ATM-PIN-Pad-(EPP-)Austausch: Manipulation, PCI-PTS-Konformität, Schlüsselinjektion und das richtige Teil wählen

The ATM PIN pad isn’t a keypad — it’s an EPP (Encrypting PIN Pad), the most security-governed part on the machine. It encrypts the PIN inside a tamper-protected module, it’s certified to PCI PTS, and it only works once cryptographic keys are loaded. That makes replacement a compliance job, not a swap:

An EPP exists to keep the customer’s PIN secret end-to-end. The digits never leave the module in the clear: the EPP encrypts them with keys held inside its secure boundary and outputs only ciphertext. To protect those keys, the module is tamper-responsive — it actively watches for intrusion and erases its secrets if attacked.

EPPs get replaced for three reasons — and only one of them is a conventional hardware fault:

Two compliance threads decide whether an EPP is acceptable: its device certification(PCI PTS) and the key-management standard (key blocks) it must support.

The replacement workflow keeps the physical and the cryptographic strictly separate — you (or your technician) handle the part; an authorized party handles the keys:

When you source a replacement, the supplier’s job is the part-and-certification fit; the keys are never part of the shipment:

Browse PIN pads and keypads in our keyboards category, and related modules in terminal repair parts and other parts. For other ATM peripherals see our ATM card reader heads and cash dispenser guides. Tell us your ATM model and the PCI PTS level your processor requires, and we’ll match a compatible EPP — your processor and authorized key-loading party handle the keys.