Page 1
VX 680 Reference Guide Verifone Part Number DOC268-004-EN-G, Revision G...
Page 2
Verifone, Inc. The information contained in this document is subject to change without notice. Although Verifone has attempted to ensure the accuracy of the contents of this document, this document may include errors or omissions. The examples and sample programs are for illustration only and may not be suited for your purpose.
Introduction to File Authentication ........55 The Verifone Certificate Authority ....... . . 55 Special Files Used in the File Authentication Process .
Page 4
File Group Permissions......... 94 Download an Operating System Update Provided by Verifone ..94 File Authentication for Back-to-Back Application Downloads .
Overview. Provides an overview of the VX 680 terminal. Chapter Using the Terminal Keys. Explains how to set up and install the VX 680 terminal. It tells you how to select a location, establish power and telephone line connections, and how to configure optional peripheral devices.
Global Positioning System Global System for Mobile Communication HSPA High Speed Packet Access Internal Thermal Printer Liquid Crystal Display Light Emitting Diode Merchandise Return Authorization MSAM Micromodule-Size Security Access Module Personal Area Network PIN Entry Device VX 680 R EFERENCE UIDE...
Page 10
Recommended Standard 232 R-UIM Removable User Identity Module Security Access Module Secure Digital Subscriber Identity Module Thin Film Transistor UART Universal Asynchronous Transmitter/Receiver UMTS Universal Mobile Telecommunications System Universal Serial Bus Verifone Part Number Wi-Fi Wireless Fidelity VX 680 R EFERENCE UIDE...
This chapter provides a brief description of the VX 680 terminal. This terminal features a large color and touchscreen display, fast processor, abundant memory, PCI 2.0, PCI 3.0, and PCI 3.1 security (VX 680 3G), as well as SIM support and integrated contactless features.
Features and VX 680 terminals provide the right combination of features and functions including Benefits a triple-track magnetic stripe card reader, smart card reader, SIM (dual SIM for VX 680 3G), integrated PIN pad, color touchscreen display, optional contactless support, and a quiet yet fast internal thermal printer (ITP).
Contactless version accepts EMV and mag-stripe contactless payments as well as PIN-based transactions. Communication • VX 680 GPRS and 3G: Long-range wireless payment for retailers that have no Technology physical location limitations. • VX 680 CDMA: Long-range wireless payment for Non-GPRS coverage areas.
Page 14
ERMINAL VERVIEW Features and Benefits VX 680 R EFERENCE UIDE...
Using the Terminal Keys Before proceeding to other tasks, familiarize yourself with the operational features of the VX 680 terminal keypad to enter data. This section describes how to use the keypad, which consists of a 12-key Telco- style keypad with three color-coded keys below the keypad. Using these keys you can perform all data entry tasks described in this manual.
Before you can use the keys on the front panel to enter ASCII characters, the Modes VX 680 terminal must be in a mode that accepts keyed data entry. There are two terminal operating modes, each enabling you to press keys to enter data under specific circumstances: •...
In Verix Terminal Manager, press the Enter key to begin a selected procedure, step forward or backward in a procedure, and confirm data entries. The specific effect of the Enter key depends on the currently active Verix Terminal Manager menu VX 680 R EFERENCE UIDE...
Page 18
SING THE ERMINAL The Keypad VX 680 R EFERENCE UIDE...
Manager • Application programmers configure a development terminal, download development versions of the VX 680 application program, then test and debug the application until it is validated and ready to be downloaded to other terminals. • Deployers of VX 680 terminals to end-user sites perform the specific tasks...
The VX 680 terminal you are using may or may not have an application program Terminal Status running on it. After you have set up the terminal (refer to Terminal Setup in VX 680 Installation Guide, VPN-DOC268-003-EN) and the terminal is turned on, use the...
File Groups File Groups The VX 680 operating system implements a file system in memory. Files are assigned to one of 15 groups for access control. Groups are similar to directories on a computer in that different applications can be stored in separate file groups, just like different computer applications can be stored in separate directories.
1> System Error Log 2> Clock 3> Console Settings 4> Change Passwords 5> Key Management Figure 4 Menu 2 On successful entry of the system password, appears. VERIX TERMINAL MGR MENU VX 680 R EFERENCE UIDE...
ENTER Complete the operation. Return to the main Verix Terminal Manager menu. Procedure descriptions are arranged in the following tabular format: Table 4 Procedural Description Example Display Action Action required Screen displayed VX 680 R EFERENCE UIDE...
Page 24
Press the key to choose the function and display the submenu ENTER selected. When editing, pressing will save a newly entered variable. ENTER • Press the key to exit any submenu without saving changes. CANCEL VX 680 R EFERENCE UIDE...
ERMINAL ANAGER Verix Terminal Manager Menus Enter and Exit Verix To enter terminal manager after you have turned on the VX 680 terminal, follow Terminal Manager the procedure described below. On successful completion, some operations automatically exit Verix Terminal NOTE Manager and restart the terminal.
Page 26
Table 5 Enter Verix Terminal Manager (continued) Display Action VERIFONE VX 680 If an attempt to break into the terminal’s system has been made, the message * * T A M P E R * * QT6G012K displayed in place of the certificate. The terminal will...
8> TERMINAL INFO To view diagnostics, select 9>DIAGS. To toggle to menu 2, VERIX TERMINAL MANAGER press icon ) or to quit any operation within DOWN this menu, press CANCEL VX 680 R EFERENCE UIDE...
Page 28
1-15 is for other applications. Then, press ENTER Group ID: _1 To return immediately to VERIX TERMINAL MGR MENU or to quit any operation within this menu, press CANCEL VX 680 R EFERENCE UIDE...
Page 29
All Files Will Be To return to , press VERIX TERMINAL MGR CANCEL Cleared From Group n press to continue downloading an application. ENTER 1> Cancel Download 2> Continue VX 680 R EFERENCE UIDE...
Page 30
If a FULL multiple download has been previously done, this screen appears instead of the previous two GIDS TO ERASE: screens. This screen lists all the erased GIDs on the 1,2,4 previous download. Select to erase all CONTINUE memory. VX 680 R EFERENCE UIDE...
Page 31
WAITING FOR DOWNLOAD VTM DOWNLOAD MGR Gnn Choose to download via the COM 7 port. 3> COM7 Unit Receive Mode To return to the main menu without saving your selection, press CANCEL WAITING FOR DOWNLOAD VX 680 R EFERENCE UIDE...
Page 32
Not all listed options are available for all Note: platforms. VTM DOWNLOAD MGR Gnn Choose to download using the USB 7> USB DEV connection. To return to the main menu without saving your Unit Receive Mode selection, press CANCEL WAITING FOR DOWNLOAD VX 680 R EFERENCE UIDE...
Page 33
TCP address (up to 40 characters long including the colon and port number) *ZP HOST and press ENTER ADDR (IP:PORT) ___________________ ___________________ VTM DOWNLOAD MGR Gnn *ZP HOST ADDR ___________________ ___________________ VX 680 R EFERENCE UIDE...
Page 34
You can view the specified values on the confirmation screen. Select to go back and modify the 1> EDIT specifications or to begin the download. 2> START *ZA= nnnn *ZP= nnnn *ZR= nnnn *ZT= nnnn 1> Edit 2> Start VX 680 R EFERENCE UIDE...
Page 35
It is completely separate from the FLASH memory. FLASH FLASH Avail 124182 KB _______ memory is where code and data is stored when it is not executing. RAM and FLASH are physically different and are different sizes. VX 680 R EFERENCE UIDE...
Page 36
This screen shows the different Directory To return to the main menu, press CANCEL To return immediately to VERIX TERMINAL or to quit any operation within this menu, MGR MENU 1 press CANCEL VX 680 R EFERENCE UIDE...
Page 37
This option is only available when file Group 1 is entered as the group ID. To go back to the second menu of the VERIX without deleting files, press TERMINAL MGR CANCEL VX 680 R EFERENCE UIDE...
Page 38
Ver: NO PROFILE Modem Type • Model Number of Modem • Your terminal’s screen may vary depending on the model and operating system version installed. To return to the previous menu, press CANCEL VX 680 R EFERENCE UIDE...
Page 39
6> DEBUGGER To view the Tamper logs, choose 7> Tamper Log To view the RKL logs, choose 8> RKL Log To view the RKL Log export, choose 9> RKL Log Export VX 680 R EFERENCE UIDE...
Page 40
1> Test for print optimization. 2> Paper Feed Press 2 to run approximately 5cm (2 in) of paper through the printer without printing. To go back to the screen, press VERIX DIAGS MGR CANCEL VX 680 R EFERENCE UIDE...
Page 41
(for example, the 1 key displays keycode 31). For more hexadecimal ASCII keycodes, refer to the ASCII table in Appendix To stop the test and return to the VERIX DIAGS MGR screen, press CANCEL VX 680 R EFERENCE UIDE...
Page 42
Please enter If you enter an incorrect password, Password for GID nn appears. Press ENTER. Verify ----------------- PLEASE TRY AGAIN your password and reenter it. To return to the screen press VERIX DIAGS MGR CANCEL. VX 680 R EFERENCE UIDE...
Page 43
05/29/09 06:16 00009 in MM/DD/YY format, while the time is displayed as a 11/01/08 08:21 00001 24-hour clock. 10/30/08 19:36 00001 Contact your Verifone representative for information about the events. To go back to the screen, press VERIX DIAGS MGR CANCEL.
Page 44
To go back to the screen, press VERIX DIAGS MGR CANCEL <EMPTY> 9> DIAGS 9> RKL LOG EXPORT To go back to the screen, press VERIX DIAGS MGR Outputting log . . . CANCEL Log output done VX 680 R EFERENCE UIDE...
*ZT through the keypad. The keys are displayed in the order in which it has been entered, not in alphabetic order. NOTE For a complete list of the ASCII characters supported by the VX 680 series, as well as their decimal and hexadecimal equivalents, please refer to ASCII Table.
Page 46
Program abort: attempt to execute code at • an invalid address Undefined abort: attempt to execute an • illegal instruction (task number): indicates type of task that • TASK was currently executed: Verix Terminal Manager • first user task • VX 680 R EFERENCE UIDE...
Page 47
LR may not always contain the current Note: return address. (fault address): contains the illegal address • ADDR that the application was trying to access. Press any key to return to VERIX TERMINAL MGR MENU 2 VX 680 R EFERENCE UIDE...
Page 48
ENTER New Time: __:__:__ new time The current time and date is then displayed on the next screen. Press to return to the third CANCEL menu of the VERIX TERMINAL MGR VX 680 R EFERENCE UIDE...
Page 49
To return to the main menu and save your changes, press . Otherwise, press to go back ENTER CANCEL to the second menu of the VERIX TERMINAL MGR without saving the changes. VX 680 R EFERENCE UIDE...
Page 50
ENTER Please enter If you enter an incorrect password, the following Password for GID n: message appears: __________ Change Passwords Gn Please Try Again Press ENTER. Verify your password and reenter it. VX 680 R EFERENCE UIDE...
Page 51
CLEAR to delete the entry and then reenter the new password. New __________ VTM PASSWORD MGR The terminal requests that you verify the new password. Reenter the new password and press ENTER Again __________ VX 680 R EFERENCE UIDE...
Page 52
COM1 and COM5 (IPP port) to BYTES RCVD 0 allow key loading. Press 1 to END Press 1 when finished with the key load. The connection times out after a minute if Note: the key loading does not start. VX 680 R EFERENCE UIDE...
Page 53
Pressing the key changes the CLEAR characters or symbols you enter, but does not cause additional asterisks to appear. Secure a copy of every password to ensure it is not forgotten or lost. VX 680 R EFERENCE UIDE...
File authentication is a secured process for authenticating files using digital signatures, cryptographic keys, and digital certificates. This process makes it possible for the sponsor of a VX 680 terminal to logically secure access to the terminal by controlling who is authorized to download application files to that terminal.
VX 680 clients—either internally within Verifone or externally to sponsors. All certificates issued by the Verifone CA for the VX 680 platform, and for any Verifone platform with the VeriShield Retain security architecture, are hierarchically related. That is, a lower-level certificate can only be authenticated under the authority of a higher-level certificate.
To establish the logical security of applications to download to a VX 680 terminal, the designated signer uses the signer private key issued by the Verifone CA as this is a required input to the VeriShield File Signing Tool.
Page 58
If these values match, the operating system marks the application file “authenticated” and allows it to run. The application file is tested and debugged. After the application file is fully debugged, it becomes an input for the deployment process. VX 680 R EFERENCE UIDE...
Page 59
IF A MATCHING APPLICATION FILE IS FOUND, OS COMPARES .P7S FILE'S SIGNATURE AGAINST VALUES IN THE APPLICATION FILE'S CALCULATED SIGNATURE. IF THE VALUES MATCH, THE TWO FILES ARE AUTHENTICATED, AND THE ATTR_NOT_AUTH BIT IS SET TO 0. Figure 5 The Development Process VX 680 R EFERENCE UIDE...
Page 60
Smart card containing a set of certificates and private key. Smart card PIN. The Verifone CA sends the smart card and smart card PIN to the sponsor. The sponsor uses the smart card and smart card PIN as inputs for the deployment process.
Page 61
If these values match, the operating system marks the application file “authenticated” and allows it to run. Each successfully authenticated executable application file is allowed to run on the terminal (otherwise, the executable remains stored in the terminal memory but is not allowed to run). VX 680 R EFERENCE UIDE...
Figure 7 The Deployment Process Planning for File File authentication is an integral part of every VX 680 terminal. To safeguard the Authentication terminal’s logical security, the file authentication module requires that any executable code file must be successfully authenticated before the operating system allows it to execute on the terminal.
Page 63
Signature files are usually downloaded together with their target application files in the same data transfer operation. This recommended practice lets you specify and confirm the logical security status of the VX 680 terminal each time you perform an application download.
Page 64
Determine Successful Authentication To ensure the VX 680 terminal’s logical security, never assume that a target file was authenticated simply because it was downloaded to the VX 680 terminal together with its signature file.
1. If the modified file is an executable, it is no longer allowed to run. Digital Certificates The file authentication module always processes certificates before it processes and the File signature files. Digital certificates (*.crt files) generated by the Verifone CA Authentication have two important functions in the file authentication process: Process •...
Page 66
Introduction to File Authentication A development set of higher-level certificates is downloaded into each VX 680 terminal upon manufacture. When you take a new VX 680 terminal out of its shipping carton, certificate data is already stored in the terminal’s certificate tree.
Page 67
Verifone CA to use to logically secure sponsor and signer privileges when the VX 680 terminal is prepared for deployment. Customer-specific sponsor and signer certificates are usually downloaded to a VX 680 terminal as part of the standard application download procedure performed by a deployment service.
Page 68
(up to a maximum of 21 certificates). Required Inputs to the File Signing Process The required inputs to the file signing process are somewhat different for development terminals than deployment terminals. The significant differences are shown in Table VX 680 R EFERENCE UIDE...
Page 69
The required inputs to VeriShield File process are included, together with the Signing Tool must be obtained from the VeriShield File Signing Tool in the VX 680 Verifone CA to logically secure the SDK. These inputs make it possible for sponsor and signer privileges for the terminal.
Page 70
To do this, the original sponsor must order a “clear” smart card from the Verifone CA. The clear smart card is specific to the requesting sponsor. It restores a deployment terminal to the...
UTHENTICATION File Authentication and the File System File Application Memory Logically Divided Into File Groups Authentication The memory of a VX 680 terminal is logically divided into two main areas, or and the File partitions: System • operating system •...
Page 72
I: drive or an F: drive file. If a signature file cannot locate its matching application file, the application file is not authenticated. VX 680 R EFERENCE UIDE...
Page 73
A typical application download includes a variety of different file types. The following restrictions in Table 11 describe how you can download different kinds of files to the VX 680 terminal and how files are stored in the file system: Table 11 Download File Extensions File Type...
Figure 11 to make the required entries. The file signing process for operating system files is done for VX 680 customers NOTE by the Verifone CA. For operating system updates, Verifone provides customers with a complete download package that includes all certificates and signature files required for authentication.
Page 75
If the entry of a signer password is a required input, a secondary dialog box is NOTE displayed to enter and confirm the password. Please also note that a signer password is required for a deployment terminal, but not for a development terminal. VX 680 R EFERENCE UIDE...
Use the VxSIGN.KEY developer signer private key for development terminals. Use the signer private key provided by the Verifone CA for deployment terminals. -P, -p Signer password for decrypting Required input for development the signer private key.
Page 77
The -f switch indicates that the application file “file.out” must be signed by the file signing tool. Executable files, such as *.out and *.lib files, must always be signed if they are to run on the terminal following a download. Depending on the VX 680 R EFERENCE UIDE...
ALT+A or click Cancel to exit the VeriShield File Signing Tool utility. When the necessary signature files are generated to authenticate the application or applications on the VX 680 terminal, perform the application download procedure. For more information about file authentication within the context of specific...
VX 680 download and upload procedures: • Direct downloads: Files and/or data transfer directly from the sending system (a host computer) to the receiving system (a VX 680 terminal). A special cable (VPN 05651-xx) connects the RS-232 serial ports of the two systems. •...
• Back-to-back downloads: Files and data transfer from a sending VX 680 terminal to a receiving VX 680 terminal. A special cable connects the RS-232 serial ports of the two terminals. NOTE An external UART Dongle on both the sending and receiving terminal is required to attach the special cable.
OS software and firmware of the sending and receiving VX 680 terminals. Download In general, you can download files and data to a VX 680 terminal. The types of Content files and data can be grouped into the following functional categories: •...
Verix Terminal Manager or the issuing application. The file authentication module is not invoked, nor are any applications allowed to execute, until the terminal is manually restarted from within Verix Terminal Manager. VX 680 R EFERENCE UIDE...
• Full OS downloads are usually performed by Verifone at the factory and, on occasion, by those who deploy terminals on-site to upgrade older terminals to a newer OS version.
Applications application can run (execute) on the terminal. The application memory of the VX 680 terminal uses a system of file groups to store and manage multiple applications, as well as operating system files. This system of file groups are used in such a way that the data integrity of each...
ERFORMING OWNLOADS Use of I: drive and F: drive Physical and The VX 680 operating system controls physical access to GIDs 1–15 using Logical Access to password-protected Verix Terminal Manager functions. File Groups To download data into a specific file group, first enter Verix Terminal Manager and choose the target group by making the appropriate menu selections, then, enter the correct password for that file group.
For example, the following batch download list loads the executable code file FOO.OUT into the I: drive of the selected file group (default Group 1). Because the signature file, FOO.P7S is included, FOO.OUT is also authenticated when the terminal restarts after the download. VX 680 R EFERENCE UIDE...
If you do not insert SETGROUP.n special files into the download list, all files download into the target group selected in Verix Terminal Manager. If no number is added to the SETGROUP filename, SETGROUP.1 (GID1) is assumed. VX 680 R EFERENCE UIDE...
ERFORMING OWNLOADS Use of I: drive and F: drive Restrictions on File The VX 680 file system restricts how you can redirect files to other file groups. Redirection Here are the important points to remember: • The main application must always be downloaded into GID1.
Use of I: drive and F: drive Using DDL.EXE to The version of DDL.EXE included in the VX 680 SDK allows you to change the Automatically default drive and file group for a direct download by preceding the filename(s) on Redirect Files the DDL command line with a special filename.
Before an executable file can be downloaded to and allowed to run on a VX 680 terminal, the file must be digitally signed on the download computer using the FILESIGN.EXE file signing tool. The result of this procedure is a signature file recognized by its *.p7s filename extension.
In a typical batch application download, file authentication proceeds as follows: All certificate files (*.crt), signature files (*.p7s), and application files (*.out, *.lib, *.fon, *.vft, *.dat, and so on) download to the VX 680 deployment terminal in batch mode. When the terminal restarts after the download, the file authentication module searches the I: drive file system for the following two file types: •...
Page 92
I: drive. When all required certificates are authenticated and stored in the certificate tree, the file authentication process for signature files can proceed. Figure 12 Display Prompts During the File Authentication Process VX 680 R EFERENCE UIDE...
Page 93
When all certificates and signature files are processed and special files are deleted or redirected as required, the terminal restarts and the *GO application executes. VX 680 R EFERENCE UIDE...
This section discusses how file authentication controls who (which business Permissions entity) can store application files in which file groups in the VX 680 file system. By inserting zero-length SETDRIVE.x and SETGROUP.n files into a download list, you can specify which drive (x = I: or F:) and in which group (n = 1–15) to store an application file.
Back-to-Back terminals, the file authentication process on the receiving terminal is similar to an Application application download from a host computer to a standalone VX 680 terminal. Downloads There are, however, some important differences to take into account: •...
To optimize the authentication process, download certificates in a higher-level- certificates-first order. This way, they process faster than a random order download. Support for File For information regarding file compression, refer to the Verix eVo Volume I: Compression Operating System Programmers Manual (VPN DOC00301). VX 680 R EFERENCE UIDE...
OWNLOADS Effect of Downloads on Existing Files and Data Effect of When downloading application files and data to a VX 680 terminal, an important Downloads on consideration is the effect of download procedure on existing application files, files Existing Files...
ERFORMING OWNLOADS Set Up the Download Environment Set Up the The first step in performing a download to a VX 680 terminal is to establish the Download physical communication link between the sending and receiving systems required Environment to support the following download methods: •...
Page 99
COM2) serial I/O port on the download computer. Connect the RJ45 connector on the other end of the download cable to the COM1 port on the multiport adaptor and connect the adaptor to the multiport on the bottom of the VX 680 terminal. HOST COMPUTER FOR DOWNLOADS...
Page 100
To connect using the external dongle and Base Station: External Dongle and The following steps describe how to establish the cable link between the sending Base Station host computer and the receiving VX 680 terminal when a Base Station is used (see Figure 14): Connect the DIN-type connector on one end of the cable to the COM1 (or COM2) serial I/O port on the download computer.
Downloads Confirm that the parameters for the download by telephone are set in the download tool. Confirm that the receiving VX 680 terminal has a direct telephone line connection. Ensure that the correct keyed variables used to control downloads by telephone are stored in the CONFIG.SYS file of the target file group on the...
The procedure for direct application downloads is also discussed. Hardware Checklist The correct cable connects the download computer serial port (COM1 or COM2) to the RS-232 serial port (COM1) of the VX 680 terminal (refer to Cable Connection for Direct Downloads). Software Checklist ...
Group 1 application memory area of a Procedure VX 680 deployment terminal. Steps described in the Action column are performed directly on the VX 680 terminal. Notes provided in this column indicate and explain actions you must perform on the host computer.
Page 104
The USB flash drive is inserted when DOWNLOAD NEEDED • the initial DOWNLOAD NEEDED message is displayed. <error message> In both cases, the message will appear DOWNLOAD COMPLETE on the terminal screen after the VERIFONE.ZIP file has been downloaded. VX 680 R EFERENCE UIDE...
Page 105
9> Diags pressing the corresponding number on the keypad. To perform any type of download operation, press 3 to select the menu DOWNLOAD option. To cancel the download procedure, press CANCEL. VX 680 R EFERENCE UIDE...
Page 106
For a single application download, select . For multiple application download, Single-app select . (Refer to Chapter 5 Multi-app 1> Single-app detailed download instructions and 2> Multi-app information.) To return to , press VERIX TERMINAL MGR CANCEL. VX 680 R EFERENCE UIDE...
Page 107
A warning message will first appear once a download mode is selected. **** WARNING **** To return to the main menu without saving All Files Will Be your selection, press CANCEL. Cleared From Group 1 1> Cancel Download 2> Continue VX 680 R EFERENCE UIDE...
Page 108
The authentication process then continues to the next certificate until all new certificates are authenticated. VX 680 R EFERENCE UIDE...
Page 109
If the application attempts to access an unauthenticated executable or library, it may crash. Repeat the Direct Operating System Download Procedure using the correct certificates and/or signature files. VX 680 R EFERENCE UIDE...
Downloads downloads is also discussed. Hardware Checklist The correct cable connects the download computer serial port (COM1 or COM2) to the RS-232 serial port (COM1) of the VX 680 terminal (refer to Cable Connection for Direct Downloads). Software Checklist ...
Page 111
When the terminal restarts and the new OS files process, they are moved out of I: drive the Group 1 into the Group 0 area of the VX 680 file system. VX 680 R EFERENCE UIDE...
System Download download from a host computer into the Group 1 I: drive of a VX 680 terminal. Procedure Steps described in the Action column are performed directly on the VX 680 terminal.
Page 113
Select Full dld for a full OS download or select Partial dnld for a partial OS download operation. 1> Full dnld 2> Partial dnld To return to VERIX TERMINAL MGR MENU 1 press CANCEL. VX 680 R EFERENCE UIDE...
Page 114
In either case, when you press ENTER, the terminal is ready to receive the OS download from the host computer. For a direct OS download using COM2 of a multiport adapter, select the menu COM2 option by pressing the 9 key. VX 680 R EFERENCE UIDE...
Page 115
The authentication process then continues to the next certificate until all new certificates are checked. VX 680 R EFERENCE UIDE...
Page 116
If you performed a partial OS download and manually restarted the terminal, the application residing in the terminal (if any) executes. The application prompt is displayed on terminal restart, after OS processing, and the application starts. VX 680 R EFERENCE UIDE...
Set up the dial-up telephone line and modem connection on the host computer. Set up the direct telephone line connection on the receiving VX 680 terminal, as described in Establishing Telephone Line Connections in VX 680 Installation Guide, VPN-DOC268-003-EN.
VERIX TERMINAL MGR MENU Procedure ). When you press 1, the internal modem in the receiving VX 680 terminal dials the host computer to request the download. When the host computer accepts the call, the download procedure is initiated by the host.
Page 119
When you press 1, the terminal is ready to 5> USB Flash Memory receive the download from the host computer 6> TCPIP over the Telco port telephone line connection. 7> USB Dev 8> COM6 9> COM2 VX 680 R EFERENCE UIDE...
Page 120
The authentication process then continues to the next certificate until all new certificates are checked. VX 680 R EFERENCE UIDE...
Page 121
OS download, it executes on restart. Because a full OS download clears Note: the memory, all terminal applications, related certificates, and signature files must download to the terminal when performing this type of download. VX 680 R EFERENCE UIDE...
The procedure for back-to-back terminal downloads Downloads is also discussed. Hardware Checklist The correct serial cable connects the RS-232 ports of the sending and receiving VX 680 terminals (refer to Preparing Cable Connection for Back-to-Back Application Downloads). Software Checklist ...
Back-to-Back The back-to-back application download process consists of two main phases: Application Preparing a Gold VX 680 terminal (transfers application files to the Target Download VX 680 terminal). Procedure Downloading application files from the Gold terminal to a properly configured Target terminal.
Page 124
, set Group 1 and COM1 as VERIX TERMINAL MGR MENU 1 the port to receive the file transfer. Connect a cable (Verifone part number 05651-xx) between the RS-232 serial ports of the Gold and Target terminals using a UART Dongle connected to each terminal.
Page 125
FROM SYS MODE MENU 2, READY FOR SET GROUP 1 AND COM 1 DEPLOYMENT TO RECEIVE THE DOWNLOAD. FROM SYS MODE MENU 2, SELECT FULL OR PARTIAL DOWNLOAD AFTER THE UPLOAD OPERATION INITIATES. Figure 15 Back-To-Back Download Process VX 680 R EFERENCE UIDE...
Page 126
The procedure in Table 18 walks you through a back-to-back application download from a sending VX 680 terminal (Gold) to a receiving VX 680 terminal (Target). Back-to-back downloads require that one terminal, the Gold terminal, be loaded with the required applications. The receiving terminal is the Target terminal. The...
Page 127
The Target terminal begins to validate all files. Allow the Target terminal to complete file authentication and reboot the terminal. The Gold terminal is ready to perform another download. An application- specific menu is displayed after the Target terminal completes the reboot. VX 680 R EFERENCE UIDE...
Before you begin, make sure that the USB device is properly inserted in the terminal’s USB port and the Verifone.zip file resides in the device. Verifone.zip is the only filename recognized by the system as a downloadable file. For more information on how to build a Verifone.zip file, see Building a Verifone.zip File...
Page 129
Use the following instructions to build a CONFIG.SYS downloadable file: Open Notepad and create a .txt file containing parameter and value pairs. Run the Variable Length Record (VLR) utility to convert the text file to a downloadable file format (vlr -c input.file output.file). VX 680 R EFERENCE UIDE...
Page 130
After creating a CONFIG.SYS downloadable file, move the created file to the proper folder. Then, create a new .zip file named Verifone.zip on your root drive and move all the required GID folders into the .zip file. Make sure that Save Full Path Info is selected.
Download from a USB Flash Drive USB Flash Drive To begin downloading from a USB flash drive, insert the flash drive into the USB Download port of the VX 680 terminal and follow the instructions on Table Procedure Table 19...
Page 132
You can also choose the download option in 3> COM7 the menu by pressing the corresponding 4> SD Card number on the keypad. 5> USB Flash Memory 6> TCPIP 7> USB Dev 8> COM6 9> COM2 VX 680 R EFERENCE UIDE...
Page 133
2> Continue VERIX DOWNLOAD MGR Gn The terminal will automatically download the file Verifone.zip from the USB flash drive. appears on the USB DOWNLOAD COMPLETE USB DOWNLOAD COMPLETE terminal screen after a successful download. If you performed a full download, the terminal restarts automatically.
Page 134
If the application attempts to access an unauthenticated executable or library, it may crash. Repeat the Direct Application Download Procedure using the correct certificates and/or signature files. VX 680 R EFERENCE UIDE...
HAPTER Specifications This chapter discusses power requirements, dimensions, and other specifications of the VX 680 terminal. Power 12 V DC 2.0 A DC Power Pack UL, ITE listed, LPS power supply: Input rated: 100 - 240 V AC, 50/60 Hz Output rated: 12 V DC 2.0 A...
Page 136
PECIFICATIONS External Dimensions VX 680 R EFERENCE UIDE...
Contacts important that the exposed contacts of the VX 680 battery stay clean and unbent. Avoid touching the contacts of the VX 680 battery and the recessed area on the CAUTION terminal. Finger oils tarnish contacts, causing bad connections. When operating on battery power and experiencing a high occurrence of bad or incomplete data transfers, clean the contacts.
Monday - Friday, 8 A.M. - 8 P.M., Eastern time • International – Contact your Verifone representative Returning a Before returning a VX 680 terminal, smart battery, or Base Station to Verifone, you Terminal or must obtain an MRA number. The following procedure describes how to return Smart Battery...
• Reference the model and part number in the Note box. NOTE One MRA number must be issued for each VX 680 terminal you return to Verifone, even if you are returning several of the same model. Describe the problem(s).
File authentication module processes. • File compression module use messages from the VeriCentre DMM terminal management and download tool. Error Messages The following error messages may appear when the VX 680 terminal is in Verix Terminal Manager. Table 20 Error Messages Display...
Page 144
To use the debugging tool, you must sign, download, and authenticate the DBMON.OUT application. DOWNLOADING ERRORS This error only occurs on a VX 680 terminal when VTM DOWNLOAD MGR Gn downloading through TCP/IP. An application that TCP/IP NOT PRESENT supports the TCP stack does not exist.
Page 145
You entered an invalid parameter name. Select to go back to the parameter editor or CANCEL to add the entered parameter name ADD VARIABLE GID nn: NOT EMPTY as a new variable. <parm name> NOT FOUND 1> Cancel 2> Add Variable VX 680 R EFERENCE UIDE...
Page 146
Verix Terminal Manager password. New __________ : Make the appropriate menu selections to enter the new password. : Repeat the entry to confirm the new password. AGAIN : Displayed when the new PASSWORD CHANGED password is accepted. VX 680 R EFERENCE UIDE...
Page 147
When you select from the printer TEST PAPER FEED Version 0PRED1A1 diagnostics screen, terminal manager first checks if Status the printer is currently active. If it is, PRINTER BUSY displayed. PRINTER BUSY 1> Test 2> Paper Feed VX 680 R EFERENCE UIDE...
Page 148
LOAD TERMINAL The (optional) Terminal Management Agent (TMA) MANAGEMENT AGENT software is not resident in the VX 680 terminal. The TMA software is required to perform remote diagnostics. For more information about support for remote diagnostics, contact your Verifone service provider.
Page 149
A corrupt file is detected in the I: drive file system at terminal start up, after power-on, or during restart. This message may indicate a hardware problem; the error condition may be resolved through another download of the file. VX 680 R EFERENCE UIDE...
Page 150
*FAILED* be authenticated. This message remains on screen until all new certificates are checked, one by one. In special cases where system certificates are being installed, SYSTEM is displayed instead of CERTIFICATE CHECK CERTIFICATE VX 680 R EFERENCE UIDE...
YSTEM ESSAGES Information Messages Information The following information messages may appear when the VX 680 terminal is in Messages terminal manager. Table 21 Information Messages Display Action DOWNLOADING INFORMATION VERIX TERMINAL MGR During a back-to-back download session, this screen UPLOAD appears on the Gold terminal indicating that an I:CONFIG.SYS...
Page 152
VERIX TERMINAL MGR An application is being downloaded to a receiving DOWNLOAD Gnn VX 680 terminal from a host PC directly over a serial cable. The terminal displays a series of asterisks (*) to indicate the progress of the download (each asterisk UNIT RECEIVE MODE represents 10% of the download).
Page 153
• ADDR that the application was trying to access. If you report a system error to Verifone, you may be asked to provide the information displayed on this screen. For detailed information about the error log function and the terms listed above, please refer to the Verix eVo Volume I: Operating System Programmers Manual (VPN DOC00301).
Page 154
NO START • NO END • LRC ERR • PARITY ERR • REVERSE END For more information about magnetic card error messages, refer to the Verix eVo Volume I: Operating System Programmers Manual (VPN DOC00301). VX 680 R EFERENCE UIDE...
Page 155
F: drives. If there are no files inside an I: drive or an F: drive, is displayed. <EMPTY> <filename> MM/DD/YY <filename> MM/DD/YY <filename> MM/DD/YY PRINT FLASH drive Directory GNN <filename> MM/DD/YY <filename> MM/DD/YY <filename> MM/DD/YY PRINT VX 680 R EFERENCE UIDE...
Page 156
Version 0PRED1A1 and the printer status appear. Status See the Verix eVo Volume I: Operating System Programmers Manual (VPN DOC00301). for specifics on application development and the 1> Test internal thermal printer. 2> Paper Feed VX 680 R EFERENCE UIDE...
Page 157
2> LIST SYNC DRIVERS 3> EXIT CUSTOMER CARD When a SAM card is tested, the following information POWER UP: PASSED is displayed. GET ATR: PASSED READ TEST: PASSED WRITE TEST: PASSED READ VERIFY TEST: PASS ALL TESTS: PASSED VX 680 R EFERENCE UIDE...
Page 158
At startup, the terminal displays a copyright notice screen that shows the terminal model number, the OS QT0000AB version of the VX 680 stored in the terminal’s memory, 12/29/2009 Verix the date the firmware was loaded into the terminal, and the copyright notice.
Page 159
Banshee modem, 05xx = firmware patch version, yy = country profile code, zz = country profile major version) • MODEM MODEL - shows if a thermal printer is integrated • PRINTER with the terminal (0 = No, 1 = Yes) VX 680 R EFERENCE UIDE...
Page 160
- displays the memory designation used by • HEAP the OS - shows the memory set aside for the OS • STACK stack. This is where the terminal stores data for running tasks like all the parameters from the call VX 680 R EFERENCE UIDE...
If the problem persists even after performing the outlined guidelines or if the problem is not described below, contact your local Verifone representative for assistance. The VX 680 terminal comes equipped with tamper-evident labels. The VX 680 unit NOTE contains no user serviceable parts. Do not, under any circumstance, attempt to disassemble the terminal.
Does Not Charge operation. • Allow the VX 680 terminal to remain connected to the power pack for 6 hours to ensure the battery receives a full charge. • Lithium batteries are not affected by shallow charging. Furthermore, when the terminal has no external power source or battery the coin cell battery provides power to the security circuit.
Remove the damaged paper from the paper roll and clear the feed mechanism. • Install a roll of printer paper, see Installing the Paper Roll in VX 680 Installation Guide, VPN-DOC268-003-EN for reference. • If the problem persists, it may be due to poor paper quality. Install a new roll of higher-quality paper.
• Ensure that you are swiping cards properly. With the VX 680 card reader, the black magnetic stripe on the card should face down and inward, toward the keypad and must be inserted from the top of the terminal.
Page 165
Transactions Fail To Process Check the Telephone Line • Disconnect the telephone line from the VX 680 terminal and connect it to a working telephone to check for a dial tone. If there is no dial tone, replace the telephone cable.
Page 166
ROUBLESHOOTING UIDELINES Transactions Fail To Process VX 680 R EFERENCE UIDE...
PPENDIX Port Pinouts The tables in this appendix list pinouts for the VX 680 terminal, dongles, and cable connectors. Multiport Connector Function Description EXTGND External Ground nUSB_DEVICE USB Data D– pUSB_DEVICE USB Data D+ N.C. Not Used EXTPWR 12Vdc External Power (N.C. for...
Telco Port (USB- Connector Function Description Modem Dongle No Connection No Connection Telephone Line Ring Telephone Line No Connection LOOKING INTO CONNECTOR No Connection DC Input Jack Polarity for VX 680 3G, Base Station and 08641-01-R Cable VX 680 R EFERENCE UIDE...
• Automatically shuts down when cell voltage is extremely low. Conserve battery power by turning the VX 680 terminal off when not in use. If the NOTE terminal will not be used for several months, remove the smart battery pack from the terminal.
Battery Life The VX 680 smart battery can be charged and discharged hundreds of times, but will eventually wear out. When operating times are noticeably shorter than usual, it is time to buy a new battery (see...
VX 680 S MART ATTERY NFORMATION Smart Battery Does Not Require Prolonged Initial Charging Unlike their nickel-cadmium counterparts, lithium-ion batteries do not require prolonged initial charging. All that is needed is a regular charge. Low Self-Discharge Rate Lithium-ion batteries have a lower self-discharge rate compared to other types of battery (the self-discharge rate for a lithium-ion battery is less than one-half of that of a nickel-cadmium battery).
Do not stock pile batteries. Avoid buying dated battery stocks even at reduced prices. In addition, always check the date when the batteries were manufactured. Notable VX 680 The Smart Battery is designed to offer optimum protection to the VX 680 terminals Battery and their users. Specifications...
NOTE If no discharge reset has occurred for a few months, the battery pack must fully discharged manually. VX 680 Battery The following terms and definitions apply to the VX 680 terminal’s battery. Specific Terms Calibration and Definitions This refers to the process of determining a battery pack’s full capacity. It is based...
Page 176
The RC value is available to terminal applications via OS calls. It is updated every 20 seconds. Safety/Protection Circuit The VX 680 terminal is equipped with a safety/protection circuit that protects the terminal from damage. For more information, see Safety/Protection Circuit.
There are two types of Base Station, the standard model and the full-featured model. Standard Base The standard Base Station can charge the VX 680 terminal. However, it does not Station have any USB support and has a single LED to indicate power status.
Page 178
Charge Rate This refers to the amount of current applied to the battery during charging. NOTE Charge rate for the VX 680 terminal's battery: Initially 1A tapering to zero at end of charge. Charge Time The amount of time required to charge a battery. Maximum charge time refers to the amount of time to fully charge a fully discharged battery.
Page 179
This refers to the amount of time a battery can provide power to a system before it discharges fully. It is a function of the load that receives power from the battery. The average system load of the VX 680 terminal is 300 mAh at 7.2V. The typical NOTE run time for the VX 680 terminal’s battery is 6 hours.
Page 180
VX 680 S MART ATTERY NFORMATION General Battery Terms and Definitions VX 680 R EFERENCE UIDE...
CONFIG.SYS record which begins with Short for binary digit. Either of the two digits 0 the *ZA key. A VX 680 application ID can be up to 21 and 1 in the binary number system. Also, a unit of characters long.
Page 182
Also called magnetic stripe card maximum size is partitioned and carried as several reader. The slot on the right side of the VX 680 packets. Data packets are formed by the controller in terminal that automatically reads data stored in the...
Page 183
The 16-key core keypad Fixed prompt A system prompt or message stored of the VX 680 terminal is used to enter data and as part of system firmware in terminal memory. perform operations. Fixed prompts appear on the terminal display to alert...
Page 184
For outside communication. Typical peripheral devices the VX 680, application files and data files are stored for a POS terminal include PINpads and check in non-volatile flash memory.
Page 185
Remote host computer A host computer subroutine. When the subroutine is completed, connected to a VX 680 modem dongle over a dial-up control reverts to the instruction in the main routine telephone line to download files or data, or to immediately following the subroutine call.
Page 186
The Modem dongle contents are destroyed if the power supply to the has a TELCO RJ11-type telephone jack for direct memory is interrupted. In the VX 680 applications connection to a telephone line wall jack. run from volatile memory, mDRAM. Compare with Non-volatile memory.
141 normal mode 16 power packs 140 system mode 16 telephone line cord 141 date and time 48 Verifone cleaning kit 141 determine last reset 39, 160 ATR test 157 DDL.EXE 81 dead batteries definition 178 back-to-back application downloads...
Page 188
117 special files used in the file authentication pro- redirecting files during 85 cess 56 redirecting files to flash memory 86 VeriShield security architecture 63 redirecting files to other file groups 87 file authentication certificates VX 680 R EFERENCE ANUAL...
Page 189
68 maintenance using the signer private key 57 cleaning the terminal 137 VeriShield File Signing Tool 74 cleaning the terminal contacts 137 files VX 680 R EFERENCE ANUAL...
Page 190
179 error log display 46 file groups 21, 28 SAM diagnostics 157 integrated PIN pad 38 SecureKit 52 local and remote operations 20 self-discharge rate menu 3 45 definition 179 password 50 service procedures 23 VX 680 R EFERENCE ANUAL...