A POS hardware checklist should describe a recoverable checkout station, not a shopping list of attractive devices. Each register, reader, printer, drawer, scanner, display, network component, cable, and spare needs a business purpose, compatible configuration, physical location, owner, support route, and replacement plan.
Inventory the whole physical stack
Record registers, tablets or phones, card readers, docks, customer displays, receipt and kitchen printers, cash drawers, barcode scanners, scales where relevant, label equipment, routers, access points, switches, cellular backup, power protection, chargers, mounts, cables, and spare units. Include model identifiers, serial or asset identifiers, assigned location, ownership, warranty, and current support contact.
Map connection types and dependencies. A printer may rely on a local network, a drawer on a printer, a reader on a paired device, and the application on internet or local services. Confirm compatibility through current documentation for the proposed software, operating system, payments arrangement, peripherals, and location environment. Do not assume a familiar connector or appearance proves support.
Scenario: one peripheral stops the counter
At opening, the register starts but the reader cannot pair, the receipt printer has moved networks, and the cash drawer no longer opens automatically. The original installer is unavailable. Staff can accept some tenders but do not know which failure is isolated, which cable belongs to which device, or who supports each component.
The checklist should let a backup identify the station, verify power and connections, use an approved fallback, replace one component, preserve payment state, and escalate with sanitized evidence. It should also say when staff must stop rather than improvising an unsupported payment or network workaround.
Run hardware acceptance before launch
Label devices and cables, photograph approved connections, and maintain a location diagram without recording secrets. Start from power-off, sign in with a backup role, load the catalog, scan an item, open the drawer through an approved test, print each required output, and run approved payment tests. Then restart each component separately.
Interrupt the internet, local network, printer, reader, scanner, and one register separately where safe. Record visible messages, continued functions, queued state, recovery order, and support evidence. Replace a device from inventory, revoke the old assignment, and confirm reports retain stable transaction history. This publication has not performed the acceptance test.
Add a daily custody check for mobile and removable equipment. Record who receives each device, charge level, visible damage, tamper concerns, assigned counter, and return at close. Staff should know how to isolate suspicious or missing equipment without continuing to use it. The inventory owner should reconcile physical devices to administrative assignments and investigate differences promptly.
Edge case: approved hardware becomes compliance proof
A supported reader or outsourced processor can reduce particular exposures, but it does not automatically make the merchant PCI DSS compliant. PCI SSC guidance should frame responsibilities for merchant staff, provider, processor, application, devices, network, physical controls, integrations, and validation in the real deployment.
Avoid storing sensitive card data in the inventory, screenshots, tickets, or troubleshooting notes. Define what support evidence may be captured and who may access it. Hardware retirement should include account disassociation, data-handling instructions, physical disposition, inventory update, and confirmation that reusable devices are actually supported in the next configuration.
Hardware readiness criteria and conclusion
Approve a station only when compatibility is documented, assets are inventoried, connections are known, power and network paths are tested, staff roles work, failures are isolated, spares can be installed, support is mapped, and retirement is defined. Keep an opening and closing inspection proportionate to the business.
The best hardware setup is the smallest complete stack that survives credible failures without unsafe improvisation. Store the checklist with diagrams, contracts, warranties, support contacts, and replacement steps. Re-run it after application, operating-system, device, network, processor, peripheral, or location changes.
Traceable evidence
Sources for this decision
- standardsPCI Data Security StandardPCI Security Standards Council · checked Aug 5, 2026Open source ↗
- standardsPCI SSC Merchant ResourcesPCI Security Standards Council · checked Aug 5, 2026Open source ↗
- standardsPCI DSS and outsourced payment processingPCI Security Standards Council · checked Aug 5, 2026Open source ↗