Does anybody have any information on the end of PCI Compliance for Aloha 6.7? Right now I have some sites still running 6.7 because of older hardware that works fine so management is trying to hold off upgrades. I am fine with this because I have some newer sites that I've migrated to 12.3 and that's keeping me busy. I just don't want to be caught holding the bag and find I'm out of compliance and need to order hardware and do upgrades quickly.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Aloha 6.7 PCI Compliance 1
- Thread starter neotope
- Start date
- Thread starter
- #3
-
1
- #4
I just got off the phone with the president of one of the local NCR dealers. He told me, Aloha ver 6.5 and above is PCI compliant for software. However, as you can see its much more than that [URL unfurl="true"]https://res.cloudinary.com/engineering-com/image/upload/v1484249818/tips/PCI_DSS_Poster_hdsekb.pdf[/url]
I you are not doing all the steps listed you are not PCI compliant.
For EDC ver 12.3 is compliant.
Here is what is needed for hardware
Even upgrading to NAM its still easy to crack in less than 30 seconds with their own tool
Facts are always better than opinions
AlohaRoss
An Aloha POS 3rd Party support Solution company.
I you are not doing all the steps listed you are not PCI compliant.
For EDC ver 12.3 is compliant.
Here is what is needed for hardware
Even upgrading to NAM its still easy to crack in less than 30 seconds with their own tool
Facts are always better than opinions
AlohaRoss
An Aloha POS 3rd Party support Solution company.
- Thread starter
- #5
AlohaRoss, thanks for the info. That's what is acceptable for new deployments I am wondering about existing deployments. If I check the pcisecuritystandards.org website it shows Aloha 6.7 being compliant through Oct 2016. My dealer said it renewed through Oct 2017 because of the delays with v15.1 deployment. They believe that 6.7 won't be a compliant version after Oct 2017 and it won't be renewed. I was wondering if anybody else had any other information.
You should speak to a PCI auditor. The rule had always been and I never heard it change, if you bought the system when it was validated, then you can continue to use it. If you upgrade or buy new, you need to be on the validated for new deployments. Only an auditor really is qualified to answer.
- Status
