PCI Watch

Tracking changes across the Payment Card Industry

TTA Bulletin nº 267: CT2 SB272 DateManagement

v1.0 Type Approval Bulletins
Contact Acceptance Device

EMV® Terminal Type Approval Bulletin No. 267 First Edition, October 2023 Terminal Level 2 Test Cases EMV® Date Management

Requirement

Update

Applicability

This Bulletin applies to:  EMV® Terminal Type Approval - Level 2 Test Cases – version 4.4a Related Documents  Specification Bulletin 272 – EMV® Update to Date Management Requirement, Second Edition January 2023. Effective Date  January 1st, 2024

Description

Based on EMVCo's continued review of the EMV® Terminal Type Approval Level 2 Test Cases v4.4a, the following updates are necessary, and shall be applied to any type approval session beginning on, or after, the effective date cited above. Update to EMV® Terminal Type Approval

  • Level 2 Test Cases – version 4.4a Section 5 – Test Settings Updates 1/ Add the following paragraph in section 5.1. Except if specified differently in test cases, all expiration dates used for certificates computation must be set to a Date between 500101 (January 1st, 2050) and 990101 (January 1st, 2099) but not to a Date explicity used in any of the test cases. 2/ LT Settings [146] (differences with LTSetting1) Data Expiration Date Tag 5F24 Value 520229 [LTSetting147] (differences with LTSetting1) Data Expiration Date Tag 5F24 Value 700112 countries. [LTSetting148] (differences with LTSetting1) Data Expiration Date Tag 5F24 [LTSetting149] (differences with LTSetting1) Data Application Interchange Profile Issuer Public Key Certificate ICC Public Key Certificate ICC PIN Encipherment Public Key Certificate CVM list Tag 82 90 9F46 9F2B 8E [LTSetting150] (differences with LTSetting1) Data Application Interchange Profile Issuer Public Key Certificate ICC Public Key Certificate ICC PIN Encipherment Public Key Certificate CVM list Tag 82 90 9F46 9F2B 8E [LTSetting151] (differences with LTSetting1) Data Application Interchange Profile ICC Public Key Certificate Issuer Public Key Certificate Tag 82 9F46 90 [LTSetting152] (differences with LTSetting1) Data CVM list Issuer Public Key Certificate ICC PIN Encipherment Public Key Certificate Tag 8E 90 9F2B [LTSetting154] (differences with LTSetting1) Value 800228 Value 5000 Computed with Certificate Expiration Date 7001 Computed with Certificate Expiration Date 7001 not present in LT 000000000403 Value 3000 Computed with Certificate Expiration Date 7201 Computed with Certificate Expiration Date 7201 not present in LT 000000000403 Value 2000 Computed with Certificate Expiration Date 4801 Computed with Certificate Expiration Date 4801 Value 000000000403 Computed with Certificate Expiration Date 4801 Computed with Certificate Expiration Date 7801 countries. Data CVM list Issuer Public Key Certificate ICC PIN Encipherment Public Key Certificate Tag 8E 90 9F2B [LTSetting155] (differences with LTSetting1) Data CVM list Issuer Public Key Certificate ICC PIN Encipherment Public Key Certificate Tag 8E 90 9F2B [LTSetting180] (differences with LTSetting1) Data Tag Application Interchange Profile 82 90 Issuer Public Key Certificate [LTSetting181] (differences with LTSetting1) Data Tag Application Interchange Profile 82 90 Issuer Public Key Certificate [LTSetting182] (differences with LTSetting1) Data Application Interchange Profile ICC Public Key Certificate Issuer Public Key Certificate Tag 82 9F46 90 [LTSetting183] (differences with LTSetting1) Data Application Interchange Profile ICC Public Key Certificate Issuer Public Key Certificate Tag 82 9F46 90 [LTSetting184] (differences with LTSetting1) Value 000000000403 Computed with Certificate Expiration Date 7001 Computed with Certificate Expiration Date 7001 Value 000000000403 Computed with Certificate Expiration Date 9001 Computed with Certificate Expiration Date 3812 Value 4000 Computed with Certificate Expiration Date 4803 Value 4000 Computed with Certificate Expiration Date 3512 Value 2000 Computed with Certificate Expiration Date 3501 Computed with Certificate Expiration Date 8801 Value 2000 Computed with Certificate Expiration Date 9001 Computed with Certificate Expiration Date 4401 countries. Data Application Interchange Profile ICC Public Key Certificate Issuer Public Key Certificate ICC PIN Encipherment Public Key Certificate CVM list Tag 82 9F46 90 9F2B 8E [LTSetting185] (differences with LTSetting1) Data Application Interchange Profile ICC Public Key Certificate Issuer Public Key Certificate Tag 82 9F46 90 [LTSetting186] (differences with LTSetting1) Data Application Interchange Profile ICC Public Key Certificate Issuer Public Key Certificate Tag 82 9F46 90 [LTSetting187] (differences with LTSetting1) Data Application Interchange Profile ICC Public Key Certificate Issuer Public Key Certificate Tag 82 9F46 90 Value 1100 Computed with Certificate Expiration Date 7001 Computed with Certificate Expiration Date 7001 not present in LT 000000000403 Value 0100 Computed with Certificate Expiration Date 4801 Computed with Certificate Expiration Date 4801 Value 0100 Computed with Certificate Expiration Date 3501 Computed with Certificate Expiration Date 8801 Value 0100 Computed with Certificate Expiration Date 9001 Computed with Certificate Expiration Date 4401 Section 7 – Test Cases Updates New test cases include: 2CC.147.00 2CC.148.00 2CC.149.00 2CC.150.00 2CC.151.00 2CC.152.00 Revised test cases include: None Deleted test cases include: None 2CC.153.00 2CC.154.00 2CC.155.00 2CC.156.00 2CC.157.00 2CM.095.01 countries. countries. 2CC.147.00 Certificate Expiration Date (1) Revision: 44b Objective: To ensure that the terminal manage the Certificate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: [SDA]  Case 01:
  • LTsetting149:
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.
  • AIP of LT indicates Static Data Authentication only is supported (AIP byte 1 bit 7 = ‘1’).  Case 02:
  • LTsetting180:
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4803.
  • AIP of LT indicates Static Data Authentication only is supported (AIP byte 1 bit 7 = ‘1’).  Case 03:
  • LTsetting181:
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 3512.
  • AIP of LT indicates Static Data Authentication only is supported (AIP byte 1 bit 7 = ‘1’). Procedure: Pass Criteria:  Case 01: Transaction is performed with TermSetting1 and LTsetting149  Case 02: Transaction is performed with TermSetting1 and LTsetting180  Case 03: Transaction is performed with TermSetting1 and LTsetting181  Parameter received at first or second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at first GENERATE AC:
  • Transaction Date set to current date of test countries. 2CC.147.00 Certificate Expiration Date (1)
  • SDA not failed (TVR_B1b7=‘0’)
  • SDA selected (TVR_B1b2=‘1’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not used (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’) countries. 2CC.148.00 Certificate Expiration Date (2) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: [DDA]  Case 01
  • LTsetting150:  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7201  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7201.  AIP of LT indicates Dynamic Data Authentication only is supported (AIP byte 1 bit 6 = ‘1’).  Case 02
  • LTsetting151:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  AIP of LT indicates Dynamic Data Authentication only is supported (AIP byte 1 bit 6 = ‘1’).  Case 03
  • LTsetting182:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 3501.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 8801  AIP of LT indicates Dynamic Data Authentication only is supported (AIP byte 1 bit 6 = ‘1’).  Case 04
  • LTsetting183:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 9001.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4401 countries. 2CC.148.00 Certificate Expiration Date (2)  AIP of LT indicates Dynamic Data Authentication only is supported (AIP byte 1 bit 6 = ‘1’). Procedure:  Case 01: Transaction is performed with TermSetting1 and LTsetting150  Case 02: Transaction is performed with TermSetting1 and LTsetting151  Case 03: Transaction is performed with TermSetting1 and LTsetting182  Case 04: Transaction is performed with TermSetting1 and LTsetting183 Pass Criteria:  Parameter received at first or second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not failed (TVR_B1b4=‘0’)
  • CDA not used (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’) countries. 2CC.149.00 Certificate Expiration Date (3) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: [CDA] AND ([Offline Only] OR [Offline/Online Capable])  Case 01
  • LTsetting184:  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 02
  • LTsetting185:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 03
  • LTsetting182:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 3501.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 8801  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 04
  • LTsetting183:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 9001.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4401 countries. 2CC.149.00 Certificate Expiration Date (3)  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’). Procedure:  Case 01: Transaction is performed with TermSetting1 and LTsetting184  Case 02: Transaction is performed with TermSetting1 and LTsetting185  Case 03: Transaction is performed with TermSetting1 and LTsetting186  Case 04: Transaction is performed with TermSetting1 and LTsetting187 Pass Criteria:  Parameter received at first GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC with CDA (P1_b8='0' AND P1_b7=‘1’ AND P1_b5='1' AND P1_b4='0')  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not failed (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’) countries. 2CC.150.00 Certificate Expiration Date (4) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: ([CDA Mode1] OR [CDA Mode2]) AND ([Online Only] OR [Offline/Online Capable])  LT_response at first GENERATE AC
  • Cryptogram Information Data ‘9F27’ responding an ARQC (‘80’) with CDA.  Case 01
  • LTsetting184:  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 02
  • LTsetting185:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 03
  • LTsetting182:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 3501.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 8801  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 04
  • LTsetting183: countries. 2CC.150.00 Certificate Expiration Date (4)  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 9001.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4401  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’). Procedure:  Case 01: Transaction is performed with TermSetting1 and LTsetting184  Case 02: Transaction is performed with TermSetting1 and LTsetting185  Case 03: Transaction is performed with TermSetting1 and LTsetting186  Case 04: Transaction is performed with TermSetting1 and LTsetting187 Pass Criteria:  Parameter received at second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not failed (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’) countries. 2CC.151.00 Certificate Expiration Date (4) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: [CDA Mode4] AND ([Online Only] OR [Offline/Online Capable])  LT_response at first GENERATE AC
  • Cryptogram Information Data ‘9F27’ responding an ARQC (‘80’).  LT_response at second GENERATE AC - with CDA  Case 01
  • LTsetting184:  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 02
  • LTsetting185:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4801  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 03
  • LTsetting182:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 3501.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 8801  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’).  Case 04 countries. 2CC.151.00 Certificate Expiration Date (4)
  • LTsetting183:  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 9001.  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4401  AIP of LT indicates Combined Data Authentication is supported (AIP byte 1 bit 1 = ‘1’). Procedure:  Case 01: Transaction is performed with TermSetting1 and LTsetting184  Case 02: Transaction is performed with TermSetting1 and LTsetting185  Case 03: Transaction is performed with TermSetting1 and LTsetting186  Case 04: Transaction is performed with TermSetting1 and LTsetting187 Pass Criteria:  Parameter received at second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at second GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not failed (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’) countries. 2CC.152.00 Certificate Expiration Date (5) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: [Offline Enciphered PIN]  Case 01
  • LTsetting154:  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.  ICC PIN Encipherement Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.  CVM List is 'Enciphered PIN, if terminal supports' (04 03)  AIP of LT indicates Cardholder verification is supported (AIP byte 1 bit 5 = ‘1’).  Case 02
  • LTsetting155:  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 9001.  ICC PIN Encipherement Public Key Certificate in LT is calculated with Certificate Expiration Date 3812.  CVM List is 'Enciphered PIN, if terminal supports' (04 03)  AIP of LT indicates Cardholder verification is supported (AIP byte 1 bit 5 = ‘1’).  Case 03
  • LTsetting152:  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 4801.  ICC PIN Encipherement Public Key Certificate in LT is calculated with Certificate Expiration Date 7801.  CVM List is 'Enciphered PIN, if terminal supports' (04 03)  AIP of LT indicates Cardholder verification is supported (AIP byte 1 bit 5 = ‘1’).  Case 04
  • LTsetting149: countries. 2CC.152.00 Certificate Expiration Date (5)  Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.  ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.  ICC PIN Encipherement Public Key Certificate not present.  CVM List is 'Enciphered PIN, if terminal supports' (04 03)  AIP of LT indicates Cardholder verification is supported (AIP byte 1 bit 5 = ‘1’). Procedure:  Transaction is performed with TermSetting1 and LTsetting154  Transaction is performed with TermSetting1 and LTsetting155  Transaction is performed with TermSetting1 and LTsetting154  Transaction is performed with TermSetting1 and LTsetting149 Pass Criteria:  Terminal display: 'Enter PIN' Message  Parameter received at first or second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • Cardholder verification successful (TVR_B3b8=‘0’)
  • Cardholder verification was performed (TSI_B1b7='1')
  • CVM Results = '04 03 00' countries. 2CC.153.00 Certificate Expiration Date (6) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: Procedure: [Offline Enciphered PIN] AND [SDA]  LTsetting149:
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.
  • ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.
  • ICC PIN Encipherement Public Key Certificate not present.
  • CVM List is 'Enciphered PIN, if terminal supports' (04 03)
  • AIP of LT indicates Cardholder verification and SDA only are supported (AIP byte 1 bit 5 = ‘1’ and byte 1 bit 7 = '1').  Transaction is performed with TermSetting1 and LTsetting149 Pass Criteria:  Terminal display: 'Enter PIN' Message  Parameter received at first or second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not failed (TVR_B1b7=‘0’)
  • SDA selected (TVR_B1b2=‘1’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not used (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’)
  • Cardholder verification successful (TVR_B3b8=‘0’)
  • Cardholder verification was performed (TSI_B1b7='1') countries. 2CC.154.00 Certificate Expiration Date (7) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: Procedure: [Offline Enciphered PIN] AND [DDA]  LTsetting150:
  • ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7201
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7201
  • ICC PIN Encipherement Public Key Certificate not present.
  • CVM List is 'Enciphered PIN, if terminal supports' (04 03)
  • AIP of LT indicates Cardholder verification and DDA only are supported (AIP byte 1 bit 5 = ‘1’ and byte 1 bit 6 = '1').  Transaction is performed with TermSetting1 and LTsetting150 Pass Criteria:  Terminal display: 'Enter PIN' Message  Parameter received at first or second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not failed (TVR_B1b4=‘0’)
  • CDA not used (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’)
  • Cardholder verification successful (TVR_B3b8=‘0’)
  • Cardholder verification was performed (TSI_B1b7='1')
  • CVM Results = '04 03 00' countries. countries. 2CC.155.00 Certificate Expiration Date (8) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: Procedure: Pass Criteria: [Offline Enciphered PIN] AND [CDA] AND ([Offline Only] OR [Offline/Online Capable])  LTsetting184:
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001
  • ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.
  • ICC PIN Encipherement Public Key Certificate not present.
  • CVM List is 'Enciphered PIN, if terminal supports' (04 03)
  • AIP of LT indicates Cardholder verification and Combined Data Authentication is supported (AIP byte 1 bit 5 = ‘1’ and byte 1 bit 1 = ‘1’).  Transaction is performed with TermSetting1 and LTsetting184  Parameter received at first GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC with CDA (P1_b8='0' AND P1_b7=‘1’ AND P1_b5='1' AND P1_b4='0')  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not failed (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’)
  • Cardholder verification successful (TVR_B3b8=‘0’)
  • Cardholder verification was performed (TSI_B1b7='1') countries. 2CC.156.00 Certificate Expiration Date (9) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: Procedure: Pass Criteria: [Offline Enciphered PIN] AND ([CDA Mode1] OR [CDA Mode2]) AND ([Online Only] OR [Offline/Online Capable])  LT_response at first GENERATE AC
  • Cryptogram Information Data ‘9F27’ responding an ARQC (‘80’) with CDA.  LTsetting184:
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001
  • ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.
  • ICC PIN Encipherement Public Key Certificate not present.
  • CVM List is 'Enciphered PIN, if terminal supports' (04 03)
  • AIP of LT indicates Cardholder verification and Combined Data Authentication is supported (AIP byte 1 bit 5 = ‘1’ and byte 1 bit 1 = ‘1’).  Transaction is performed with TermSetting1 and LTsetting184  Parameter received at second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not failed (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’)
  • Cardholder verification successful (TVR_B3b8=‘0’) countries. 2CC.156.00 Certificate Expiration Date (9)
  • Cardholder verification was performed (TSI_B1b7='1') countries. 2CC.157.00 Certificate Expiration Date (10) Revision: 44b Objective: To ensure that the terminal manage the Certifcate Expiration Date as per SB272 bulletin. Reference Book 2
  • Section 5.3
  • Retrieval of Issuer Public Key EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: Procedure: Pass Criteria: [Offline Enciphered PIN] AND [CDA Mode4] AND ([Online Only] OR [Offline/Online Capable])  LT_response at first GENERATE AC
  • Cryptogram Information Data ‘9F27’ responding an ARQC (‘80’).  LT_response at second GENERATE AC - with CDA  LTsetting184:
  • Issuer Public Key Certificate in LT is calculated with Certificate Expiration Date 7001
  • ICC Public Key Certificate in LT is calculated with Certificate Expiration Date 7001.
  • ICC PIN Encipherement Public Key Certificate not present.
  • CVM List is 'Enciphered PIN, if terminal supports' (04 03)
  • AIP of LT indicates Cardholder verification and Combined Data Authentication is supported (AIP byte 1 bit 5 = ‘1’ and byte 1 bit 1 = ‘1’).  Transaction is performed with TermSetting1 and LTsetting184  Parameter received at second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’)  Data received at second GENERATE AC:
  • Transaction Date set to current date of test
  • SDA not used (TVR_B1b7=‘0’)
  • SDA not selected (TVR_B1b2=‘0’)
  • DDA not used (TVR_B1b4=‘0’)
  • CDA not failed (TVR_B1b3=‘0’)
  • XDA not used (TVR_B4b1=‘0’)
  • XDA not selected (TVR_B1b1=‘0’)
  • Offline Data Authentication was performed (TSI_B1b8=‘1’) countries. 2CC.157.00 Certificate Expiration Date (10)
  • Cardholder verification successful (TVR_B3b8=‘0’)
  • Cardholder verification was performed (TSI_B1b7='1') countries. 2CM.095.01 Processing the Year (2) Revision: 44b Objective: To ensure that the terminal is able process 2 digits year correctly Reference Book 4
  • Section 6.7.3
  • Date Management EMV 4.4: Book Bulletins
  • Section SB 272
  • Bulletin n°272, Update of Date Management Requirement (January 2023) Terminal ICS Options: Conditions: Procedure: Pass Criteria: [NA]         Case 01
  • LTsetting146:  Application Expiration Date is 520229 Case 02
  • LTsetting147:  Application Expiration Date is 700112 Case 03
  • LTsetting148:  Application Expiration Date is 800228 Case 01: Transaction is performed with TermSetting1 and LTsetting146 Case 02: Transaction is performed with TermSetting1 and LTsetting147 Case 03: Transaction is performed with TermSetting1 and LTsetting148 Parameter received at first or second GENERATE AC:
  • The terminal shall process the transaction until completion, by requesting a TC (P1_b8='0' AND P1_b7=‘1’) Data received at first GENERATE AC:
  • Transaction Date set to current date of test
  • Application not expired (TVR_B2b7=‘0’) countries.

Legal Notice

This document summarizes EMVCo’s present plans for evaluation services and related policies and is subject to change by EMVCo at any time. This document does not create any binding obligations upon EMVCo or any third party regarding the subject matter of this document, which obligations will exist, if at all, only to the extent set forth in separate written agreements executed by EMVCo or such third parties. In the absence of such a written agreement, no product provider, test laboratory or any other third party should rely on this document, and EMVCo shall not be liable for any such reliance. No product provider, test laboratory or other third party may refer to a product, service or facility as EMVCo approved, in form or in substance, nor otherwise state or imply that EMVCo (or any agent of EMVCo) has in whole or part approved a product provider, test laboratory or other third party or its products, services, or facilities, except to the extent and subject to the terms, conditions and restrictions expressly set forth in a written agreement with EMVCo, or in an approval letter, compliance certificate or similar document issued by EMVCo. All other references to EMVCo approval are strictly prohibited by EMVCo. Under no circumstances should EMVCo approvals, when granted, be construed to imply any endorsement or warranty regarding the security, functionality, quality, or performance of any particular product or service, and no party shall state or imply anything to the contrary. EMVCo specifically disclaims any and all representations and warranties with respect to products that have received evaluations or approvals, and to the evaluation process generally, including, without limitation, any implied warranties of merchantability, fitness for purpose or non-infringement. All warranties, rights and remedies relating to products and services that have undergone evaluation by EMVCo are provided solely by the parties selling or otherwise providing such products or services, and not by EMVCo, and EMVCo will have no liability whatsoever in connection with such products and services. This document is provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in this document. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NONINFRINGEMENT, AS TO THIS DOCUMENT. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to this document. EMVCo undertakes no responsibility to determine whether any implementation of this document may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of this document should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, this document may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement this document is solely responsible for determining whether its activities require a license to any such technology, including for

countries.

patents on public key encryption technology. EMVCo shall not be liable under any theory for any party's infringement of any intellectual property rights in connection with this document.

countries.