Re: PCI DSS - VDI (vmware) SAQ-C-VT question

[Rich Graves <rgraves () CARLETON EDU>]

The complete lists of PCI validated end-to-end encryption applications and solutions is here: 

https://www.pcisecuritystandards.org/approved_companies_providers/validated_p2pe_solutions.php 
https://www.pcisecuritystandards.org/approved_companies_providers/validated_p2pe_applications.php 

There are 13 QSAs in the world that may certify a P2PE application as PA-DSS compliant. That list is at 
https://www.pcisecuritystandards.org/approved_companies_providers/p2pe_companies.php 

Since the Square reader is not PA-DSS validated, it is technically up to you to perform architecture and code reviews, 
physical penetration tests, etc. Or, you could observe who Square's primary investors are, and accept the risk. (Things 
might get interesting if you use Square and have a breach of AMEX or MasterCard data, though.)