Do you have a question about the MX 900 Series and is the answer not in the manual?
Questions and answers
Miranda Van Luvanee
February 6, 2025
Contactless option on our machines are time consuming, is there any way to speed up the process
1 comments:
Mr. Anderson
February 10, 2025
The contactless option on VeriFone MX 900 Series machines can be sped up by ensuring the contactless feature is enabled in System Mode. A smart card is read when placed above the MX 915 display or the MX 925 contactless module, reducing wear and tear on card readers and cards. Additionally, using optimized applications and ensuring the latest system updates may improve processing speed.
Page 3
VeriFone, Inc. Sapphire, Topaz, HPV-20, Ruby Manager, Everest, E ID, Electronic Journal On-site, and Ruby Card are trademarks of VeriFone, Inc. in the U.S. and/or other countries. All other trademarks or brand names are the properties of their respective holders.
Chapter 4, System Mode, provides information about the usage of System Mode, local and remote operations, and terminal status verification. Chapter 5, VRK Ready Device, explains how to check your MX 900 Series terminal for a valid RSA Key Pair.
Page 10
MX 900 Series Reference Manual Convention Meaning Automated Teller Machine Bluetooth CDMA Code Division Multiple Access Check Reader Cyclic Redundancy Check CTLS Contactless Direct Download Utility Document Identification Number Download Management Module DUKPT Derived Unique Key Per Transaction Developer’s Toolkit...
Page 11
MX 900 Series Reference Manual Convention Meaning Printed Circuit Board Payment Card Industry PIN Entry Devices Personal Identification Number Public Key Infrastructure PLAN PinStripe Local Area Network Phase Lock Loop Payment Service Provider PTID Permanent Terminal Identification Number Random Access Memory...
Page 12
MX 900 Series Reference Manual September 14, 2012...
For installation procedures, see the MX 900 Series Installation Guide. Overview The two new MX 900 Series models are the MX 915 and MX 925. The common features between both models are: core hardware design based on the proven MX 900 Series architecture (includes system processor, power management unit,...
The MX 925 is a 7-inch display with a resolution of 800 horizontal by 480 vertical pixels. Both displays are capable of 24 bit RGB color. Features and Benefits The following are features and benefits of the MX 900 Series terminals: Features Benefit Sophisticated Security All systems are PCI 3.x compliant.
ADA standards. Factory Options Factory options are available for the MX 900 Series terminals, depending on your needs. Speakers Both terminals have built-in speakers for tones and prompts. A line-out port is available to drive externally powered speakers.
MX 900 Series Reference Manual Optional Modules The MX 900 Series offers upgradable modules that can be installed in the factory or upgraded after distribution to the field. All modules can be installed easily and efficiently. Complete installation instructions are found in the Installing Optional Components section.
File Authentication is a secured process for authenticating files using digital signatures, cryptographic keys, and digital certificates. This process enables the sponsor of an MX 900 Series terminal to logically secure access to the terminal by controlling who is authorized to download application files to that terminal.
MX 900 Series Reference Manual The VeriFone Certificate Authority To manage the tools and processes related to FA, VeriFone has established a centralized VeriFone Certificate Authority, or VeriFone CA. This agency is responsible for managing keys and certificates. The VeriFone CA uses an...
Page 19
VeriFone or externally to sponsors. Note: All certificates that are issued by the VeriFone CA for the MX 900 Series terminal platform, and for any VeriFone platform with the VeriShield security architecture, are hierarchically related. That is, a lower-level certificate can only be authenticated under the authority of a higher-level certificate.
Smart card containing a set of certificates and keys. b. Smart card PIN. 4. VeriFone CA sends the smart card and smart card PIN to the sponsor. 5. The sponsor uses the smart card and smart card PIN as inputs for the deployment process.
Page 21
MX 900 Series Reference Manual The certificate request is illustrated in the figure below. Requests certificates VeriFone CA for deployment determines Sponsor VeriFone CA Web site required terminals from certificate VeriFone CA Web site structure VeriFone CA generates a set of...
Page 22
MX 900 Series Reference Manual 4. VeriShield creates files suitable for downloading from the smart card data. 5. The signature file, the application file, and the extracted signer and sponsor certificates are downloaded into a deployment terminal, where the following actions occur: a.
Download and Installation The MX 900 Series Secure Installer plays a critical role on system and application startup as well as authenticating and installing all components; application, system and OS.
A higher-level production certificates is downloaded into each MX 900 Series terminal at manufacture. When you take a new MX 900 Series terminal out of its shipping packaging, certificate data is already stored in the terminal’s certificate tree.
Page 25
Series terminal is called a deployment terminal. Add New Certificates When you add a new certificate file to an MX 900 Series terminal, the system detects it by filename extension (*.crt). The terminal then attempts to authenticate the certificate under the authority of the resident higher-level certificate stored in the terminal’s certificate tree or one being downloaded...
Page 26
Ultimately, the sponsor will decide how to implement the logical security provided by File Authentication on a field-deployed terminal. Additional certificates can be obtained from the VeriFone CA at any time to implement new sponsor and signer relationships in deployment terminals.
■ File Signing and Packaging Tools VeriShield File Signing Tool (FST) Unlike the MX 800 Series terminals, MX 900 Series terminals are shipped from manufacturer without a development certificate — a development certificate is not available for download. For development, like for deployment, customers must obtain VeriShield signer cards and use the VeriShield File Signing Tool to sign all executable and other file to be logically protected.
MX 900 Series Reference Manual 8. Select “Secured” and click “Next” at the security level screen (default is not supported on the MX 900 Series terminal). 9. Select the name and location to export the signer certificate file (the sponsor certificate is always exported as SponsorCert.crt in the same location).
Deployers of MX 900 Series terminals to end-user sites: Perform ■ specific tasks required to deploy a new MX 900 Series terminal in the field, such as terminal configuration, application software download, and testing of the terminal prior to deployment.
MX 900 Series Reference Manual Verifying Terminal Status The MX 900 Series terminal you are working with may or may not have an application program running on it. After you have set up the terminal and the terminal is turned on, use the following guidelines to verify terminal status regarding software and current operating mode.
Page 31
Level1: User defined capability – Level2: User defined capability – Maintenance: Intended for VeriFone repair, allows minimal access 3. Once the login has been selected, enter the password. If the password is pre-expired or is pending change the user must enter the current password and then a new password (pre-defined in the case of a pending password change).
MX 900 Series Reference Manual Exiting System Mode After successful completion, some operations automatically exit System Mode and restart the terminal. Other operations require that you manually exit System Mode and restart the terminal by tapping Home. September 14, 2012...
1. At the idle System Mode screen, select an operation by tapping the corresponding on-screen tab. 2. Complete the operation. 3. Return to the main MX 900 Series System Mode screen. Note: When on a System Mode menu screen, tap Home to return to the System Mode idle screen.
MX 900 Series Reference Manual Information Submenu Tap the INFORMATION tab on the System Mode screen to view the following information. Tap the right and left arrows to see all of the configuration options. (Tap the tabs that appear for more system information.)
MX 900 Series Reference Manual Administration Submenu Tap the tab on the System Mode screen to configure the MX 900 ADMINISTRATION Series terminal. Tap the right arrow to see all of the configuration options. September 14, 2012...
Page 36
MX 900 Series Reference Manual Item Function Support touch panel compensation. TOUCH PANEL The unit will display a list of available configuration files. Select the CONFIGURATION desired file and its contents will be displayed. Sections are displayed enclosed in brackets “[]”. Touch a section to add a new variable under it.
Page 37
It also supports playing media files and viewing images. Configure basic power settings, display sleep time… POWER SETTINGS To adjust the MX 900 Series terminal display backlight by tapping the DISPLAY ^ UP ^ or v DOWN v buttons. Use to configure the sound settings of the MX 900 Series terminal.
MX 900 Series Reference Manual Transfer Submenu Tap the TRANSFER tab on the System Mode screen to download files to the MX 900 Series terminal via the following methods. For detailed information about downloads, see the “Performing Downloads” chapter. Item Function Perform a download via the USB/Serial port.
MX 900 Series Reference Manual Security Submenu Tap the tab on the System Mode screen to perform the following SECURITY functions. Item Function After presenting both keyload1 and keyload2 passwords, enable the KEY LOADING key loading state that will allow data to pass from a serial port to the security module for bank and VRK keys.
Page 40
MX 900 Series Reference Manual Item Function View the security tamper status. This display will show the current TAMPER STATUS and logged status. Touch a log entry for more detail. View the serial numbers and IDs in the VeriShield Certificate list.
MX 900 Series Reference Manual Diagnostics Submenu Tap the tab on the System Mode screen. Diagnostic test results can DIAGNOSTICS be viewed and printed. Item Function Determines the state of the internal battery. The terminal will fail BATTERY this test if the voltage shows a value below 2.4 volts.
Page 42
MX 900 Series Reference Manual Item Function MAGREADER — Swipe a magnetic-stripe card in the mag card reader CARD to determine if data can be read on all three tracks. Swipe a sample card once to determine if all three tracks can read the card.
MX 900 Series Reference Manual Help Submenu Tap the tab to perform the following functions. HELP Item Function For future use. HELP September 14, 2012...
Page 44
MX 900 Series Reference Manual September 14, 2012...
Information pertaining to file authentication is only discussed in the context of procedures while performing file downloads. See the File Authentication for further discussion. The MX 900 Series terminal can perform a download via the following connectivity options: Using FTP via an Ethernet network ■...
(RS-232/USB) download from a PC to a terminal (versus the VeriTalk modem- based functionality). As the DDL utility sends files from the PC, the MX 900 Series display shows the progression of the download. The file name is shown on Line 1 of the display with nnn showing the number of blocks downloaded.
MX 900 Series Reference Manual Features Benefit Sets the date and time on the terminal to the host -c<delta time> PC's date and time. Also, specifies a delta value to add or subtract from the hour, for example, -c+1 specifies the PC's time plus one hour.
The command line would be: DDL -F<filename>. Download Procedures Use the following procedures to perform downloads to an MX 900 Series terminal. For additional information about downloading files to the MX 900 Series terminals, see Transfer in the System Mode chapter.
Page 49
MX 900 Series Reference Manual 5. Tap the SERIAL/USB tab to perform direct download to the terminal. 6. Set the port and baud rate. 7. Tap the button to perform the download. Asterisks ( ) display onscreen to indicate the state of the download. Each asterisk denotes approximately 10% completion.
® run successfully under the Command Prompt on Windows The MX 900 Series does not support the –p Pinstripe LAN or the –t compressed ZonTalk formats (these formats are used by legacy terminals). The –r IBM ECR format is supported and is in fact the only reason to use PCLANCNV.
Page 51
MX 900 Series Reference Manual Once a download file has been completely received, the MX will expand and install the contents of the file. If operating system components were included in the download file, the terminal will reboot. If the environment variable ends with an asterisk (“*”), add an additional ■...
Page 52
MX 900 Series Reference Manual If the <value> for an environment variable includes a space, <value> must be enclosed in quotation marks. PCLANCNV Command Line Input Options Input application code file (no control parameter filename before filename). Input application data file or signature file.
MX 900 Series compressed PinStripe format with no blocking. MX 900 Series compressed PinStripe format in -p<blocksize> blocks of <blocksize> bytes. MX 900 Series compressed IBM ECR format in blocks of 128 bytes. MX 900 Series compressed IBM ECR format in -r<blocksize> blocks of <blocksize> bytes.
Page 54
MX 900 Series Reference Manual September 14, 2012...
(VRK) HIELD EMOTE EADY EVICE The purpose of this chapter is to provide instructions to check your MX 900 Series terminal for a valid VRK RSA Keys. It is required to be VRK Ready. Note: VRK was formerly known as RKL. Check for Valid VRK RSA Keys 1.
Page 56
MX 900 Series Reference Manual 3. Tap Security. 4. Tap Key Status. September 14, 2012...
Page 57
MX 900 Series Reference Manual 5. Tap the VRK (RKL) tab and the following screen displays a valid VRK RSA Key Pair is installed and the terminal OS is VRK Ready. If the screen displays “Not Installed,” the terminal OS is not VRK Ready.
Page 58
MX 900 Series Reference Manual September 14, 2012...
ECURITY RACTICES This chapter contains information on PINpad security Best Practices for the MX 900 Series terminals, the MX 915, and the MX 925. Introduction Retailers are facing a new and growing threat. Locked out of the payments chain by EMV and encryption, today’s criminals are now turning to the Payment Entry Device (PED) itself.
MX 900 Series Reference Manual 5. Make sure the password for device access is not the original default password. If it is, have it changed, as default passwords become widely known. 6. Develop a response plan before you suspect you have had a breach.
MX 900 Series Reference Manual Wireless Applications - Required Actions, Best Practices For applications that employ a wireless interface, application writers must familiarize themselves with general risks associated with attacks particular to the wireless interface. Moreover, application writers must employ the direction specified by MasterCard Worldwide to ensure the wireless interface is operating in a secure manner.
Page 62
MX 900 Series Reference Manual September 14, 2012...
Page 63
ERMINAL PECIFICATIONS Terminal Specifications This chapter discusses power requirements, dimensions, and other specifications of the MX 900 Series terminals. Power • Power pack output requirements: 12W, 12-24VDC. • Power pack input requirements: 100-240VAC, 50/60Hz. Environmental • Operating temperature: 0° to 40° C (32° to 104° F) •...
Page 64
MX 900 Series Reference Manual September 14, 2012...
Page 65
17 system mode 30, 33 hierarchical relation- direct download (DDL) utility ships 11 platform root 11 command line syntax 38 MX 900 Series signer 11 downloads applications 8 sponsor 11 certificate and 17 system mode 21 definition 9...
Page 66
MX 900 Series Reference Manual verifying terminal status overview signature file 10 downloads 37 signer certificate 11, 17 file authentication 9 sponsor certificate 11, 17 System Mode terminal when to use 21 password 22 system mode verify status 22 configure 27, 31...
Need help?
Do you have a question about the MX 900 Series and is the answer not in the manual?
Questions and answers
Contactless option on our machines are time consuming, is there any way to speed up the process
The contactless option on VeriFone MX 900 Series machines can be sped up by ensuring the contactless feature is enabled in System Mode. A smart card is read when placed above the MX 915 display or the MX 925 contactless module, reducing wear and tear on card readers and cards. Additionally, using optimized applications and ensuring the latest system updates may improve processing speed.
This answer is automatically generated