VeriFone VX 680 Reference Manual page 67

F A
ILE UTHENTICATION
Introduction to File Authentication
Deployment Terminals
While the application development process is being completed and while the new
application is being tested on a development terminal, a sponsor can order
specific sponsor and signer certificates from the Verifone CA to use to logically
secure sponsor and signer privileges when the VX 680 terminal is prepared for
deployment.
Customer-specific sponsor and signer certificates are usually downloaded to a
VX 680 terminal as part of the standard application download procedure
performed by a deployment service. In this operation, the new sponsor and signer
certificates replace the development sponsor certificate that is part of the factory
set of certificates, as shown in Figure 8.
When the sponsor and signer certificates are downloaded and successfully
authenticated, the terminal is ready to deploy.
Ultimately, it is the sponsor's decision how to implement the logical security
provided by file authentication on a field-deployed terminal. Additional certificates
can be obtained from the Verifone CA anytime to implement new sponsor and
signer relationships in deployment terminals. VeriShield Retain allows for multiple
sponsors and signing certificates in a terminal. This allows the flexibility of unique
signatures for each executable or data files.
67
VX 680 R G
EFERENCE UIDE