Windows 2000 Users – It’s Time to Upgrade
If you are one of the few merchants who may still be using the Windows 2000 operating system in your cardholder data environment (CDE), then it’s time to upgrade. After Microsoft phased out support for Windows 2000 in July 2010, a number of third-party vendors continued to deliver security patches to their customers, ensuring their operating systems were protected. However, this is no longer the case. In order to help your business remain secure and compliant, Shift4 will no longer support Windows 2000. Here’s what you need to know.
Why Is This Important?
When Microsoft stopped delivering security patches to Windows 2000, some third-party vendors continued providing security patches to their customers because the operating system was so widely used. However, that support has now ceased. You should have already heard about upgrading your system from your merchant bank, Internal Security Assessor (ISA), or Qualified Security Assessor (QSA). We are offering this information just in case you have not been previously informed and also to inform you that we are now removing our support.
Upgrade Now to Ensure PCI Compliance
Shift4’s security products continue to provide some protection for your payment environment, so your breach profile has not increased. However, because Shift4 no longer supports Windows 2000, no updates will occur. Therefore, if you do not upgrade from the Windows 2000 operating system, your PCI compliance may be impacted. Requirement 6.2 of the PCI Data Security Standard (PCI DSS version 3.0) tells us to “ensure all system components and software are protected from known vulnerabilities by installing applicable vendor-supplied security patches.” So, please upgrade as soon as you can – but don’t panic!
What to Do
Notify your merchant services provider (MSP) or merchant bank and your ISA or QSA to determine if you need guidance on upgrading your systems from Windows 2000.
Again, this is not an upgrade offered by or a requirement made by Shift4 or DOLLARS ON THE NET®. But, if you have any questions please contact our Customer Support team at firstname.lastname@example.org or call 702.597.2480 (option 2).