Home RDP Sales Contact Us Training  
RDP Support      Call (970) 845-7108        Open a Web Support Incident
RDPWin
Knowledge Base		 RDP-DOS
Knowledge Base		 IRM and IRM.Net
Knowledge Base		 Crystal
Knowledge Base
         

Payment Card Industry (PCI) Compliance
and RDPWin

April, 2008

Payment Card Industry (PCI) compliance is different for every RDP customer based on the volume of credit card transactions. RDP software may not be PCI complaint for all customers.  There are many PCI compliance requirements that must be satisfied which have nothing to do with the RDP system. Every RDP customer must carefully examine the full PCI requirements.  It is the responsibility of each customer to assure full PCI compliance.  RDP is NOT LIABLE for damages or fines related to any level of credit card security.  RDP offers no assistance, guarantees, or advice regarding PCI compliance, and cannot be held liable for any damages resulting from customer failure to comply with full PCI compliance standards.

RDP Suggests...

  1. Read and implement all non-RDP requirements, some of which are outlined on Visa’s website at Visa Compliance Validation.
  2. Upgrade to the current version of all RDP products.
  3. Upgrade to the current version of Southern Datacomm Software or contact SDC's Technical Support at (866) 709-7880.
  4. Review data encryption documentation and select Level 3 or 4, which may or may not be PCI compliant, based on your credit card transaction level. 

SDC is PCI Compliant - Upgrade Required

RDP customers have relationships with more than a dozen credit card processors for card verification and deposits.  The RDP software interfaces with a ‘middleware’ product developed by Southern DataComm (SDC).  The SDC software in turn interfaces with a wide variety of card processors. 

In order to protect all payment applications, SDC has done a tremendous amount of work to secure these transactions.  To comply with all PCI requirements, SDC has issued a mandatory upgrade.  Customers using an outdated "version of ProtoBase® software are operating and listed by VISA as a Vulnerable Payment Application. VISA has mandated that these versions of software no longer be used by merchants as of January 1, 2008." 

Customers should immediately upgrade to a version of ProtoBase 4.81 or higher, and PbAdmin 5.01 or higher.  Please update your information online (http://www.protobase.com/visafall). SDC will report those not properly upgraded "to VISA as potentially using a vulnerable payment application."

If you are using a product listed by VISA as Vulnerable, ProtoBase Versions 4.7x - 4.80.xx and PbAdmin 4.3 - 5.00.xx, you must upgrade by December 31st 2007. Otherwise, SDC will terminate your maintenance agreement and report you to VISA as using a vulnerable payment application. 

This represents Southern DataComm, Inc.'s final notice in this matter.  SDC no longer supports "and relinquishes any and all responsibility of any further unauthorized use of all ProtoBase vulnerable payment applications. From this point forward, SDC is obligated to report to VISA and your acquirer that you have not acknowledged the necessary update(s) to become compliant."

Click here to view the PDF formatted letter from Southern DataComm, Inc.
Click to view the SDC website directly.

Home RDPWin RDP-DOS IRM/IRM.Net Preprinted Forms
Version 2.xxx Upgrade to RDPWin Link to Marketing Site Support: 970-845-7108
Training Vendor Interfaces Troubleshooting Sales: 970-845-1140