There are two typical configurations an end-to-end solution (for in-house issuing, batch and instant issuing) and an in-house data preparation solution with outsource card production (for external personalisation by a Bureau).

Both these configurations reduce risk by allowing the issuer to keep control of its master keys (security in-house) and accommodate business innovation demands, flexibility and speed to market.

For those who need to upgrade from SDA to DDA cards, P3 server supports multiple crypto modules and RSA key generation and caching, enabling issuers to provide the same SLA (service levels) for DDA cards as for SDA cards.

As per PCI PIN Security Requirements 18-3, encrypted symmetric keys must be managed in structures called Keyblocks, with cryptographic binding to prevent unauthorised use. TR-31 ensures the seamless integration of confidentiality and integrity features, leveraging cutting-edge cryptographic techniques such as Advanced Encryption Standard (AES) encryption and Cipher-based Message Authentication Code (CMAC). This ensures not only the protection of the key itself but also the associated meta-data.