EMV L3 Testing

Home » EMV L3 Testing
We provide L3 testing, debugging and pre-certification services of your payment application for all major card schemes to acquirers, acquirer processors, merchants and terminal vendors that need to certify point of sale (POS) or mobile point of sale (mPOS) payment acceptance devices.

Providing Solutions

We work closely with the FIME lab in the Netherlands to provide L3 testing to clients both locally and internationally. In addition, if you choose to, iCombine can facilitate the direct submissions for Mastercard and Diners, as FIME is a certified accreditation facility for these schemes. We guide and support you with the scheme submission requirements through the certification process whether submitted via FIME or via your chosen acquiring partner. Our solutions are designed to help our clients overcome the common challenges they face to achieve compliance with L3 standards. The challenges that we address include:
  • Risk of missing device roll-out deadlines due to non-compliance with EMV and PCI standards.
  • Working under strict timelines and deadlines.
  • Need for pre-validation (debugging) and testing support.
  • Assist with identifying and sourcing the various L1 and L2 document requirements.
  • Challenges with the internal resource capacity to project ratios.
  • Need for additional skills on an as-needed basis.
  • L3 Testing capacity on demand.
  • Lack of internal skills, skill retention, and EMV knowledge.
  • High cost of keeping up-to-date with payment industry mandates and schemes.
  • Paying international rates for consulting services.
  • Maintenance of test tools such as UL BTT.
  • Project management overhead and coordination of testing and certification.

Our Skills

Our local team of highly experienced EMV L3 test analysts apply their skills and experience to provide a high standard of service to our clients. The team’s proven track-record includes:
  • EMV Certification testing for both contact and contactless (Mastercard, VISA, Amex, Diners (Discover), UPI and JCB) as well as any other local or international schemes identified in the scope of the project.
  • Utilisation of the de-facto test tools such as the Brand Test Tool and online Scheme submission platforms.
  • In-depth knowledge of EMV processing and scheme rules and the skill to read and analyse low-level card-to-kernel EMV command flows.
  • Application of innovative test methodologies, test techniques, test management and defect tracking.
  • Designing & executing test cases for regression and user acceptance testing.
  • Building a regression test pack as a foundation to support automated testing, for example using robotic tools.
  • Analysis of payment transaction message logs, including host-to-host log analysis and troubleshooting.
  • Full life cycle experience in QA (SDLC & STLC), including Black Box, functional, integration, regression, user acceptance, and sanity testing of both client-server and web-based applications.
  • Deep understanding of various payment applications, payment processing, Linux and Android POS Devices and mPOS.
  • Stand-alone, semi and fully integrated applications and on-device multi-application disciplines.
  • 3D Secure testing for eCommerce Acquiring.

How we deliver

Results orientated, we ensure that we have a full understanding of our clients L3 testing requirements and that all testing systems are optimally configured. Using our proprietary and built for purpose reporting system, we closely monitor, flag, remedy and where required escalate test cases throughout the testing project. Our service includes all the L3 test libraries and test cards you will need to support the certification project, and all our analysts have access to the iCombine Brand test tools.

Phase 1: Planning

During this phase, we clarify the L3 testing scope, certification prioritisation and timing with our client and gain a view of the involved stakeholders and dependencies. On request of our clients we assist with the completion of the Scheme project initiation forms required to register the project with the Schemes. The output of this phase is a ready-to-go testing plan, test tool set-up and engagement framework.

Phase 1: Planning

During this phase, we clarify the L3 testing scope, certification prioritisation and timing with our client and gain a view of the involved stakeholders and dependencies. On request of our clients we assist with the completion of the Scheme project initiation forms required to register the project with the Schemes. The output of this phase is a ready-to-go testing plan, test tool set-up and engagement framework.

Phase 2: Pre-Certification

We troubleshoot early in the process by commencing with a limited number of test cases per certification project. Post pre-testing all tests within scope are executed end-to-end. Copies of all test case slips are stored and failed test cases are addressed by the test team using the low level EMV card logs and any interfacing host messages that require validation. Tests that still require resolution are escalated to the applicable switch and app developer for retesting. This process continues until all tests in scope have been executed successfully.

Phase 2: Pre-Certification

We troubleshoot early in the process by commencing with a limited number of test cases per certification project. Post pre-testing all tests within scope are executed end-to-end. Copies of all test case slips are stored and failed test cases are addressed by the test team using the low level EMV card logs and any interfacing host messages that require validation. Tests that still require resolution are escalated to the applicable switch and app developer for retesting. This process continues until all tests in scope have been executed successfully.

Phase 3: Certification & Validation

Full certification test case execution is performed and all required test proof artefacts are compiled. We package and send the test case results to the client or to the clients appointed Scheme accreditation partners.

Phase 3: Certification & Validation

Full certification test case execution is performed and all required test proof artefacts are compiled. We package and send the test case results to the client or to the clients appointed Scheme accreditation partners.

Phase 4: Submission for Scheme approval

We have a working relationship with FIME in the Netherlands which allows us to facilitate the direct submission for certification of both Mastercard and Diners. On request of our clients, we can work with the Scheme accreditation partners to complete the submission process for the other schemes and where applicable directly to the Scheme's for formal test validation.

Phase 4: Submission for Scheme approval

We have a working relationship with FIME in the Netherlands which allows us to facilitate the direct submission for certification of both Mastercard and Diners. On request of our clients, we can work with the Scheme accreditation partners to complete the submission process for the other schemes and where applicable directly to the Scheme's for formal test validation.
*Scheme accreditation partners are entities that validate the certification submission or submit to the Schemes for validation to receive the required letter of approval.

Compliance Updates and Scheme News

Requirement

EMV 3DS Version 2.1.0 Sunset date

Description

Payment card brands will discontinue support of EMV 3DS version 2.1.0:

Visa (VISA Secure / Verified by VISA) - September 25th, 2024

Mastercard (Mastercard Secure Code) - September 24th, 2024

American Express (SafeKey) - September 24th, 2024

Diners Discover (ProtectBuy) - September 25th, 2024

JCB (J/Secure) - September 26th, 2024 

EMV 3DS 2.1.0 transactions sent after September 24, 2024, will not be processed.

All merchant solutions migrate to 3DS 2.2.0 which allows for more enhanced authentication performance and frictionless user experience


Requirement

EMV Tag 'DF3F':

Description

Discover support of D-PAS-Connect, if the Storage Data Element (Tag ‘DF3F’) is available on the Card, the Merchant, Acquirer or Processor must forward this information to the Issuer.

Acquirers must be able to handle and pass along these D-PAS Connect tags (Form Factor and Storage Data) in the EMV tag fields (ISO Field 55 data)


Requirement

Amex Public Key expiry

Description

AMEX CAPK (Certification Authority Public Keys):
Amex CAPK 1408-bit keys to expire on 31 December-2024
Amex CAPK 1984-bit keys expiry extended to 31 December 2033
Mastercard Public Key Expiry Dates
Mastercard CAPK (Certification Authority Public Keys)
Mastercard CAPK 1984-bit key expiry is now 31 December 2033
UPI Public Key Expiry Dates
UPI CAPK (Certification Authority Public Keys)
UPI CAPK 1984-bit Key, Index 04, expiry is extended to 31 December 2034
JCB Public Key Expiry Dates
JCB CAPK (Certification Authority Public Keys):
JCB CAPK 1984-bit Key, Index 14, expiry is extended to 31 December 2033

Requirement

EMV 3DS Version 2.1.0 Sunset date

Description

Payment card brands will discontinue support of EMV 3DS version 2.1.0:

Visa (VISA Secure / Verified by VISA) - September 25th, 2024

Mastercard (Mastercard Secure Code) - September 24th, 2024

American Express (SafeKey) - September 24th, 2024

Diners Discover (ProtectBuy) - September 25th, 2024

JCB (J/Secure) - September 26th, 2024 

EMV 3DS 2.1.0 transactions sent after September 24, 2024, will not be processed.

All merchant solutions migrate to 3DS 2.2.0 which allows for more enhanced authentication performance and frictionless user experience


Requirement

EMV Tag 'DF3F':

Description

Discover support of D-PAS-Connect, if the Storage Data Element (Tag ‘DF3F’) is available on the Card, the Merchant, Acquirer or Processor must forward this information to the Issuer.

Acquirers must be able to handle and pass along these D-PAS Connect tags (Form Factor and Storage Data) in the EMV tag fields (ISO Field 55 data)


Requirement

Amex Public Key expiry

Description

AMEX CAPK (Certification Authority Public Keys):
Amex CAPK 1408-bit keys to expire on 31 December-2024
Amex CAPK 1984-bit keys expiry extended to 31 December 2033
Mastercard Public Key Expiry Dates
Mastercard CAPK (Certification Authority Public Keys)
Mastercard CAPK 1984-bit key expiry is now 31 December 2033
UPI Public Key Expiry Dates
UPI CAPK (Certification Authority Public Keys)
UPI CAPK 1984-bit Key, Index 04, expiry is extended to 31 December 2034
JCB Public Key Expiry Dates
JCB CAPK (Certification Authority Public Keys):
JCB CAPK 1984-bit Key, Index 14, expiry is extended to 31 December 2033
Contact us for a quote
“Working on the PayShap playbook and launch campaign was an intense high-pressure exercise with really tight deadlines. This was a game changer and first for South Africa. Working with iCombine and in particular Danielle Shein who headed up the exercise made it all possible. With an extreme focus on details and tight control of deliverables and timelines Danielle and her iCombine team not only project managed an extremely complex project she really “got” the complexities of the township kasi economy and the nature of the cash informal economy that PayShap was to address to a large part. The combination of an understanding of this informal economy and detailed project management was the key factor in a successful launch (not to mention the long weekends and late nights as deadlines approached). I am pretty confident to say that this project would not have been delivered in time and as well without Danielle and iCombine working with Kasinomics.”
Read more
- GG Alcock, Marketer / Author / Speaker / Entrepreneur at Kasinomics
“Ama-KonekXin had the absolute pleasure of working with the iCombine Team on a rapid payments programme, PayShap, developed as part of the SA Reserve Banks vision to simplify and make real time payments affordable and efficient.

As the lead agency on an extremely complex and industry first, Danielle and her Team were tasked with managing a 360 solution across 7 agencies and key banking institutions in South Africa. This SA first included in-depth market research which formed the basis of the Industry Playbook and followed on with the roll out across OOH, Community Radio, Social Media, F2F Activations and a Website all supported by PR.

Danielle has an incredible ability to “combine” and pull a team together, extracting nothing but the best in short periods of time and under enormous pressure. iCombine managed to pull off in 4 months what other agencies said they could only think about in 12! All while ensuring minute attention to detail, continuous sense checking re: output and end deliverables coupled with her ability to divide and conquer world class commercials from a cast in stone budget.

Despite the ongoing go live date changes Danielle showed agility and the ability to adapt to meet with superior end-results. She continued to keep the Team focused and motivated to excel throughout a process that had no previous best-case practices or benchmarks.

An incredible leader and an inspiration to work with!

I would go into battle with Danielle and the iCombine Team any and every day!”
Read more
- Michele Thackwray, CEO at Amakonekxin
“As a development manager, I have encountered numerous stakeholders assigned to roles that may not align with the necessary requirements for seamless project execution but upon engaging with several resources from iCombine, I was truly impressed by their commitment to staying present, eagerness to assist consistently, and their persistent drive to overcome challenges. I extend my sincere appreciation to the iCombine team for their invaluable contributions, ranging from gathering requirements to improving our financial situations that emerged throughout the project. Their substantial involvement throughout the entire process, from alpha to omega, has been instrumental, and we are truly grateful for their exceptional support.

Kudos to the iCombine team, your dedication has truly exceeded our expectations.”
Read more
- Betty Okharedia, Director & Product Development Manager at Phiresky
As the Co-CEO of Clockwork, I’m delighted to provide a glowing recommendation for our esteemed consulting partners at iCombine. Our collaboration with iCombine in launching the Payshap brand in 2023 stands as a testament to their exceptional expertise, professionalism and unwavering commitment to launching the brand in time. Despite the tight timelines and high-pressure environment surrounding the launch of Payshap, they exhibited remarkable poise and leadership, effectively steering the project towards its objectives. I look forward to partnering with iCombine on numerous brand launches in the future.
Read more
- Tom Manners, Co-CEO at Clockwork
We recently had the pleasure of working with iCombine on a highly complex payment application debugging project for a new payment terminal. Despite the daunting challenge of coordination efforts across three different time zones, their team demonstrated exceptional professionalism, adaptability and expertise within the L3 testing and certification domain. The seamless collaboration and effective communication facilitated by iCombine were instrumental in the project's success, making them a valuable partner.
Read more
- Global Testing, Inspection and Certification Company headquartered in the Netherlands
I have had the opportunity to work with iCombine on multiple projects within the payment and mobile payments sector. I am delighted to provide a glowing testimonial for our esteemed business partner who has demonstrated exceptional skill and dedication in developing and implementing a payment strategy involving multiple vendors and stakeholders. Their strategic approach, diligence, and effective communication have been instrumental in achieving a successful outcome for our organization.

Our partner’s ability to navigate complex relationships, negotiate favourable terms, and ensure seamless coordination among all parties involved has truly set them apart. Their commitment to excellence, problem-solving mindset, and initiative-taking attitude have been invaluable throughout the entire process.

Backed by years of experience and an extraordinarily strong understanding of the payment market space and embracing leading-edge technology and solutions in the sector, ensured a sustainable product set and support model delivered by iCombine for the business.

Thanks to their expertise and leadership, we have not only streamlined our payment technology processes but also strengthened our relationships with vendors and stakeholders. I enjoyed my XLink working relationship with iCombine, and we currently continue working jointly on solutions and partnerships in this ever-evolving technology sector.

I have full confidence in recommending our business partner for their outstanding contribution to our success, and I look forward to continued collaboration and growth toge
Read more
- Hymie Marnewick, Previous CCO and CEO of XLink Communications (2005 – 2022), current CEO NetEngage PTY LTD
© iCombine 2024 | All Rights Reserved

Download your POS brochure

By completing this form, you grant access to your personal information and consent to iCombine using your personal information for the purpose for which it is disclosed. For further information on how we use your personal information and your rights in this regard, please review our Privacy Policy.

Download your mPOS brochure

By completing this form, you grant access to your personal information and consent to iCombine using your personal information for the purpose for which it is disclosed. For further information on how we use your personal information and your rights in this regard, please review our Privacy Policy.