Hewlett Packard Enterprise (HPE) engaged Coalfire Systems Inc. (Coalfire), as a respected Payment Card Industry (PCI) Qualified Security Assessor (QSA), to conduct an independent technical assessment of their HPE SecureData Payments solution. Coalfire did not conduct technical testing for this assessment. The assessment was to identify the potential impact to the number of PCI DSS 3.2 controls applicable to merchants using encryption solutions based on HPE SecureData Payments.
In this paper, Coalfire will describe the HPE SecureData Payments solution and the particular requirements it impacts within PCI DSS scope.