7.2.1 ...all security relevant processing be performed inside the secure perimeter. No security relevant decisions shall be made by system components that do not belong to the cardholder's credential when they are on the attack side of the door. 7.2.2 ...compensating controls applied such as tamper switches and FIPS 140-2 certified cryptographic processing within the reader itself. 7.3 Registering Physical Access Privileges 7.3.1 be able to define populations (validities) such as "guest, visitor, and regular access". 7.3.2 Shall be able to define: Access points for each population. 7.3.3 Shall be able to define: Temporal access rules for each population. 7.3.4 Shall be able to define: Authentication mode required to support 7.3.2 and 7.3.3. 7.4 PKI Configuration
7.2.1 ...all security relevant processing be performed inside the secure perimeter. No security relevant decisions shall be made by system components that do not belong to the cardholder's credential when they are on the attack side of the door. 7.2.2 ...compensating controls applied such as tamper switches and FIPS 140-2 certified cryptographic processing within the reader itself. 7.3 Registering Physical Access Privileges 7.3.1 be able to define populations (validities) such as "guest, visitor, and regular access". 7.3.2 Shall be able to define: Access points for each population. 7.3.3 Shall be able to define: Temporal access rules for each population. 7.3.4 Shall be able to define: Authentication mode required to support 7.3.2 and 7.3.3. 7.4 PKI Configuration