VeriFone VX 680 Reference Manual page 58

F A
ILE UTHENTICATION
Introduction to File Authentication
58
VX 680 R
EFERENCE
Development Process
In this process:
1
The application developer creates an application file.
2
The application developer applies for Sponsor and Signer certificates. The
absence of a "default" signer certificate compels developers to apply for a
dedicated Signer certificate.
3
The developer assigns a name to the application file.
4
The application file becomes a required input for the VeriShield File Signing
Tool.
5
Using the application file, Signer certificate, and Signer password, the
VeriShield File Signing Tool creates a signature file (*.p7s).
6
The signature file and the original application file are loaded into a
development terminal, where the following actions occur:
a
The terminal's operating system searches for signature files.
b
When a signature file is found, the operating system then searches for a
matching application file.
c
When a matching application file is found, the operating system compares
the signature file's signature against the values stored in the application
file's calculated signature.
d
If these values match, the operating system marks the application file
"authenticated" and allows it to run.
7
The application file is tested and debugged.
8
After the application file is fully debugged, it becomes an input for the
deployment process.
G
UIDE