VeriFone Vx810 Reference Manual page 80

F A
ILE UTHENTICATION
Introduction to File Authentication
80
V X 810 R G
EFERENCE
Required Inputs to the File Signing Process
The required inputs to the file signing process are somewhat different for
development devices than deployment devices.
Table 13 Differences Between Required Inputs
Development Device
Manufacturing inputs to the file signing
process are included, together with the
VeriShield File Signing Tool in the V
SDK. These inputs make it possible for
anyone who has the
x
V 810 SDK to sign and authenticate files.
The following two factory inputs are
required for the file signing process, in
addition to the application files you want to
sign and authenticate:
Default signer certificate, with the
•
filename VXSIGN.CRT
Default signer private key, with the
•
filename VXSIGN.KEY
A default signer password is not
Note:
a required entry when using the
VeriShield File Signing Tool to
sign files for a V
development device.
UIDE
Deployment Devices
The required inputs to the VeriShield File
Signing Tool must be obtained from the
x VeriFone CA to logically secure the
810
sponsor and signer privileges for the
device.
The following three unique inputs, which
are issued at customer request by the
VeriFone CA, are required for the file
signing process, as well as the application
files you want to sign and authenticate:
Customer signer certificate: This
•
unique certificate is a required input for
the VeriShield File Signing Tool and
must be downloaded onto the device
along with the signature files and target
application files to authenticate, unless
already downloaded onto the device in
a previous operation.
Customer signer private key: The
•
VeriFone CA issues this unique,
encrypted private key file (*.key) to an
authorized signer at the sponsor's
request. The signer private key is a
required input to the VeriShield File
Signing Tool, but does not have to be
downloaded onto the device.
Customer signer PIN: The VeriFone
•
CA issues this unique password to an
authorized signer at the sponsor's
request. The customer signer password
is a required input to the VeriShield File
Signing Tool, but it does not have to be
downloaded onto the device.
Note:
x
810
The customer sponsor certificate,
which authenticates the
customer signer certificate, is
usually downloaded onto the
device with the customer signer
certificate, but it is not a required
VeriShield File Signing Tool input
when signing files.