Frequently Asked Questions

< Back to search page

Can my payment application be validated using PA-DSS Version 1.2.1?

FAQ Response

No. PA-DSS version 1.2.1 is expired. New application validations using PA-DSS 1.2.1 and changes for existing listings using PA-DSS 1.2.1 are no longer accepted.  In addition, applications validated using PA-DSS 1.2.1 are listed as “Acceptable only for Pre-Existing Deployments” (see FAQ #1195 for an explanation of the difference between an application which is “Acceptable for New Deployments” and one which is “Acceptable only for Pre-Existing Deployments”).

June 2015
Article Number 1272

Related Articles

If a merchant develops an application that runs on a consumer’s device (e.g. smartphone, tablet, or laptop) that is used to accept payment card data, what are the merchant’s obligations regarding PCI DSS and PA-DSS for that application?

What is the Council’s guidance on the use of SHA-1?

Does PCI DSS, PA-DSS, or PTS apply to ATMs?

How does use of an expired PTS device affect my PCI DSS compliance?

What is the difference between a Validated Payment Application which is shown on the PCI SSC website as “Acceptable for New Deployments” and one which is shown as “Acceptable only for Pre-Existing Deployments”?