EMV Certification Scope and Phases
EMV Level 3 certification scope includes the application communicating with the EMV kernel, Fusebox, the receipts, the communication between the EMV kernel and the ICC captured with a 3rd party tool. There are two phases to EMV Level 3 certification.
- TPP Certification
Involves TPP testing including industry data, EMV and non-EMV transactions. Generally intended to identify any issues prior to the EMV Scheme certifications. The interactive testing may have a longer time frame as the TPP may need to set up certain conditions on their test host. TPP receipts may be included in this phase of certification.
- EMV Scheme Certification with the Card Associations
Involves getting the test scripts from each scheme and running the transactions through the TPP to the scheme end-point. Each scheme set of scripts may vary in number.
The EMV scheme testing includes:
VISA – ADVT (includes Interlink)
MasterCard – MTIP (includes Maestro and PayPass)
VISA – CDET (contactless/PayWave testing)
American Express – AEIPS
Discover – DPAS
Interac – Canada
Certification letters are issued on the versions of the different components in the EMV transaction flow. It is recommended that the payment application isolate the interactions with the EMV kernel in a separate module from interactions with the other PIN pad libraries to minimize having to re-certify if non-EMV components change.
Contactless Certifications Required
Before implementing contactless card processing, several testing and certification processes may need to occur.
Contactless Card Reader Certification - If applicable, the contactless card reader validation and certification should be coordinated by the merchant or end user and their designated transaction processor or acquirer.
Elavon is not involved in this certification process.
POS Application Testing - Gateway software has limited capabilities when testing contactless card transactions in demo mode.
At the time you are implementing contactless card transactions, it is preferable that you have the ability through a merchant or end user to work with their transaction processor. A beta merchant or end user will be able to help you do the following:
Coordinate the procurement of the applicable card readers.
Secure corresponding test merchant and terminal IDs.
Test system access and technical support resources.
Obtain test contactless cards.
Test contactless card transactions with positive and negative responses.
Ensure that card and merchant certification requirements are met.
Elavon Integration Certification - Elavon will issue a conditional certification if you are not able execute contactless transactions during integration. A notation will be made on the certification letter that you did not perform complete end-to-end testing.
This certification reflects that your application has adhered to the standards set by Elavon, the input requests are formatted correctly, the receipts contain the correct information, and you handle error conditions correctly.
Elavon requires completion of the following tasks prior to scheduling your Elavon integration certification:
Obtain test host access and test cards from the designated third party processor.
Provide Elavon with the applicable requests and responses.
Provide Elavon examples of receipts, or a list of fields that are included on, or are configurable by the merchant for the receipt.
Resolve any open issues identified by the Elavon review.
The Integration Analyst may determine that other tasks need to be completed by you in addition to those above.
Merchant / End User Certification - TPPs may have stringent certification procedures to ensure that any system used at a merchant location to accept contactless cards complies with all regulations. Most transaction processors require merchant or end users to perform a full end-to-end test of the POS and card reader prior to accepting actual transactions.
End-to-End Certification - The end-to-end certification may include the following items:
Verification of the POS system-to-card reader communications.
Validation and testing of POS system-to-transaction processor communications.
Verification that all required contactless card transactions are supported by the POS systems.
Verification of the POS system’s error handling capabilities during card transactions.
Receipt printing by the POS system for the cardholder’s records to verify contents.
The Integration Analyst’s involvement with your implementation ends once the Elavon certification letter is issued. If you would like Elavon to assist you with a merchant or end user certification, please contact your Client Executive.