Download American Express EMV Certification Guide PDF

TitleAmerican Express EMV Certification Guide
TagsCreative Writing Types
File Size84.0 KB
Total Pages15
Document Text Contents
Page 1

AMERICAN EXPRESS EMV
CERTIFICATION GUIDE V2.8

Page 2

AmeX EMV Certification Guide V2.8.doc


Revision History

Version name Version date Commentary/reason for revision
Revision V2.3 October 2003 a) EMV Certification Guide V2.3 replaces

American Express EMV Acceptance Manual V2.2
b) The EMV Certification Request form, covering
both device & E2E requirements, will be issued as
a separate document & not included as an
Appendix to this document
c) Terminal Parameters Information Pack: V1.0
July 2003 included as an Appendix
d) Other changes in line with current American
Express EMV processes


Revision V2.4 February
2004

a) EMV Certification Guide V2.4 has been
produced to reflect the streamlined certification
process and replaces American Express EMV
Acceptance Manual V2.3
b) The EMV Certification Request form, covering
both device & E2E requirements, will be issued as
a separate document & not included as an
Appendix to this document
c) Terminal Parameters Information Pack: V1.0
July 2003 included as an Appendix
d) Other changes in line with current American
Express EMV processes


Revision V2.5 May 2004 a) Removal of ‘Terminal Parameter’ appendix
Revision V2.6 June 2004 a) Editorial clarifications

b) Formatting changes
Revision V2.7 July 2004 a) Addition of header note explaining the need for

testers to use identical kit in conditions that exactly
replicate the live environment
b) Removal of reference to Electronic Business
Guide under Submissions Testing section

Revision V2.8 July 2004 a) Editorial clarifications

Page 7

AmeX EMV Certification Guide V2.8.doc



4 American Express EMV Acceptance

4.1 AEIPS (American Express ICC Payment Specification)

American Express complies with the global EMV specifications for EMV payment transactions. AEIPS is
American Express’s EMV payment specification. The purpose of AEIPS include detailing the American
Express (and American Express entities) specific requirements where variations are allowed within EMV,
when implementing EMV (ICC) technology. AEIPS is primarily a technical specification, but it also states
the business requirements that the technical solutions address.


4.2 How do I obtain AEIPS?
If you wish to obtain the AEIPS documentation please contact your American Express representative.

4.3 EMEA EMV Authorisation

American Express supports national message standards for authorisation of transactions. For information on
what authorisation standards are supported in a particular country, please contact your local American
Express representative.


4.4 EMEA EMV Submission

American Express supports national message standards for submission of charges and its own submission
formats. For information on what submission standards are supported in a particular country, or situation,
please contact your local American Express representative. Part of our certification process includes a
submission test.


4.5 Terminal parameters and CAPKs (C ertification Authority Public Keys)

All terminal parameters, CAPKs and CAPKs related information are covered in the TERMINAL
PARAMETERS document issued as part of the test pack components. If these settings are required prior to
entering the formal approvals phase please contact [email protected] who will provide the
necessary information.


4.6 The Certifi cation Process
The certification process follows a number of distinct steps. All of these must be executed, in order, to
complete a certification for American Express card acceptance.

Page 8

AmeX EMV Certification Guide V2.8.doc

1 Completion of EMVCo Level 1 and Level 2 certification
2 American Express Authorisation Certification (offline & online EMV and magnetic stripe tests)
3 Submissions testing
4 American Express issues a certification letter when all of the above steps have been completed. This

concludes the certification process
Please note: American Express provide the tools to allow the Vendor/merchant/ nominated thirty party
(from here on referred to as tester) to perform the testing.

4.7 When do I need to certify my EMV solution?
The ‘EMV solution’ requires certifying prior to deployment and the acceptance of American Express
branded cards.

The software components within a POS terminal applicable to certification are the terminal application and
the EMV kernel


Terminal application. This provides the transaction processing software for handling the authorisation
request, refund transaction etc, interfaces with the drivers for the peripherals (i.e. screen display, printer,
pin pad etc) and handles the acquirer message interface.


The EMV kernel. This provides the EMV capability and may be developed by the vendor or bought in
from another supplier.


Note: When we certify a terminal we are certifying one implementation of each of the above components,
effectively as a black box. As we are not aware of where the boundary lies between the individual software
components, we can only certify the complete software package. Therefore a change to the POS terminal
application software and/or the EMV kernel would require re-certification.

Page 14

AmeX EMV Certification Guide V2.8.doc

6.2 Pre-requisites
There are several pre-requisites to the submission testing, one of the most significant being that the test
transactions are generated using a POS device that has already received American Authorisation certification
(EMV and mag stripe).

Before the submissions testing can begin, the following must be in place:

1. The POS device or other EMV kernel has been upgraded to support EMV transaction data.
2. POS Device or EMV kernel processing has EMVCo Level 1 and level 2 certification.
3. Transactions are generated using a POS device or EMV kernel that has passed American Express

EMV Authorisation certification.
4. The American Express test host is available for EMV testing.
5. Submissions certification test slots are agreed between tester and American Express.
Note: It is essential that a communications test to our test system is completed before submission testing
commences.


American Express will not issue our Certification letter which allows the acceptance of American Express
EMV transactions until the submission route for the EMV transactions has been tested satisfactorily.


6.3 Requesting submissions testing

Submissions testing is initiated by your American Express representative who will contact you to collect
relevant submission information. Your representative will later contact you to set up test links and arrange
submission of test file.


6.4 What Tests do I need to perform?

We would prefer the submission file to be created from the tests carried out during authorisations
certification. If this is not possible please contact your American Express representative.

Please notify your American Express representative before sending the submission file via your submission
test link.


6.5 Submission certification Fails
Your American Express representative will provide you with a fault report. For minor changes we require
you to re-submit within 48 hours. If the changes are more complex an indication of the time frame required
to fix and resubmit is requested.

Page 15

AmeX EMV Certification Guide V2.8.doc

6.6 Submission certification Passes
End-to-end certification approval will not be given to any tester until the submission route for the EMV
transactions has been completed. Upon successful completion of all internal end-to-end test scripts and
submissions testing an approval certificate will be issued to the Vendor/merchant.


6.7 What do I do now?
Wait to be contacted by your American Express representative who will collect submissions information
from you.
Complete any technical development required to handle the new submission format
As confirmed with American Express perform a submission link test
Send submissions test file in a timeframe agreed with the American Express representative.

Note: once we have received a valid test submission file and all other test processes are completed an end-
to-end Certification Approval will be issued to the vendor/merchant


6.8 What do I do when I achieve Approval status?
Return a signed copy of your approval letter
Remember to use your live authorisation NUA, live merchant number & live keys

Similer Documents