is out of scope for this specification. Should Defines a product or system capability which is recommended. The following conventions apply: © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 9 / 37 Requirement Numbering Requirements in this specification are uniquely numbered with the number appearing next to each requirement: For example: Example The PCD shall verify the BCC included in the UID CLn. The PCD shall consider an incorrect BCC as a transmission error. A requirement may have different numbers in different versions of the specifications. Hence, all references to a requirement should include the version of the specification as well as the requirement’s number. Requirements may include informative statements. In this case the statement is written in the italic font and the verb ‘may’ instead of ‘shall’ is used. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 10 / 37 2 Type Approval Overview Type Approval is the process that tests a product type for compliance with the EMV Specification. The following sections identify the scope, purpose, structure, IFM concept, and roles and responsibilities. 2.1 Scope of Level 1 Type Approval EMVCo testing comprises two levels. • Level 1 is based on [D01]. • Level 2 is based on of the EMV Integrated Circuit Card Specification for Payment Systems (Books 1, 2, 3 and 4) The IFM is the part of the device that is tested for compliance with level 1. If the IFM alone does not constitute an operable device, other components that allow the operation of the IFM may also be submitted for testing. Testing and approval, however, apply only to the designated IFM, not to other components. The approval shall list the designated IFM with reference to the device the IFM was contained. Figure 2.1 describes the terminal architecture and identifies the level 1 capabilities. Level 2 is out of the scope of the terminal level 1 Type Approval process. Figure 2.1: Terminal architecture and level capabilities 2.2 Structure of the Type Approval Process The Type Approval process is based on set of documents called Type Approval documentation. Figure 2.2 shows the tree structure of these documents and the intended readers. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Figure 2.2 – Type Approval documentation Page 11 / 37 The technical documents include the following: • EMV — Contact Terminal Level 1 Type Approval — Loopback Upper Tester Specification details the test-specific functions that an IFM shall support for testing purposes. • EMV — Contact Terminal Level 1 Type Approval — IFM Mechanical and Electrical Test Cases the mechanical and electrical tests that a Test Laboratory must perform based on EMV-established requirements (intended for all participants in the Type Approval process). • EMV — Contact Terminal Level 1 Type Approval — IFM Protocol Test Cases the protocol tests that a Test Laboratory must perform based on EMV-established requirements (intended for all participants in the Type Approval process). The administrative documents include the following: • EMV — Terminal Type Approval – IFM Level 1 — Administrative Process details the administrative procedures that each participant in the Type Approval process must follow, provides necessary forms and templates, and gives an overview of the Test Laboratory recognition procedure (intended for all participants in the Type Approval process). • EMV Type Approval — Card and Terminal Type Approval — Laboratory Recognition Requirements outlines the procedures that an auditor must follow in recognising a Test Laboratory to perform Type Approval tests (intended for auditors and EMVCo) and details all requirements that a Test Laboratory must fulfill to earn Type Approval testing recognition (intended for laboratories, auditors, and EMVCo). 2.3 The Interface Module (IFM) Concept Level 1-Type Approval tests evaluate the part of a terminal that consists of: © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 12 / 37 • An interface device (IFD), also called an ICC reader or card connector assembly • The necessary hardware and software to power the ICC and to support communication between the terminal and the ICC up to the fourth OSI layer (transport layer) This abstract configuration of IFD, hardware, and software has been designated the interface module (IFM). The physical implementation of the IFM includes all physical parts of the terminal related to the IFM. Figure 2.3 is a model of an IFM contained within a terminal and shows what is external for a level 1 approval. This diagram does not imply that a real IFM must have functionally separate parts but is for illustration purposes only. Figure 2.3– IFM and Terminal model Perimeter A is the smallest subpart that may be identified as an IFM by the Product Provider, if it fulfills all the level 1 requirements of the EMV Specification. Perimeter B IFM is contained within this device for the purpose of testing. Note : Depending on a Product Provider design A & B may be one and the same identification. Perimeter C includes all additional hardware for the terminal, outside the scope of level 1 terminal Type Approval. This includes: • Any supporting hardware and software that enables the terminal functions, including the IFM function • Any hardware and software system into which the terminal must be integrated to form an actual payment terminal (such as an ATM) • Any other hardware and software system in which the terminal is physically integrated to form a payment and service-providing system (such as an automatic gas station or vending machine) © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 13 / 37 Perimeter D and E are relevant only for the definition of the communication interfaces and the method of software loading and are out of scope. Perimeter F includes the entire supporting environment (such as mechanical fixation, supporting furniture, etc.). Figure 2.4 represents the three main functional parts that may form an IFM (incorporated in a terminal, in an ATM, etc.). The diagram does not mean to imply that an IFM must have functionally separate parts. Figure 2.4– Functional elements of an IFM The three main functional elements of an IFM are the mechanical ICC interface, the electromechanical ICC interface, and the logical ICC interface. The terminal level 1-Type Approval tests must apply to these functional parts, but any functions that these parts perform beyond the IFM functionality are not tested in the Type Approval procedure. The mechanical construction is not considered a functional part of the IFM. The rest of terminal covers all hardware and software that, together with the IFM, forms an operable system such as terminal or, an ATM. Implementations of the specified IFM functionality can be divided into three classes of IFM(s): • Modular IFM: The components and software modules supporting the IFM functions can be clearly identified and separated, and the control lines of the mechanical and electrical interfaces and the APDU interface are physically accessible. The components and interfaces constitute a separate subassembly within the terminal. Implementation of the modular IFM into different terminals (following the rules for implementation) or the change of functionality of the rest of the terminal does not interfere with any specified IFM functionality or performance. • Distributed IFM: The components and software modules supporting the IFM functions can be clearly identified and may be distributed within the rest of the terminal. The control lines of the mechanical and electrical interfaces and the APDU interface are physically accessible. Changing the IFM implementation or the © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 14 / 37 functionality of the rest of the terminal does not interfere with any specified IFM functionality or performance. • Integrated IFM: The components and software modules supporting the IFM functions cannot be clearly identified and separated, and the control lines of the mechanical and electrical interfaces and the APDU interface may not physically exist or may not be physically accessible. Changing the IFM implementation or the functionality of the rest of the terminal may influence IFM functionality or performance. 2.3.1 Mechanical ICC Interface The mechanical ICC interface is the part of an IFM or terminal where an ICC is physically inserted, exactly positioned, and electrically contacted. The physical, mechanical, and card movement requirements outlined in the EMV Specification are all applicable to this interface. Additional mechanical and electrical hardware- and software-enabling functionality’s outside the scope of the EMV Specification are not covered by this document 2.3.2 Electrical ICC Interface The electrical ICC interface is the functional component or part of the IFM that controls the electrical signals to and from the ICC contacts. The electrical requirements outlined in the EMV Specification are applicable to this interface. 2.3.3 Logical ICC Interface Card Session, Physical Transportation of Characters, Transmission Protocols requirements outlined in the EMV specification are applicable to the logical ICC interface part of the IFM or terminal upon which the functional tests will be applied. 2.3.4 APDU Interface The APDU Interface is that part of the terminal through which the logical ICC interface communicates with the rest of the terminal using APDU commands and responses. For verification testing against the EMV Specification, the APDU interface must be directly accessed or indirectly verified. 2.3.5 Mechanical Construction The mechanical construction comprises all parts and components physically supporting the mechanical, electrical, and logical interfaces, the physical ICC transport, the outer case structure, and other construction parts not covered by the EMV Specification. 2.3.6 Rest of Terminal The rest of terminal contains all hardware, software, and functionality that, combined with the IFM, creates an operable system (such as a terminal, an ATM, etc.). The rest of terminal is not defined in the EMV Specification and is not part of the Type Approval tests. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r 2.4 Type Approval Life Cycle Concept Page 15 / 37 2.4.1 IFM Life Cycle and Type Approval Milestones An IFM life cycle can be identified according to the position of the Type Approval milestone: (Figure 2.5). Figure 2.5 – Functional elements of an IFM Design Phase The IFM is developed by an entity directly related to the IFM or terminal provider and/or the manufacturer of the IFM(s). Most importantly, IFM design and development must be in accordance with the EMV Specification, as well as any other applicable specifications (e.g., government standards). Prototyping Phase The IFM design is checked and tested against all related specifications. EMVCo recommends that conformance testing against the EMV Specification is conducted on the prototype before proceeding to Type Approval, preferably with tools equivalent to those used for Type Approval tests. The Product Provider must identify which options its IFM design has incorporated from the EMV Specification and gather the information to be submitted in the Type Approval process. Before starting production, reference implementations of the IFM type must be submitted for Type Approval tests to demonstrate conformance with the required specifications. Type Approval Test Phase EMVCo judges conformance of the IFM design against the EMV-specifications. To determine conformance, reference implementations of the IFM type must undergo predefined tests in a specified test environment (Test Laboratory). The Samples, submitted to Test Laboratory must be representative of final product. After the letter of approval has been granted, it is valid as long as the following applies: © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 16 / 37 • The IFM design is the same in production as the device, which was tested and approved. • If the approval is not revoked by EMVCo. • The current production IFM maintains the same characteristics as the tested sample based upon the samples test report. • The renewal date is not past. Any change in the IFM design, as specified in the section titled Major and Minor changes of this document, may create a new IFM, whether it occurs before, during, or after production. Type Approval of that new IFM is not presumed. Approval Renewal Phase Renewal Prior to the renewal date, Product Providers may request a renewal by submitting the originally approved product to EMVCo for renewal testing. The purpose of this renewal testing is to ensure that these products pass the most current EMVCo testing. By passing the renewal test, the product will receive an extension to the Letter of Approval. Products not passing Renewal testing can apply for a Restricted Renewal. Alternatively, after the Renewal date, they will be removed from the approved products list, and their Letter of Approval will be considered revoked. Restricted Renewal Products which fail Renewal testing are eligible to apply for a one-time Restricted Renewal. The failed test case results from the product’s Renewal test session can be submitted for a Restricted Renewal approval. A product which demonstrates sufficient conformance to critical EMV functionality will be granted a Restricted Renewal and listed as such on the EMVCo website on a dedicated list. Products not passing Restricted Renewal testing will be removed from the approved products list, and their Letter of Approval will be considered revoked, after the Renewal date. Only products which have previously failed Renewal testing will be considered for a Restricted Renewal. A product having already been approved for a four years extension as a Restricted Renewal will not be eligible to apply for a further Restricted Renewal. End of Design Life The end of the design life of an approved terminal/IFM type is reached when production of that type is finally stopped. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r 2.5 ICS Submission rules Page 17 / 37 2.5.1 • • • • • • ICS Submission The initial ICS submission to the EMVCo is free of charge. The ICS submitted must be the ICS in pdf format, capable of importing/exporting XML format and shall be digitally signed by the Product Provider and the Test Laboratory at the time of submission to EMVCo. The Test Laboratory supplies the signed copy of the Product Provider-supplied ICS to EMVCo for review prior to the start of the Type Approval testing process. EMVCo will review and approve the ICS by returning the ICS in pdf digitally signed and with the official ICS number. In case the ICS is incorrectly filled, decline fee applies to Test Laboratory. ICS submission shall be always done using the latest version of the ICS available at the time of the submission on EMVCo website. During the migration period, former version of the ICS available on the website may be used. 2.5.2 ICS replacement • One free ICS replacement is allowed during the ICS life cycle. Any subsequent ICS replacement requested will be charged to the Product Provider. • Same submission process applies as for initial ICS submission (Test Laboratory submits the changed ICS). • This applies to any change in the ICS after the official approval of the ICS by EMVCo. • After the start of the test session of the Product, ICS replacements (following the rules of the previous bullet) are only allowed for administrative information update (such as name of product) but not are not allowed for technical information update. • Test Laboratory shall ensure that any ICS change requested is not made to hide a bug in the product (such as deactivation a function because this function is not working properly). • ICS replacement is no more allowed after Test Report submission to EMVCo. Note: ICS decline process remains and any error reported by EMVCo will be charged to the Test Laboratory (as Test Laboratory is responsible of reviewing the ICS provided by the Product Provider). ICS decline process applies to the initial ICS submission and also to any other ICS replacement (charged or not charged to the Product Provider). © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r 2.6 EMVCo Type Approval fee structure The following fee structure is applicable: • Initial Submission • ICS Replacement (starting at 2nd Replacement) • Renewal (or restricted) • Declined ICS/Report (Test Laboratory fee) • LoA reissuance Page 18 / 37 Note: The amount of each fees is published in Terminal Type Approval Bulletin 185. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 19 / 37 3 Roles and Responsibilities The following sections define the roles and responsibilities for the various participants in the Type Approval process. 3.1 EMVCo CATA Secretariat The EMVCo CATA secretariat is responsible for communicating Type Approval status to third parties and for the administration and maintenance of a database that provides the following: • Qualified auditor list • Recognised Test Laboratory list • Type Approval test requirements • Issue IFM approval letters • Approved IFM list 3.2 Test Laboratory The Test Laboratory is an entity recognised by EMVCo to test Product Provider IFMs according to Type Approval test requirements. 3.2.1 Multiple Test Laboratories Level 1 testing can be split between different EMVCo recognised Test Laboratories. When this is the case the following rules shall apply: • A single Test Laboratory is responsible for the Level 1 testing (primary Test Laboratory). o The primary Test Laboratory may subcontract some testing to other laboratories (subcontracted laboratories) o The primary Test Laboratory submits the ICS to EMVCo. o In case of ICS issue, fees will only be applied to the primary Test Laboratory o The primary Test Laboratory shall sign and submit to EMVCo all test reports o The subcontracted laboratories shall follow EMV rules. o The primary Test Laboratory will be responsible for subcontracted laboratories defects and may require additional audit. o The primary Test Laboratory shall document the sub contracted work into the test report • When testing is conducted at multiple laboratories, all test reports received must contain the same version number of the EMV application(s), operating system, and environment. • All rules regarding the samples shall be maintained. All samples at all laboratories are for the same version of the ICS. The reports shall clearly indicate which samples © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r were tested at each Test Laboratory. Page 20 / 37 Note: EMVCo’s expectation is that an EMVCo recognised Test Laboratory has to provide all services required to fully test a product. By opening to multi-lab model, EMVCo intends to provide with some flexibility to address specific and temporary situations (exceptional workload, test tool breakdown, new facility). 3.3 Auditor Team The auditor team comprises the persons in charge of conducting audits on behalf of EMVCo. 3.4 Product Provider The Product provider is the entity responsible for submitting terminals for Type Approval in compliance with Type Approval procedures and for notifying EMVCo when changes are made to type-approved terminals. 3.5 EMVCo EMVCo defines Type Approval requirements and evaluates operational results. EMVCo provides the following services: • Defines mandatory auditor recognition requirements • Recognises organizations that perform audits to establish Test Laboratory recognition • Defines mandatory Test Laboratory recognition requirements • Sets Test Laboratory audit time frame • Manages Test Laboratory appeals process and resolves recognition disputes • Determines the applicability of the EMV Specification and associated test requirements • Evaluates device Type Approval summary results to determine if approval requests should be granted • Notifies appropriate EMVCo working group of warranted specification corrections, clarifications, and enhancements that result from the conditional approval process • Evaluates terminal and card failure complaints to determine if Type Approval revocation is appropriate • Communicates Type Approval status to the EMVCo secretariat for subsequent communication to all participating payment systems. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 21 / 37 4 Type Approval Procedure The Type Approval procedure followed by Product Providers, laboratories, and EMVCo. Figure 4.1 shows the diagram of Type Approval procedure. Figure 4.1–Type Approval Procedure 4.1 Registration Registration provides the Product Provider with entry into the EMVCo approval process in order to make the application provider aware of all formalities that need to be finalized prior to submitting their final test report to EMVCo for approval. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 22 / 37 The registration process is composed of the following steps: • The Product Provider submits a registration request to the EMVCo Type Approval Secretariat. • Registration request document shall be sent to the EMVCo Type Approval Secretariat in pdf format (unlocked to ensure that copy and paste of information are possible) electronically signed. Scanned copies are not allowed. • The Product Provider will receive a confirmation email from EMVCo Type Approval Secretariat with the following additional information: o Link to the EMVCo Test Contract (DocuSign) o Appropriate contact information • The Product Provider shall sign the EMVCo Test Contract with DocuSign. • When the EMVCo Test Contract is countersigned by the EMVCo, the EMVCo Test Contract is sent back to the Product Provider by DocuSign. • A unique Registration Number is assigned and shared with the Product Provider on a Letter of Registration. 4.1.1 Contract with EMVCo The Product Provider must complete and sign the EMVCo defined contract before final test results are submitted to EMVCo for evaluation and possible approval. This contract governs the relationship between EMVCo and the Product Provider and includes the Product Provider‘s acceptance of all specifications, procedures, terms and conditions governing EMVCo Level 1 Type Approval. The contract is standard for all Product Provider to ensure consistent requirements for all participants. Contract customization for individual Product Providers is not possible. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 23 / 37 4.2 IFM Type Approval Test The following operations shall be performed by the Product Provider and by the Test Laboratory in the Type Approval procedure: • The Product Provider is free to select any EMVCo recognised Test Laboratory for the purpose of achieving EMVCo Type Approval. The Product Provider and Test Laboratory shall execute a contract defining appropriate rights and obligations. At a minimum, the contract shall contain the requirements listed in the following section. • Product Provider sends an Implementation Conformance Statement (ICS) to the chosen Test Laboratory for each implementation under test (IUT) that it submits. The ICS format and content requirements are determined by EMVCo. The ICS submitted must be the ICS in pdf format, and shall be digitally signed by the Product Provider at the time of submission to EMVCo. • The Test Laboratory supplies a copy of the Product Provider-supplied ICS to EMVCo for review prior to the start of the Type Approval testing process, digitally signed by the Application Product Provider and by the Test Laboratory: o As result EMVCo provides a unique ICS Reference Number Product Provider and the Test Laboratory must discuss IFM software requirements in order for the Test Laboratory to execute the EMVCo Type Approval test. • The Test Laboratory shall test the terminal in accordance with EMVCo test procedures. • Testing shall be performed in Test Laboratory premises with the complete solution samples located in these premises. • The Product Provider prepares the Request For Approval form and submits it to EMVCo. EMVCo can then issue the invoice for the Product Provider. RFA can be sent only after the ICS has been approved by EMVCo. • Product Provider submits payment to EMVCo based on the received invoice. • The Test Laboratory shall send the final test report to the Product Provider for approval before official submission to EMVCo. • When agreed by the Product Provider, the Test Laboratory shall submit the Test Report to EMVCo, and ensures Product Provider has already submitted his completed Request For Approval form. Note: An Approved ICS is valid 6 months. If the related request for Approval is not submitted and the invoice is not paid within that period, all related documents to this approval request are no more valid (ICS, RFA, report) and a new process shall be restarted. Note that in this case the invoice is not be reimbursed. Note: If the test session has not started yet and the ICS already been approved, when a new EMVCo release of the ICS is published (I.e. after the migration period when applicable), then the ICS shall be resubmitted with new latest ICS version before Test Laboratory can submit the report. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 24 / 37 4.2.1 Contract Requirements between Test Laboratories and Product Providers EMVCo requires that the Product Provider and the Test Laboratory enter into a Type Approval test contract that includes at least the following provisions: • Any laboratory requirements needed for testing including any software application required interfacing with the laboratory test equipment. Within the EMVCo documents this is referred to as an Upper Tester. • Reference to the contract between the Product Provider and EMVCo • Agreement of mutual cooperation in providing needed information and assistance • Lead time for the execution of the Type Approval tests • Three samples are available for testing • Arrangement for the preparation and delivery of samples • Right to keep all samples for the duration of the test procedure • Right to keep all approved samples for a period of the LoA validity + 1 year. Note: samples are retained for subsequent testing purposes and the Product Provider must provide the necessary support to the Test Laboratory to ensure the IFM remains fully functional. • Recognition that no infringement on the freedom of the Test Laboratory will be allowed during or after testing • Agreement on use of the test report • Provisions for conflict resolution • Maintaining the IFM sample at the Test Laboratory during EMVCo evaluation of test results. 4.2.2 Type Approval Test Report The results of the level 1 Type Approval tests are combined in one signed report called the test report, which includes, at a minimum, the following items: • Identification of the Test Laboratory • Identification of Product Provider • Identification of IFM sample • Identification of any other Product Provider equipment (e.g.. terminal model) • Implementation Conformance Statement Reference Number • EMVCo specification/test case version used for test • Identification of all Test Laboratory testing equipment and software versions used during the tests • Dates test were performed • Description of the Test Laboratory environmental conditions during testing • The Test Laboratory should maintain all test result logs for all test cases and they should be made available for EMVCo review as requested • If Product Provider is submitting a test report with areas that were recognized as having non-conformance for an approval with conditions, the Product Provider needs © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 25 / 37 to describe these area’s along with rational as to why these non-conformance would not affect interoperability and a proposed plan to resolve the issues • A summary test report including: o The Type Approval tests that were executed with a pass or fail indication o A detailed description from the Test Laboratory of failed tests including logs of the test results for each reported discrepancy in the failed test. o A detailed description of any exception test(s) performed or equipment utilized and a description of related test results o A detailed description of the IFM modifications that may be required for the purpose of executing the EMVCo test cases. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 26 / 37 4.3 Product Provider Preparation for Approval Request 4.3.1 Product Provider decision on submission to EMVCo for review The Product Provider determines whether test results resulting from Test Laboratory testing will be submitted to EMVCo for evaluation. Submitting test results to EMVCo for evaluation indicates Product Provider acceptance that the test results are a true representation of IFM performance. Test results may be submitted to EMVCo for evaluation up to 90 days from the date they are generated by the Test Laboratory. Test results that exceed the 90-day validity period have expired and cannot be submitted. IFM re-testing is required to create a current test report if the validity period is exceeded and EMVCo evaluation is desired. The Product Provider must ensure that the Implementation Under Test (IUT) samples associated with test results submitted to EMVCo for evaluation remain unaltered and accessible in a timely manner during the evaluation process. It is recommended that the IUT remain in the possession of the Test Laboratory until EMVCo has approved or declined the request for approval. 4.3.2 Submission to Review To complete the request for approval previously sent, (see 5.2.3.2), the Test Laboratory shall submit to EMVCo an original signed copy or electronic copy digitally signed of the Test Report. Note 1: Product Provider must give consent for the Test Laboratory to submit the Test Report to EMVCo directly. Note 2: This step can be done at the same time as or after the EMVCo fee payment. However Product Provider shall be aware that EMVCo review will only start once the fee paid. The request for review is considered completed once EMVCo has received: • The Request For Approval form filled-in, including the official name of the Product Provider requesting the approval as well as their registration number. • The complete Test Report received from the Test Laboratory, including the signed copy of the Implementation Conformance Statement (ICS), as submitted by the Product Provider to the Test Laboratory. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 27 / 37 4.4 Product Provider Dossier The dossier submitted to EMVCo will comprise: o A signed copy of the Implementation Conformance Statement (ICS), received from the Test Laboratory o Letter requesting approval (Request For Approval form) received from Product Provider o Product Provider payment o The complete and unchanged Test Report received from the Test Laboratory o Any additional supporting documentation the Product Provider believes is appropriate © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 28 / 37 4.5 EMVCo Review and Approval Upon receiving the dossier, EMVCo will: • Review the submitted Test Report and determine if Type Approval should be granted • Notify the Product Provider of Type Approval or denial. • Issue Letter of Approval • Provide notification of IFM Type Approval EMV IFM LoA identifies: • the approved IFM name and its two sub-sets: o IFM hardware name, o IFM firmware/software name, • the Product type name in which it was tested, • the EMV Specifications version against which it was tested, • the Test Plan version against which it was tested, • the renewal date. IFM LoA number coding is the following: Figure 4.2: IFM LOA number coding © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 29 / 37 4.6 Approval with Conditions EMVCo processes may allow an approval with conditions at the discretion of EMVCo for cases of minor non conformance that do not impact interoperability. 4.6.1 Compliance Time Frame All identified items of non conformance must be rectified according to the stipulated time frame stated in the terms and conditions associated with an Approval with Conditions. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r 4.7 Type Approval Renewal Process Page 30 / 37 4.7.1 Basic Policy An IFM approval is valid for 4 years. Every 4 years, EMVCo evaluates whether the product demonstrates sufficient conformance to the current EMV specification. If the evaluation result is positive then EMVCo gives an extension to the IFM Letter of Approval. After the renewal date, IFMs not passing renewal testing or Restricted Renewal evaluation will be removed from the approved IFMs list and their Letter of Approval will be considered revoked. Six months before the renewal date of their Product, EMVCo will send a notification letter to the Product Providers. Upon receipt of this letter, and prior to the Renewal date, Product Providers may request their renewal by submitting the originally approved product to EMVCo for renewal testing. Note : Product Providers are not allowed to apply for Renewal testing before receiving the notification letter (except in case of anticipated renewal see section 4.7.3 for more details). © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 31 / 37 Renewal Test Plan The Renewal Test Plan will be generated based on the newly added and/or modified test cases since the older Test Plan the IFM was tested against and the most current test plan at the time of testing, plus regression testing. The most current test plan reference is the version available at the time of the Type Approval test session. 6 months before the renewal date, Product Providers may submit the original sample to a Test Laboratory for Renewal Testing. Note: Renewal test session shall be performed using the same sample that was tested during initial Approval. In case of multiple samples used during initial Approval: • The sample used to perform Electrical and Mechanical tests during initial Approval shall be used to perform Electrical and Mechanical Renewal tests. • The sample used to perform Protocol tests during initial Approval shall be used to perform Protocol Renewal tests. The objective of Renewal testing is to ensure these products pass the most current EMVCo testing. By passing the renewal test, the product will receive an extension to the Letter of Approval. 4.7.2 IFM Late Renewal. Even after the Product expiration, Product Provider may decide to apply for a Late Renewal. All rules of renewal listed in the section 4.7 apply with the following changes: • Late renewal can be requested during the year following the product expiration, • Test Plan version at the date of the ICS submission applies, • If Late Renewal is granted, LoA will be extended for a duration date of 4 years starting from initial Renewal date (for example in case of Late Renewal started 1 year after expiration of the LoA, LoA will be valid only 3 years after Late Renewal). Note: As a reminder, Expired Products are removed from the approved products list and their LoA are revoked until Renewal is granted. 4.7.3 IFM Anticipated Renewal. Even before the Product Renewal period, Product Provider may decide to apply for an anticipated Renewal. All rules of renewal listed in the section 4.7 apply with the following changes: • Anticipated Renewal can be requested anytime before the product expiration, up to one year before the Expiration Date of the LoA of the Product. • Test Plan version at the date of the ICS submission applies. • If Anticipated Renewal is granted, the Expiration Date of the renewed LoA will be computed starting from the reception date of the Request for Approval form of the Anticipated Renewal. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 32 / 37 4.7.4 Restricted Renewal Policy EMVCo offers a process to allow IFMs to receive a Restricted Renewal if they fail Renewal testing but pass all critical tests. IFMs which reach their Renewal date, but fail to pass Renewal testing, can apply for a Restricted Renewal. Eligible products will be required to submit details of the Renewal test case failures to an EMVCo approved reviewer (listed on the EMVCo website) who will grade the test case failures as critical, medium or minor and enter the details into an assessment report. EMVCo will then review the report to determine whether a Restricted Renewal can be granted An acceptable report would result in the IFM being assigned a Restricted Renewal and listed as such on the EMVCo website in a dedicated list. In case of not acceptable report, upon expiry of the LoA the IFM will be removed from the approved products list and its Letter of Approval will be considered revoked. A product can receive only one extension (four years for IFMs) as a Restricted Renewal. Products must always be submitted for Renewal testing prior to consideration for Restricted Renewal. 4.7.5 Level 1 renewal versus Level 2 renewal In a single submission for both level 1 IFM and level 2 Kernel renewal, when a Level 1 IFM fails the renewal testing and a Level 2 product passes the renewal testing, the Level 1 will be considered revoked and only the Level 2 product will be renewed. In a separate submission where If the original Level 1 IFM has failed the renewal testing, the kernel Product Provider has to transfer the same kernel code without modification or recompilation onto a new approved and valid IFM. The OS and the checksum have to be the same as the original product. 4.7.6 Test Laboratory for renewal testing The Product Provider may select a different Test Laboratory to perform Renewal testing. The Product Provider must make the necessary arrangements to have the originally approved IFM transported between laboratories. The Product Provider is responsible for incurring the costs associated with this transfer. 4.7.7 ICS Submission If the IFM does not support mandatory features described in the latest version of the ICS, the product is not eligible for renewal. ICS submitted for Renewal testing must be based on the latest version available at the time of testing. © 2001-2025 EMVCo, LLC. All rights reserved. Reproduction, distribution and other use of this document is permitted only pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV® is a registered trademark or trademark of EMVCo, LLC in the United States and other countries. EMV® Terminal Type Approval IFM Level 1 Administrative Process v1.0a.r Page 33 / 37 5 Test Version and Specification Change The following section identifies the process managing Type Approval test changes as specification or test cases change. 5.1 Test Changes without Specification Update and Application Note EMVCo reserves the right to change Type Approval tests at any time in order to increase the accuracy and integrity of the tests versus the EMV Specification, or for any other reasons. Figure 5.1– Example of the timing for test changes EMVCo will inform all participants of the new tests and fix the date(s) for activation of the new tests and deactivation of the old. By default, a migration period of 2 months between the activation date and the deactivation date, will apply for all submissions. Note: Example of migration period: • Version n+1 Test plan is activated Jan 1st, • Product can be registered with Version n ICS version until February 28th • Testing in Version n shall start before February 28th. • The report in Version n shall be submitted at the latest by May 30th • Related RFA must also be received before May 30th • Product can be registered with Version n+1 ICS version as from January 1st © 2001-2025 EMVCo, LLC. All rights reserved. Reproduct