Global Partner Management Notice

Subject: Buypass Front End Dual Pin Processing for Petroleum Merchants

Dated: November 19, 2009

Announcement:

In order to support the Interlink debit network mandate to fully use Triple DES DUKPT by July 1, 2010, First Data supports multiple encryption methods/keys on a single merchant profile/single bank fiid for BuyPass front end petroleum merchants as of October 1, 2009. This allows a Buypass petroleum merchant processing all transactions on a single Merchant ID/Terminal ID to process inside PIN Debit transactions as Triple DES DUKPT but continue to process PIN Debit transactions at the pump as Single DES DUKPT.

Upon proper Petroleum merchant set up at the host, Transactions will continue to come into the BuyPass host and use the encryption type that is noted on the BuyPass profile UNLESS the entry is "X".

When the entry is "X" the host will determine which encryption method will be used based on the indoor/outdoor indicator (included in the message format). The value of “X” is a new encryption value and has a description of dual pin processing.

All transactions that include the "indoor" indicator (and have “X” as the encryption type) will have the ability to be processed with Triple DES DUKPT encryption method while transactions that include the "outdoor" indicator (and have “X” as the encryption type) will remain as Single DES DUKPT encryption method.

Best Regards,

Global Partner Management Team
First Data Corporation
Email:

© 2009 First Data Corporation. All Rights Reserved. All trademarks, service marks and trade names referenced in this material are the property of their respective owners. The information contained herein is provided as a courtesy and is for general informational purposes only. This Alert is not intended to be a complete description of all applicable policies and procedures. The matters referenced are subject to change. Individual circumstances may vary. This Alert may include, among other things, a compilation of documents received from third parties. It should not be used as a substitute for reference to, as applicable, association releases, bulletins, regulations, rules and other official documents. First Data shall not be responsible for any inaccurate or incomplete information. This Alert may not be copied, reproduced or distributed in any manner whatsoever without the express written consent of First Data Corporation.