Reviewed October 17, 2026. This practical guide replaces an earlier general overview; the original publication date and URL are retained.
A terminal register links each approved device with its location, owner and support history. It gives staff a reference when a device is moved, replaced or appears unfamiliar. The register is useful only when employees know how to report a discrepancy and somebody maintains it as the store changes.
Record identifiers through an approved process
Capture the device model, serial or approved identifier, assigned location and responsible business contact. Ask the provider which information is safe and useful to retain. Do not store payment credentials or secret access codes in the register. Limit access to supporting photographs or technical details according to the security policy.
Document legitimate movement
Record installation, repair, loan and replacement events with a ticket reference and approver. For temporary Florida counters, identify when the terminal is deployed and returned. A device in the wrong place may be a recordkeeping mistake, but staff should not dismiss the discrepancy without following the approved check.
Train for an unexpected device or technician
Give staff an independently verified provider contact and a clear escalation route. An unsolicited visitor’s uniform or a convincing support story should not be the only evidence authorizing replacement. Follow the provider’s security procedure for suspected tampering; do not ask employees to dismantle a device or investigate unsafe equipment themselves.
Reconcile the register periodically
Compare authorized locations and devices, resolve missing entries and remove retired equipment through the approved process. Review whether replacement terminals use the intended configuration and reporting references. Keep the disposal or return record. A paid equipment invoice does not establish that the right device is installed at the right merchant account.
Sources and related reading
PCI SSC merchant resources include payment-device security guidance. The acquirer and equipment provider should confirm inspection, replacement and incident procedures for the actual devices. Read PCI SSC merchant security resources.
Continue with Payment Cybersecurity: Protect Access, Device Changes and Recovery and Choosing a POS System: Test the Full Workday Before Signing.
Use the AMS Florida merchant reading path for the regional operating checklist. Explore related analysis in Eric Kuvykin’s topic guides.
