Teleflora Point of Sales PA-DSS Implementation Guide
Legacy Data Removal
Addresses:
PA-DSS 1.4.a
PA-DSS 1.5.c
PCI DSS 3.2
PCI DSS 3.5.1
PCI DSS 3.5.2
PCI DSS 3.6
PCI DSS 3.6.1
PCI DSS 3.6.4
Upgrading Software
When upgrading from a legacy POS, to Dove POS, it is important to realize that your legacy POS may still contain sensitive information (credit cards, pin blocks, magnetic stripe data, encryption keys, etc.) stored in an unsafe manner. To be PCI compliant, you must ensure that any sensitive data from your previous POS be securely removed. This is best achieved by using a secure “wipe” tool.
In the event that your upgrade involved new hardware, understand that your older hardware may contain sensitive information stored in a non-compliant manner, and you are responsible for removing such.
NOTE: Please consult with your legacy POS provider for guidance on removing sensitive data.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 6