Dot Origin VTAP100-PACW v4a User manual

VTAP100-PACWv4a
InstallationGuide
Revised May 2022 v1.1

If you need help to set up or use VTAP100-PACW, beyond what is contained in this
Installation Guide, then please contact our support team.
Email: [email protected]
Download the latest documentation and firmware from https://vtap100.com/resources/
Telephone UK and Europe: [phone]
Telephone North America and Latin America: [phone] or [phone]
If you have any feedback on setting up or using VTAP100-PACW or this documentation,
then please contact our support team. The product is constantly being reviewed and
improved and we value feedback about your experience.
Copyright 2022 Dot Origin Ltd. All rights reserved.
No part of this Installation Guide may be published or reproduced without the written
permission of Dot Origin Ltd except for personal use. This Installation Guide relates to correct
use of the VTAP100-PACW only. No liability can be accepted under any circumstances
relating to the operation of the user’s own PC, network or infrastructure.
Dot Origin Ltd
Unit 7, Coopers Place Business Park, Combe Lane, Wormley
Godalming GU8 5SZ United Kingdom
[phone]

Contents
1 Using this guide 1
2 How the VTAP100 works 2
2.1 Default operation on factory settings 3
2.2 Start reading your own passes 3
2.3 Check status in BOOT.TXT 7
2.4 Send pass data over a Wiegand interface 8
2.5 Wiegand wiring (for model VTAP100-PACW only) 9
3 Choose a location for your VTAP100 13
4 Design a custom label for the wallbox 14
5 Mount a VTAP100 wallbox 15
6 Hardware lock to disable USB mass storage device 16
7 Disposal 19
VTAP100-PACW V4A INSTALLATION GUIDE PAGE I

Safety instructions
WARNING: INTENDEDUSE
The VTAP100-PACW is a boxed product for end-users. Although the wallbox may be
opened when the device is not connected, components mounted on the VTAP100 PCB are
not user-serviceable.
WARNING: ESD PRECAUTIONS
If the wallbox is opened to access the PCB, we recommend careful handling of Electrostatic
Sensitive Devices (ESDs) .
WARNING: POWERSUPPLY
Use a standard micro-USB cable to connect the VTAP100-PACW model to a PC or
alternatively power the unit by connecting it to an access controller, using the Wiegand
connector supplied. If the VTAP100 is being powered through its Wiegand connection, you
can still make an additional USB data connection to a PC, provided that the PC is already
powered before the connection is made.
Using other cables or operating the product without its wallbox will invalidate EMC
emissions and immunity certifications.
The VTAP100 is rated at 5V DC (typ. 110mA, max 150mA) for power over USB. When
powered over Wiegand it is rated at 8V-16V DC @ 30 to 100mA.
VTAP100-PACW V4A INSTALLATION GUIDE PAGE II

1  Using this guide
This guide is for first-time users of the VTAP100-PACW.
Figure 1-1 VTAP100 in square (-SQ) case
Figure 1-2 VTAP100 in compact (-CC) case
It contains the information you need to physically install your VTAP100.
Consult the VTAP100 Basic Configuration Guide for more about custom configuration and
maintenance features, including how to update the firmware on your VTAP100 unit, when a
new release is available.
If you need help beyond what is contained in this guide please contact
[email protected].
VTAP100-PACW V4A INSTALLATION GUIDE PAGE 1

VTAP100-PACW V4A INSTALLATION GUIDE PAGE 2
2  How the VTAP100 works
With the VTAP100-PACW connected to a PC, simply tap your smartphone against the
VTAP100. Your mobile NFC pass will be read and data sent to the connected PC. The extra
facility with the VTAP100-PACW model only, is that it can alternatively be connected to an
access controller, using the Wiegand connector supplied.
Of course, the data can only be read if your phone contains a mobile NFC pass, which has
been issued in connection with the Merchant ID(s)/Collector ID(s) and key(s) that are known
to the VTAP100. The unit comes with default values, so that you can test Default operation
on factory settings before you begin customising any settings.
When the VTAP100-PACW is connected to a computer it appears as a generic mass storage
device (like a memory stick). To configure your VTAP100, you simply edit or create text files.
These will be read automatically, and control the operation of the VTAP100. There is
information in Start reading your own passes to take the first steps towards reading your
own passes. The VTAP100-PACW must be configured over USB from a PC, before it will send
pass data over the Wiegand interface. After being configured it does not need to be
connected to a PC. Consult the VTAP100 Basic Configuration Guide for more detail.
By default the VTAP100 is fully upgradable in the field. However, the VTAP100 can be locked
in software or hardware, before deploying the unit, so that operation is no longer easily
changed.

2.1 Default operation on factory settings
Before anyone changes the configuration from its default, you can confirm that the unit is
working.
These steps demonstrate that the hardware can detect and interact with an OriginPass mobile
NFC pass, which is ready to work with the default configuration of your VTAP100.
1. Obtain an OriginPass from Dot Origin by visiting https://originpass.com/VTAP/ and add it
to your Google Pay or Apple Wallet.
2. Connect the VTAP100 to your PC, using a USB cable.
3. Open a text editor, such as Windows Notepad.
4. When you tap the OriginPass on the VTAP100:
lPass contents will be displayed in the open text editor.
lThe diagnostic LEDs on the VTAP100 PCB will flash together.
lYour smartphone may signal with a buzz or beep.
Note: Some Android phones will only interact if their screen is on, although it does not
need to be unlocked. You may need to enable NFC in the settings for the smartphone.
Note: If the pass detected does not match the key and ID on the VTAP, or is moved away
too quickly to be read, the pass contents displayed will be an 8 digit random hex string,
such as '08E22AC1', different on each presentation. OriginPass contents will be a
consistent string of the type '3~ffymeK9f_mziYtA6~53999301628695~Valued'. The
separator '~' or '|' will depend on your keyboard language settings.
Note: If local security settings prevent or limit the use of removable storage devices, or
the connection of additional keyboards, an administrator may need to alter those
permissions.
2.2 Start reading your own passes
If you navigate to the VTAP100 in the computer's file system. It will appear as an attached
mass storage device and list the files contained, including the main config.txt file.
To read any mobile NFC pass, you will need to provide your pass reading parameters. This
means a collector ID or merchant ID and any keys. These allow you to read and decrypt pass
data that is held by your users, on their smartphones.
This first time, you will need to connect the VTAP100 to your PC, using a USB cable. (If
needed, you can adjust the configuration to make these changes remotely in future, see
Advanced Configuration and Commands Reference Guide.)
VTAP100-PACW V4A INSTALLATION GUIDE PAGE 3

VTAP100-PACW V4A INSTALLATION GUIDE PAGE 4
Step 1: Upload key file(s) to your VTAP100
1. Ensure each of the keys you need to use are stored in a file with the name
private#.pem, following the .pem format, where # is replaced with a number from 1
to 6, matching the key slot you will save it in. (The demo passes are accessed using the
key in KeySlot 6, so don't overwrite this one unless you are finished with demo passes.)
Note: You cannot use more than 6 key files.
2. Load your keys by copying these files onto your VTAP100, which shows up in the file
system of your PC as a mass storage device.
Note: When you reboot the VTAP100 your key will have been stored in hardware, and
will no longer be listed as a file on the device. You can confirm key file(s) have been
loaded when you Check status in BOOT.TXT

Step 2:Declare Merchant ID(s)/Collector ID(s) in the config.txt file
1. Open the file config.txt in a text editor (such as Windows Notepad). It already
contains parameters for accessing the demo passes, prefixed VAS1 and ST1, both relying
on KeySlot 6. You can overwrite these, or keep them in addition to your own pass
reading parameters.
2. Add your pass reading parameters in the config.txt file to access up to 6 Apple
VAS and up to 6 Google Pay Smart Tap IDs, and identify the keys to be used in each
case.
Note: Although the VTAP100 supports multiple IDs, Apple and Google expect most
users will only use one. Using multiple IDs is an advanced feature to use with care. The
VAS# and ST# numbers define the order in which IDs will be requested from Apple or
Android phones respectively. The lowest numbered ID will be requested first, then
continuing in ascending numeric order.
Put each parameter on a new line. Order of parameters does not matter to the
VTAP100, but could help other people who need to edit the file. Start any comment
lines in the config.txt file, that the VTAP100 should ignore, with a semicolon. Each
parameter should only appear once - if it accidentally appears more than once then only
the last instance will take effect.
Example:Settings in config.txt to interact with both
Apple VASand Google Smart Tap mobile passes
!VTAPconfig

VAS1MerchantID=<yourmerchantID>
VAS1KeySlot=1
;Thissaysusethekeyaddedasfile'private1.pem'toreadand
;decryptanypassconnectedtoyourmerchantIDonanAppleiPhone

ST1CollectorID=<yourcollectorID>
ST1KeySlot=2
ST1KeyVersion=1
;Thissaysusethekeyaddedasfile'private2.pem'atkeyversion1
;toreadanddecryptanypassconnectedtoyourcollectorID
;onanAndroidphone
3. Save the amended config.txt file and these changes will take effect immediately. (A small
number of changes to the config.txt file require a reboot to take effect, for instance
to the status of the virtual COM port, but these are highlighted in later sections).
VTAP100-PACW V4A INSTALLATION GUIDE PAGE 5

VTAP100-PACW V4A INSTALLATION GUIDE PAGE 6
Note: If a VAS#KeySlot parameter is omitted, or set to 0, then all available keys will be
compared with the 4 byte hash of the public key for the data, to choose the right key. If the
data received by the VTAP100 cannot be decrypted, the Apple iphone will register a pass
read, but the data will not be output.
Note: If an ST#KeySlot parameter is omitted, or set to 0, then authentication will be
omitted and decryption will not be performed. In this case, Google Pay Smart Tap data will
be received and sent on by the VTAP100, only if the pass does not require authentication by
the terminal.