FAQ #1195 Diff

What is the difference between a Validated Payment Application which is shown on the PCI SSC website as ?Acceptable for New Deployments? and one which is shown as ?Acceptable only for Pre-Existing Deployments??

Earlier Version
2012-11-16T00:00:00+00:00

Later Version
2012-12-06T16:06:00+00:00

Removed

Added

When a PA-DSS validated payment application has expired, it is listed as acceptable only for pre-existing deployments, or in other words, for customers that have already purchased and deployed the product.

The PCI SSC encourages entities wishing to purchase a payment application to check the ~~application?s~~application's expiry date as part of their purchasing due diligence process. Whether, and for how long, an entity is permitted to continue using an expired application that is only ~~?Acceptable~~"Acceptable only for Pre-Existing ~~Deployments?~~Deployments" is determined by the individual payment brands and/or acquirers, and should be discussed with them.

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.