Table of Contents
Advertisement
Quick Links
Advertisement
Table of Contents
Related Manuals for VeriFone MX 900 Series
Summary of Contents for VeriFone MX 900 Series
- Page 1 MX 900 Series Reference Manual...
- Page 3 VeriFone, Inc. Sapphire, Topaz, HPV-20, Ruby Manager, Everest, E ID, Electronic Journal On-site, and Ruby Card are trademarks of VeriFone, Inc. in the U.S. and/or other countries. All other trademarks or brand names are the properties of their respective holders.
-
Page 5: Table Of Contents
Overview ........9 The VeriFone Certificate Authority....10 Required Files . - Page 6 MX 900 Series Reference Manual 4. System Mode ......21 When to Use System Mode ..... . . 21 Local and Remote Operations .
- Page 7 MX 900 Series Reference Manual 8. Terminal Specifications ....55 Terminal Specifications ......55...
- Page 8 MX 900 Series Reference Manual September 14, 2012...
-
Page 9: Introduction
Chapter 4, System Mode, provides information about the usage of System Mode, local and remote operations, and terminal status verification. Chapter 5, VRK Ready Device, explains how to check your MX 900 Series terminal for a valid RSA Key Pair. - Page 10 MX 900 Series Reference Manual Convention Meaning Automated Teller Machine Bluetooth CDMA Code Division Multiple Access Check Reader Cyclic Redundancy Check CTLS Contactless Direct Download Utility Document Identification Number Download Management Module DUKPT Derived Unique Key Per Transaction Developer’s Toolkit...
- Page 11 MX 900 Series Reference Manual Convention Meaning Printed Circuit Board Payment Card Industry PIN Entry Devices Personal Identification Number Public Key Infrastructure PLAN PinStripe Local Area Network Phase Lock Loop Payment Service Provider PTID Permanent Terminal Identification Number Random Access Memory...
- Page 12 MX 900 Series Reference Manual September 14, 2012...
-
Page 13: Features
For installation procedures, see the MX 900 Series Installation Guide. Overview The two new MX 900 Series models are the MX 915 and MX 925. The common features between both models are: core hardware design based on the proven MX 900 Series architecture (includes system processor, power management unit,... -
Page 14: Display Features
The MX 925 is a 7-inch display with a resolution of 800 horizontal by 480 vertical pixels. Both displays are capable of 24 bit RGB color. Features and Benefits The following are features and benefits of the MX 900 Series terminals: Features Benefit Sophisticated Security All systems are PCI 3.x compliant. -
Page 15: Factory Options
ADA standards. Factory Options Factory options are available for the MX 900 Series terminals, depending on your needs. Speakers Both terminals have built-in speakers for tones and prompts. A line-out port is available to drive externally powered speakers. -
Page 16: Optional Modules
MX 900 Series Reference Manual Optional Modules The MX 900 Series offers upgradable modules that can be installed in the factory or upgraded after distribution to the field. All modules can be installed easily and efficiently. Complete installation instructions are found in the Installing Optional Components section. -
Page 17: File Authentication
File Authentication is a secured process for authenticating files using digital signatures, cryptographic keys, and digital certificates. This process enables the sponsor of an MX 900 Series terminal to logically secure access to the terminal by controlling who is authorized to download application files to that terminal. -
Page 18: The Verifone Certificate Authority
MX 900 Series Reference Manual The VeriFone Certificate Authority To manage the tools and processes related to FA, VeriFone has established a centralized VeriFone Certificate Authority, or VeriFone CA. This agency is responsible for managing keys and certificates. The VeriFone CA uses an... - Page 19 VeriFone or externally to sponsors. Note: All certificates that are issued by the VeriFone CA for the MX 900 Series terminal platform, and for any VeriFone platform with the VeriShield security architecture, are hierarchically related. That is, a lower-level certificate can only be authenticated under the authority of a higher-level certificate.
-
Page 20: How File Authentication Works
Smart card containing a set of certificates and keys. b. Smart card PIN. 4. VeriFone CA sends the smart card and smart card PIN to the sponsor. 5. The sponsor uses the smart card and smart card PIN as inputs for the deployment process. - Page 21 MX 900 Series Reference Manual The certificate request is illustrated in the figure below. Requests certificates VeriFone CA for deployment determines Sponsor VeriFone CA Web site required terminals from certificate VeriFone CA Web site structure VeriFone CA generates a set of...
- Page 22 MX 900 Series Reference Manual 4. VeriShield creates files suitable for downloading from the smart card data. 5. The signature file, the application file, and the extracted signer and sponsor certificates are downloaded into a deployment terminal, where the following actions occur: a.
-
Page 23: Planning For File Authentication
Download and Installation The MX 900 Series Secure Installer plays a critical role on system and application startup as well as authenticating and installing all components; application, system and OS. -
Page 24: Digital Certificates And The File Authentication Process
A higher-level production certificates is downloaded into each MX 900 Series terminal at manufacture. When you take a new MX 900 Series terminal out of its shipping packaging, certificate data is already stored in the terminal’s certificate tree. - Page 25 Series terminal is called a deployment terminal. Add New Certificates When you add a new certificate file to an MX 900 Series terminal, the system detects it by filename extension (*.crt). The terminal then attempts to authenticate the certificate under the authority of the resident higher-level certificate stored in the terminal’s certificate tree or one being downloaded...
- Page 26 Ultimately, the sponsor will decide how to implement the logical security provided by File Authentication on a field-deployed terminal. Additional certificates can be obtained from the VeriFone CA at any time to implement new sponsor and signer relationships in deployment terminals.
-
Page 27: File Signing And Packaging Tools
■ File Signing and Packaging Tools VeriShield File Signing Tool (FST) Unlike the MX 800 Series terminals, MX 900 Series terminals are shipped from manufacturer without a development certificate — a development certificate is not available for download. For development, like for deployment, customers must obtain VeriShield signer cards and use the VeriShield File Signing Tool to sign all executable and other file to be logically protected. -
Page 28: Packaging Tool
MX 900 Series Reference Manual 8. Select “Secured” and click “Next” at the security level screen (default is not supported on the MX 900 Series terminal). 9. Select the name and location to export the signer certificate file (the sponsor certificate is always exported as SponsorCert.crt in the same location). -
Page 29: System Mode
Deployers of MX 900 Series terminals to end-user sites: Perform ■ specific tasks required to deploy a new MX 900 Series terminal in the field, such as terminal configuration, application software download, and testing of the terminal prior to deployment. -
Page 30: Verifying Terminal Status
MX 900 Series Reference Manual Verifying Terminal Status The MX 900 Series terminal you are working with may or may not have an application program running on it. After you have set up the terminal and the terminal is turned on, use the following guidelines to verify terminal status regarding software and current operating mode. - Page 31 Level1: User defined capability – Level2: User defined capability – Maintenance: Intended for VeriFone repair, allows minimal access 3. Once the login has been selected, enter the password. If the password is pre-expired or is pending change the user must enter the current password and then a new password (pre-defined in the case of a pending password change).
-
Page 32: Exiting System Mode
MX 900 Series Reference Manual Exiting System Mode After successful completion, some operations automatically exit System Mode and restart the terminal. Other operations require that you manually exit System Mode and restart the terminal by tapping Home. September 14, 2012... -
Page 33: System Mode Menus
1. At the idle System Mode screen, select an operation by tapping the corresponding on-screen tab. 2. Complete the operation. 3. Return to the main MX 900 Series System Mode screen. Note: When on a System Mode menu screen, tap Home to return to the System Mode idle screen. -
Page 34: Information Submenu
MX 900 Series Reference Manual Information Submenu Tap the INFORMATION tab on the System Mode screen to view the following information. Tap the right and left arrows to see all of the configuration options. (Tap the tabs that appear for more system information.) -
Page 35: Administration Submenu
MX 900 Series Reference Manual Administration Submenu Tap the tab on the System Mode screen to configure the MX 900 ADMINISTRATION Series terminal. Tap the right arrow to see all of the configuration options. September 14, 2012... - Page 36 MX 900 Series Reference Manual Item Function Support touch panel compensation. TOUCH PANEL The unit will display a list of available configuration files. Select the CONFIGURATION desired file and its contents will be displayed. Sections are displayed enclosed in brackets “[]”. Touch a section to add a new variable under it.
- Page 37 It also supports playing media files and viewing images. Configure basic power settings, display sleep time… POWER SETTINGS To adjust the MX 900 Series terminal display backlight by tapping the DISPLAY ^ UP ^ or v DOWN v buttons. Use to configure the sound settings of the MX 900 Series terminal.
-
Page 38: Transfer Submenu
MX 900 Series Reference Manual Transfer Submenu Tap the TRANSFER tab on the System Mode screen to download files to the MX 900 Series terminal via the following methods. For detailed information about downloads, see the “Performing Downloads” chapter. Item Function Perform a download via the USB/Serial port. -
Page 39: Security Submenu
MX 900 Series Reference Manual Security Submenu Tap the tab on the System Mode screen to perform the following SECURITY functions. Item Function After presenting both keyload1 and keyload2 passwords, enable the KEY LOADING key loading state that will allow data to pass from a serial port to the security module for bank and VRK keys. - Page 40 MX 900 Series Reference Manual Item Function View the security tamper status. This display will show the current TAMPER STATUS and logged status. Touch a log entry for more detail. View the serial numbers and IDs in the VeriShield Certificate list.
-
Page 41: Diagnostics Submenu
MX 900 Series Reference Manual Diagnostics Submenu Tap the tab on the System Mode screen. Diagnostic test results can DIAGNOSTICS be viewed and printed. Item Function Determines the state of the internal battery. The terminal will fail BATTERY this test if the voltage shows a value below 2.4 volts. - Page 42 MX 900 Series Reference Manual Item Function MAGREADER — Swipe a magnetic-stripe card in the mag card reader CARD to determine if data can be read on all three tracks. Swipe a sample card once to determine if all three tracks can read the card.
-
Page 43: Help Submenu
MX 900 Series Reference Manual Help Submenu Tap the tab to perform the following functions. HELP Item Function For future use. HELP September 14, 2012... - Page 44 MX 900 Series Reference Manual September 14, 2012...
-
Page 45: Performing Downloads
Information pertaining to file authentication is only discussed in the context of procedures while performing file downloads. See the File Authentication for further discussion. The MX 900 Series terminal can perform a download via the following connectivity options: Using FTP via an Ethernet network ■... -
Page 46: Direct Downloads
(RS-232/USB) download from a PC to a terminal (versus the VeriTalk modem- based functionality). As the DDL utility sends files from the PC, the MX 900 Series display shows the progression of the download. The file name is shown on Line 1 of the display with nnn showing the number of blocks downloaded. -
Page 47: Ddl Command Line File
MX 900 Series Reference Manual Features Benefit Sets the date and time on the terminal to the host -c<delta time> PC's date and time. Also, specifies a delta value to add or subtract from the hour, for example, -c+1 specifies the PC's time plus one hour. -
Page 48: Ddl Example
The command line would be: DDL -F<filename>. Download Procedures Use the following procedures to perform downloads to an MX 900 Series terminal. For additional information about downloading files to the MX 900 Series terminals, see Transfer in the System Mode chapter. - Page 49 MX 900 Series Reference Manual 5. Tap the SERIAL/USB tab to perform direct download to the terminal. 6. Set the port and baud rate. 7. Tap the button to perform the download. Asterisks ( ) display onscreen to indicate the state of the download. Each asterisk denotes approximately 10% completion.
-
Page 50: Ibm Ecr Downloads
® run successfully under the Command Prompt on Windows The MX 900 Series does not support the –p Pinstripe LAN or the –t compressed ZonTalk formats (these formats are used by legacy terminals). The –r IBM ECR format is supported and is in fact the only reason to use PCLANCNV. - Page 51 MX 900 Series Reference Manual Once a download file has been completely received, the MX will expand and install the contents of the file. If operating system components were included in the download file, the terminal will reboot. If the environment variable ends with an asterisk (“*”), add an additional ■...
- Page 52 MX 900 Series Reference Manual If the <value> for an environment variable includes a space, <value> must be enclosed in quotation marks. PCLANCNV Command Line Input Options Input application code file (no control parameter filename before filename). Input application data file or signature file.
-
Page 53: File Signing And Signature Files
MX 900 Series compressed PinStripe format with no blocking. MX 900 Series compressed PinStripe format in -p<blocksize> blocks of <blocksize> bytes. MX 900 Series compressed IBM ECR format in blocks of 128 bytes. MX 900 Series compressed IBM ECR format in -r<blocksize> blocks of <blocksize> bytes. - Page 54 MX 900 Series Reference Manual September 14, 2012...
-
Page 55: Verishield Remote Key (Vrk) Ready Device
(VRK) HIELD EMOTE EADY EVICE The purpose of this chapter is to provide instructions to check your MX 900 Series terminal for a valid VRK RSA Keys. It is required to be VRK Ready. Note: VRK was formerly known as RKL. Check for Valid VRK RSA Keys 1. - Page 56 MX 900 Series Reference Manual 3. Tap Security. 4. Tap Key Status. September 14, 2012...
- Page 57 MX 900 Series Reference Manual 5. Tap the VRK (RKL) tab and the following screen displays a valid VRK RSA Key Pair is installed and the terminal OS is VRK Ready. If the screen displays “Not Installed,” the terminal OS is not VRK Ready.
- Page 58 MX 900 Series Reference Manual September 14, 2012...
-
Page 59: Pinpad Security Best Practices
ECURITY RACTICES This chapter contains information on PINpad security Best Practices for the MX 900 Series terminals, the MX 915, and the MX 925. Introduction Retailers are facing a new and growing threat. Locked out of the payments chain by EMV and encryption, today’s criminals are now turning to the Payment Entry Device (PED) itself. -
Page 60: Physical Security Activities
MX 900 Series Reference Manual 5. Make sure the password for device access is not the original default password. If it is, have it changed, as default passwords become widely known. 6. Develop a response plan before you suspect you have had a breach. -
Page 61: Wireless Applications - Required Actions, Best Practices
MX 900 Series Reference Manual Wireless Applications - Required Actions, Best Practices For applications that employ a wireless interface, application writers must familiarize themselves with general risks associated with attacks particular to the wireless interface. Moreover, application writers must employ the direction specified by MasterCard Worldwide to ensure the wireless interface is operating in a secure manner. - Page 62 MX 900 Series Reference Manual September 14, 2012...
- Page 63 ERMINAL PECIFICATIONS Terminal Specifications This chapter discusses power requirements, dimensions, and other specifications of the MX 900 Series terminals. Power • Power pack output requirements: 12W, 12-24VDC. • Power pack input requirements: 100-240VAC, 50/60Hz. Environmental • Operating temperature: 0° to 40° C (32° to 104° F) •...
- Page 64 MX 900 Series Reference Manual September 14, 2012...
- Page 65 17 system mode 30, 33 hierarchical relation- direct download (DDL) utility ships 11 platform root 11 command line syntax 38 MX 900 Series signer 11 downloads applications 8 sponsor 11 certificate and 17 system mode 21 definition 9...
- Page 66 MX 900 Series Reference Manual verifying terminal status overview signature file 10 downloads 37 signer certificate 11, 17 file authentication 9 sponsor certificate 11, 17 System Mode terminal when to use 21 password 22 system mode verify status 22 configure 27, 31...
Need help?
Do you have a question about the MX 900 Series and is the answer not in the manual?
Questions and answers
Contactless option on our machines are time consuming, is there any way to speed up the process
The contactless option on VeriFone MX 900 Series machines can be sped up by ensuring the contactless feature is enabled in System Mode. A smart card is read when placed above the MX 915 display or the MX 925 contactless module, reducing wear and tear on card readers and cards. Additionally, using optimized applications and ensuring the latest system updates may improve processing speed.
This answer is automatically generated