![](/images/new-backgrounds/1263550/263550211x1.webp)
9.5.6Atalla Key Block Protection Option
This option controls whether the
Possible | Status | Description |
Values |
|
|
0
1
Disabled | No protection is applied. |
| can be injected through any format. (Default) |
Enabled | Protection is applied. |
| |
| key can only be injected through Atalla key block. They |
| cannot be injected through the normal key format. |
| |
| format keys, single or double feature keys, and single |
| or double DUKPT keys can be injected through both |
| the normal key format and Atalla key block format. |
|
|
9.5.7Terminal Startup Verify MAC Option
This option controls whether the terminal needs to verify the MAC at terminal startup for user application code files and data files that are contained in a valid certificate file. The default value is disabled because the manufacturer does not load the certificate file.
Possible | Status | Description |
Values |
|
|
0
1
Disabled | Disable startup verify MAC option. (Default) |
Enabled | Enable startup verify MAC option. |
9.5.8Visa PED Mode Option
This option controls whether the terminal runs in Visa PED mode. In this mode, if prompt MAC verification fails, PIN exhaustion validation and the three button limit will be applied when prompt MAC verification fails.
PIN exhaustion validation means that the customer can only enter their PIN three times; after the third failed attempt, the terminal returns to the idle prompt.
The three button limit means that forms that do not have Prompt MACing are limited to three buttons. If the form requires more than three data inputs, such as PIN entry or cash back amount, it must have prompt MACing.
Possible | Status | Description |
Values |
|
|
0
1
Disabled | Normal mode. |
Enabled | Visa PED mode. |
98 | Chapter 9 | Key Architecture |
| Section 9.5 | Security Options |