Can merchants use encryption solutions not listed on the PCI Council?s website to reduce their PCI DSS validation effort?
Yes, however, PCI SSC recommends the use of PCI-listed P2PE solutions. Please reference FAQ 1158 regarding the use of PCI-listed P2PE solutions regarding PCI DSS.
Merchants using encryption solutions that are not included on PCI SSC?s list of Validated P2PE Solutions should consult with their acquirer or the payment brands about the use of these solutions. See FAQ 1142 for information regarding contacting the payment brands.