ℹ️
Reference Content: This is a copy of content from the PCI Security Standards Council FAQ database, preserved for tracking changes over time.
View Original →
FAQ #1249 Published

In P2PE Hardware/Hybrid solutions, what is a Host System?

Host systems are used in hybrid decryption environments to decrypt account data for the purpose of processing payments. A Host system is a computer or other device that is not considered a secure cryptographic device (SCD). In the context of the P2PE standard, the Host system is defined as a combination of software and hardware components used for the purpose of decrypting account data. Host systems may also be used for transaction processing.
Characteristics of a Host system include:

  • Host systems are notsecure cryptographic devices (SCDs)
  • Host systems perform decryption of account data
  • Host systems temporarily retain data decryption keys (DDKs) in volatile memory.
  • Host systems do not perform key generation, key loading, key injection or key distribution functions ? these must be performed by an HSM or other SCD
  • Host systems do not share, output or transmit any cryptographic key (either encrypted or in clear text) to any process, application or system outside of the transaction processing function

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.