2013-11-07
The Bank of Mozambique issued Circular No. 02/EPI/2013, effective November 7, 2013, mandating that all payment terminals (ATMs and POS) acquired from January 1, 2014 must comply with detailed minimum technical, security, and software specifications. The regulation requires compliance with EMV Level 1/2 standards, PCI 1.X/2.x certifications, specific hardware capacities (e.g., cassette counts, processor speeds, memory), and climate-adaptive construction for Mozambique's environment. It further establishes that the Bank will update these specifications according to technological evolution and requires suppliers to provide full XFS layer management, Windows XP compatibility, and accessibility features such as voice commands and headphone jacks.
CIRCULAR NO. 02/EPI/2013 DEPARTMENT OF EMISSION, PAYMENT SYSTEMS AND INFORMATION TECHNOLOGY Maputo, November 7, 2013
SUBJECT: Minimum Specifications for Payment Terminals to be acquired from January 1, 2014
Within the modernization of the National Payment System (NPS), partly determined by defining the minimum specifications for payment terminals in the country, the Bank of Mozambique, exercising its competence under paragraph b) of number 2 of article 6 of Law No. 2/2008, of February 27 (National Payment System Law) and under paragraph d) of number 2 of article 37 of Law No. 1/92, of January 3 (Organic Law of the Bank of Mozambique), establishes the following:
All payment terminals to be acquired from January 1, 2014 must comply with the minimum specifications contained in the annex to this Circular.
The minimum specifications for payment terminals established in this Circular are updated by the Bank of Mozambique according to technological evolution.
Any doubts arising from the interpretation and application of this Circular must be submitted to the Department of Emission and Payment Systems of the Bank of Mozambique.
This Circular enters into force immediately, revoking all provisions to the contrary.
BANK OF MOZAMBIQUE Department of Emission, Payment Systems and Information Technology Esselina Macome Administrator
MINIMUM CHARACTERISTICS OF ATMS/POSS
| # | Designation | Specification | Description |
|---|---|---|---|
| 1 | Model | Built-in on walls | Large size: minimum 6 cassettes, including one for rejected notes. Medium size: Minimum 3 cassettes, including one for rejected notes. Small size: minimum 2 cassettes, including one for rejected notes. |
| Non-built-in. However with floor anchor at four points | Large size: minimum 6 cassettes, including one for rejected notes. Medium size: Minimum 3 cassettes, including one for rejected notes. Small size: minimum 2 cassettes, including one for rejected notes. | ||
| 2 | CEN L or UL-291 Safe | Hybrid and redundant security mechanism | Mechanical lock and double electronic lock with timer. Chemical and mechanical shielding, thermal protection. |
| 3 | Dispenser Characteristics | Performance | 6 notes/second |
| Cassette capacity | 1000 to 3000 notes | ||
| Rejected notes cassette | Minimum 1500 notes | ||
| Dual shutter cash pocket | |||
| Cash flow recycling capacity | Withdrawal/deposits | ||
| Dispenser must have a device to detect foreign objects for illegal access ("fishing"); Cassettes must be self-sealing. | |||
| 4 | Deposit Module | Intelligent deposit module (IDM V) | Single-check / Bulk-check. Bulk document intelligent deposit module (IDM): Minimum 30 checks without envelope. Must have front/rear image capture device and CMC7 reader with authentication and deposits in envelopes. |
| 5 | Card Reader Characteristics | Cloning detection device | EMV Level 1; Complies with Visa certification (TDES and ADA); Hybrid insertion for magnetic stripe and smart card reading (DIP). DIP type for cloning prevention. |
| 6 | PIN PAD | 4x2, 4x4 Function keys | Alphanumeric keyboard per EN 1332-3, EBS100-V3, ISO-9564 Annex E, ITU-E161 and ISO-9241-4 standards. Mandatory proprietary keys “.” and “00” on both sides of “0”. Incorporates encryption (EPP, DES, T-DES and Unique Key), voice command system. Embedded luminous indicators in keys. |
| 7 | Barcode Reader | For payments of invoices with printed barcodes. | |
| 8 | Receipt/Journal Printer Characteristics | Graphical and Thermal | Allows printing of minimum 40 legible characters per line and 80mm width. Automatic feeding and cutting system. Receipt jam prevention systems. |
| 9 | Supervision Module | Color LCD-TFT with 800x600 resolution | Minimum 10.2”. Flexible access for supervision team. Interior luminosity: 300 cd/m²; Exterior luminosity: 900 cd/m². Peripherals included in module (keyboard/mouse). Touchscreen monitor is optional. |
| 10 | Computer Characteristics | ARM v7 Cortex A8 processor | Minimum 834MHz. RAM: Minimum 2GB. DVD Read/Writer. HDD with minimum 80GB, video card with 640x480 @ 32K colors or 32 bits, and CPU equivalent to Pentium @1.2GHz; |
| 11 | Customer Monitor | Includes (4+4 side function keys on both sides of monitor); TFT/LCD Touch screen with vibrating feedback | Minimum 10.2”. Interior luminosity: 300 cd/m²; Exterior luminosity: 900 cd/m². |
| 12 | Equipment Protection | High-density, intelligent, effective and online UPS (interactive) | Minimum 1500VA with a minimum autonomy of 20 minutes. |
| 13 | Communications | Built-in modem: 56K dialup. Ethernet with 100 Mbps for TCP/IP: SSL configurable. Wireless. Automatic alert system (RMS). | |
| 14 | Security | Cameras. Fire detectors. Built-in siren. Anti-vibration. Cloning protection in card readers. Alarm sensors. Security mirrors. Cloning detection device. Presence detection sensors. | EPP must have PCI 1.X certification and support manual key loading, remote loading and RKL (Remote Key Loading). |
| 15 | Communicability | Reports and prints verification details for all transactions performed. | |
| 16 | Construction adapted to Mozambique's climate | Interior: Temperatures between +10 to 40°C; Relative Humidity: 20% to 80%. Exterior front: Temperatures between -5 to 50°C; Relative Humidity: 15% to 90%. Exterior rear: Temperature +5 to 40°C; Relative Humidity: 20% to 85%. | |
| 17 | Software Requirements | XFS layer management (version 3 or higher). Drivers for non-XFS peripherals. Full XFS documentation. Windows XP and Disk Masters included. Operating system lockdown. | ATM suppliers must ensure all peripherals supported by CEN WOSA/XFS standard are managed by the XFS layer. ATM suppliers must provide drivers allowing local ATM application and operating system to manage all peripherals not managed by the XFS layer (UPS or any other devices). ATM suppliers must provide all XFS documentation for supplied equipment. At minimum, machines must have Windows XP and Disk Masters for the equipment, including all software (operating system, WOSA XFS drivers and configurations) necessary for installation during the terminals' lifecycle, according to SIBS requirements. Example: operating system lockdown. |
| 18 | Accessibility | TFT/LCD Touch screen monitor with vibrating feedback; Voice command system. Headphone jack. | In addition to: A TFT/LCD Touch screen monitor with vibrating feedback; Voice command system. ATMs must have other accessories allowing accessibility (e.g., headphone jack). |
| # | Specification | Details |
|---|---|---|
| 1 | Chip Reader | EMV Level 1 |
| 2 | Magnetic Reader | Minimum 20 columns |
| 3 | Printer | Minimum 20 columns |
| 4 | Display | Minimum 2 lines |
| 5 | Communication | Online capacity |
| 6 | Core | EMV Level 2 Certified |
| 7 | Certificate | PCI 2.x |
| 8 | Certification | VISA ADVT/MASTERCARD M-TIP |
| 9 | RAM Memory | Minimum 6MB |