Dot Origin VTAP 100 User manual

Basic ConfigurationGuide
Firmware from v1.1.10.2
Revised July 2022 v2.4

If you need help to set up or use VTAP100, beyond what is contained in this Configuration
Guide, then please contact our support team.
Email: [email protected]
Download the latest documentation and firmware from https://vtap100.com/resources/
Telephone UK and Europe: [phone]
Telephone North America and Latin America: [phone] or [phone]
If you have any feedback on setting up or using VTAP100 or this documentation, then please
contact our support team. The product is constantly being reviewed and improved and we
value feedback about your experience.
Copyright 2022 Dot Origin Ltd. All rights reserved.
No part of this Configuration Guide may be published or reproduced without the written
permission of Dot Origin Ltd except for personal use. This Configuration Guide relates to
correct use of the VTAP100 only. No liability can be accepted under any circumstances
relating to the operation of the user’s own PC, network or infrastructure.
Dot Origin Ltd
Unit 7, Coopers Place Business Park, Combe Lane, Wormley
Godalming GU8 5SZ United Kingdom
[phone]

Contents
1 Using this guide 1
2 How VTAP100 works 2
2.1 Configure VTAP100 3
2.2 Default operation on factory settings 4
3 Start reading your own passes 5
3.1 Edit config.txt 8
3.2 Send pass data as keyboard emulation over USB 9
3.3 Extract only part of the pass data 10
3.4 Control LED and buzzer feedback 13
4 Read cards or tags 14
4.1 Extract only part of the card or tag data 15
5 Connect to other systems 17
5.1 Send pass data over a virtual COMport 17
5.2 Using VTAP100 with Read-a-Card software 18
5.3 More advanced features 19
6 Maintenance features 21
6.1 Check status in BOOT.TXT 21
6.2 Update firmware 22
6.3 Software lock to prevent local firmware or configuration change 22
6.4 Hardware lock to disable USB mass storage device 23
6.5 Hardware reset to use factory firmware 25
6.6 Reboot, remount, refresh commands 25
A Default Config.txt file A-1
BASIC CONFIGURATION GUIDE PAGE I

BASIC CONFIGURATION GUIDE PAGE 1
1  Using this guide
This guide is for first-time users of the VTAP100, and anyone using the VTAP100 with a
direct USB connection to a PC. It will help you configure your VTAP100 for a simple
application. Information about maintenance features includes how to update the firmware on
your VTAP100 unit, when a new release is available.
Advanced users, such as mobile app developers and system integrators, who want to control
multiple units remotely and integrate VTAP100 outputs with other systems, will need the
additional information contained in the Advanced Configuration and Commands Reference
Guide.
The Default Config.txt file is included as an Appendix, so that you can always revert to
factory configuration, should you make mistakes or delete guidance comments you later need.
You must be running firmware v1.1.10.2 or later to access all of these commands or settings.
Visit https://vtap100.com/resources/ if you need to download the latest firmware version.
Instructions to help you Update firmware are included in section 6.2 of this guide.
If you need help beyond what is contained in this guide please contact
[email protected].

2  How VTAP100 works
Simply tap your smartphone against the VTAP100 antenna. Your mobile NFC pass will be
read and data sent to the connected PC. Since the VTAP100 includes automatic pass
selection, you do not need to open your phone and select the pass, the VTAP100 will do that
for you.
Figure 2-1 VTAP100-USBin use
When VTAP100 is connected to a computer it appears as a generic mass storage device (like a
memory stick). It can be set to send keyboard inputs to the PC, or behave as a virtual serial
COM port device.
In order to configure your VTAP100, you simply edit or create text files. These will be
automatically read and control the operation of the VTAP100. This approach allows you to
easily specify pass reading parameters and define the format to send data (per interface). You
can optionally define LED or buzzer actions required when a pass is detected.
By default the VTAP100 is fully upgradable in the field, using a file-based method for
distributing firmware updates in a secure manner. However, the VTAP100 hardware can be
optionally locked, before deploying the unit, so that operation is no longer easily changed.
Other files are generated automatically by the VTAP100, to provide you with status and event
log information. This data can be read as and when needed, from an attached PC, either in
text files or over a passive COM port connection.
(The Wiegand model, VTAP100-PACW, is also configured over USB from a PC. After
configuration it is connected to an access controller instead, and will send pass data over the
Wiegand interface to the controller, like any other reader.)
BASIC CONFIGURATION GUIDE PAGE 2

BASIC CONFIGURATION GUIDE PAGE 3
2.1 Configure VTAP100
This is an overview of the steps you need to take in configuring a VTAP100.
Figure 2-2 VTAP100 configuration steps
The VTAP100 is very flexible, in supporting different data formats for different media and
different interfaces. So, we would recommend you follow an incremental approach to setting
up and testing your settings.
1. First, check that the VTAP100 delivers Default operation on factory settings.
2. Then set up for reading mobile passes only, with a keyboard emulation output, which is
described in Start reading your own passes.

3. Only then add in capability to Read cards or tags or Connect to other systems using
other interfaces.
If you are an integrator or developer, and need to go further in controlling VTAP100
behaviour from other systems, you will find that information in the Advanced Configuration
Guide and Commands Reference.
2.2 Default operation on factory settings
Before anyone changes the configuration from its default, you can confirm that the unit is
working.
These steps demonstrate that the hardware can detect and interact with an OriginPass mobile
NFC pass, which is ready to work with the default configuration of your VTAP100.
1. Obtain an OriginPass from Dot Origin by visiting https://originpass.com/VTAP/ and add it
to your Google Pay or Apple Wallet.
2. Connect the VTAP100 to your PC, using a USB cable.
3. Open a text editor, such as Windows Notepad.
4. When you tap the OriginPass on the VTAP100:
lPass contents will be displayed in the open text editor.
lThe diagnostic LEDs on the VTAP100 PCB will flash together.
lYour smartphone may signal with a buzz or beep.
Note: Some Android phones will only interact if their screen is on, although it does not
need to be unlocked. You may need to enable NFC in the settings for the smartphone.
Note: If the pass detected does not match the key and ID on the VTAP, or is moved away
too quickly to be read, the pass contents displayed will be an 8 digit random hex string,
such as '08E22AC1', different on each presentation. OriginPass contents will be a
consistent string of the type '3~ffymeK9f_mziYtA6~53999301628695~Valued'. The
separator '~' or '|' will depend on your keyboard language settings.
Note: If local security settings prevent or limit the use of removable storage devices, or
the connection of additional keyboards, an administrator may need to alter those
permissions.
BASIC CONFIGURATION GUIDE PAGE 4

BASIC CONFIGURATION GUIDE PAGE 5
3  Start reading your own passes
To read any mobile NFC pass, you will need to provide your pass reading parameters. This
means a collector ID or merchant ID and any keys. These allow you to read and decrypt pass
data that is held by your users, on their smartphones.
This first time, you will need to connect the VTAP100 to your PC, using a USB cable. (If
needed, you can adjust the configuration to make these changes remotely in future, see
Advanced Configuration and Commands Reference Guide.)
Step 1: Upload key file(s) to your VTAP100
1. Ensure each of the keys you need to use are stored in a file with the name
private#.pem, following the .pem format, where # is replaced with a number from 1
to 6, matching the key slot you will save it in. (The demo passes are accessed using the
key in KeySlot 6, so don't overwrite this one unless you are finished with demo passes.)
Note: You cannot use more than 6 key files.
2. Load your keys by copying these files onto your VTAP100, which shows up in the file
system of your PC as a mass storage device.
Note: When you reboot the VTAP100 your key will have been stored in hardware, and
will no longer be listed as a file on the device. You can confirm key file(s) have been
loaded when you Check status in BOOT.TXT. If the key file does not disappear and
there is an error in Boot.txt, check your .pem file as it is likely it did not adhere to the
standard.

Step 2:Declare Merchant ID(s)/Collector ID(s) in the config.txt file
1. Open the file config.txt in a text editor (such as Windows Notepad). It already
contains parameters for accessing the demo passes, prefixed VAS1 and ST1, both relying
on KeySlot 6. You can overwrite these, or keep them in addition to your own pass
reading parameters.
2. Add your pass reading parameters in the config.txt file to access up to 6 Apple
VAS and up to 6 Google Pay Smart Tap IDs, and identify the keys to be used in each
case.
Note: Although the VTAP100 supports multiple IDs, Apple and Google expect most
users will only use one. Using multiple IDs is an advanced feature to use with care. The
VAS# and ST# numbers define the order in which IDs will be requested from Apple or
Android phones respectively. The lowest numbered ID will be requested first, then
continuing in ascending numeric order.
Put each parameter on a new line. Order of parameters does not matter to the
VTAP100, but could help other people who need to edit the file. Start any comment
lines in the config.txt file, that the VTAP100 should ignore, with a semicolon. Each
parameter should only appear once - if it accidentally appears more than once then only
the last instance will take effect.
Example:Settings in config.txt to interact with both
Apple VASand Google Smart Tap mobile passes
!VTAPconfig

VAS1MerchantID=<yourmerchantID>
VAS1KeySlot=1
;Thissaysusethekeyaddedasfile'private1.pem'toreadand
;decryptanypassconnectedtoyourmerchantIDonanAppleiPhone

ST1CollectorID=<yourcollectorID>
ST1KeySlot=2
ST1KeyVersion=1
;Thissaysusethekeyaddedasfile'private2.pem'atkeyversion1
;toreadanddecryptanypassconnectedtoyourcollectorID
;onanAndroidphone
3. Save the amended config.txt file and these changes will take effect immediately. (A small
number of changes to the config.txt file require a reboot to take effect, for instance
to the status of the virtual COM port, but these are highlighted in later sections).
BASIC CONFIGURATION GUIDE PAGE 6

BASIC CONFIGURATION GUIDE PAGE 7
Note: If a VAS#KeySlot parameter is omitted, or set to 0, then all available keys will be
compared with the 4 byte hash of the public key for the data, to choose the right key. If the
data received by the VTAP100 cannot be decrypted, the Apple iphone will register a pass
read, but the data will not be output.
Note: If an ST#KeySlot parameter is omitted, or set to 0, then authentication will be
omitted and decryption will not be performed. In this case, Google Pay Smart Tap data will
be received and sent on by the VTAP100, only if the pass does not require authentication by
the terminal.