Dot Origin VTAP100-USB User manual

VTAP100-USB Installation Guide
Hardware v2 to v3a, Firmware from v1.0.4.0
Revised April 2021 v1.0

If you need help to set up or use VTAP100-USB, beyond what is contained in this Installation Guide,
then please contact our support team.
Email: [e-mail]
Download the latest documentation and firmware from https://vtap100.com/resources/
Telephone UK and Europe: [phone]
Telephone North America and Latin America: [phone] or [phone]
If you have any feedback on setting up or using VTAP100-USB or this documentation, then please
contact our support team. The product is constantly being reviewed and improved and we value
feedback about your experience.
Copyright 2021 Dot Origin Ltd. All rights reserved.
No part of this Installation Guide may be published or reproduced without the written permission of
Dot Origin Ltd except for personal use. This Installation Guide relates to correct use of the VTAP100-
USB only. No liability can be accepted under any circumstances relating to the operation of the user’s
own PC, network or infrastructure.
Dot Origin Ltd
Unit 7, Coopers Place Business Park, Combe Lane, Wormley
Godalming GU8 5SZ United Kingdom
[phone]

Contents
1 Using this guide 1
2 How the VTAP100 works 2
2.1 Default operation on factory settings 2
2.2 Provide pass reading parameters and keys 3
2.3 Check status in BOOT.TXT 4
3 Choose a location for your VTAP100 6
4 Design a custom label for the wallbox 7
5 Mount a VTAP100 wallbox 8
5.1 Hardware lock to prevent firmware or configuration change 8
6 Disposal 10
VTAP100-USB INSTALLATION GUIDE PAGE I

Safety instructions
WARNING: INTENDED USE
The VTAP100-USB is a boxed product for end-users. Although the wallbox may be opened when the
device is not connected, components mounted on the VTAP100 PCB are not user-serviceable.
WARNING: ESD PRECAUTIONS
If the wallbox is opened to access the PCB, we recommend careful handling of Electrostatic Sensitive
Devices (ESDs) .
WARNING: POWER SUPPLY
Use the USB cable provided to connect the VTAP100-USB to a PC.
Using other cables or operating the product without its wallbox will invalidate EMC emissions and
immunity certifications.
The VTAP100 is rated at 5V DC @ 50 to 150mA for power over USB.
VTAP100-USB INSTALLATION GUIDE PAGE II

1  Using this guide
This guide is for first-time users of the VTAP100-USB.
Figure 1-1 VTAP100-USB
It contains the information you need to physically install your VTAP100.
Consult the complete VTAP100 Configuration Guide for more about custom configuration and
maintenance features, including how to update the firmware on your VTAP100 unit, when a new
release is available.
If you need help beyond what is contained in this guide please contact [e-mail].
VTAP100-USB INSTALLATION GUIDE PAGE 1

VTAP100-USB INSTALLATION GUIDE PAGE 2
2  How the VTAP100 works
With the VTAP100-USB connected to a PC, simply tap your smartphone against the VTAP100 device.
Your mobile NFC pass will be read and data forwarded to the connected PC.
Of course, the data can only be read if your phone contains a mobile NFC pass, which has been
issued in connection with the Merchant ID(s)/Collector ID(s) and key(s) that are known to the
VTAP100. The unit comes with default values, so that you can test Default operation on factory
settings before you begin customising any settings.
When the VTAP100-USB is connected to a computer it appears as a generic mass storage device (like a
memory stick). To configure your VTAP100, you simply edit or create text files. These will be read
automatically, and control the operation of the VTAP100. There is information in Provide pass
reading parameters and keys to take the first steps towards reading your own passes. Consult the
VTAP100 Configuration Guide for more detail.
By default the VTAP100 is fully upgradable in the field. However, the VTAP100 can be locked in
software or hardware, before deploying the unit, so that operation is no longer easily changed.
2.1 Default operation on factory settings
Before anyone changes the configuration from its default, you can confirm that the unit is working.
These steps demonstrate that the hardware can detect and interact with an OriginPass mobile
NFC pass, which is ready to work with the default configuration of your VTAP100.
1. Obtain an OriginPass from Dot Origin by visiting https://originpass.com/VTAP/ and add it to
your Google Pay or Apple Wallet.
2. Connect the VTAP100 to your PC, using a USB cable.
3. Open a text editor, such as Windows Notepad.
4. When you tap the OriginPass on the VTAP100:
lPass contents will be displayed in the open text editor.
lThe diagnostic LEDs on the VTAP100 PCB will all flash together.
lYour smartphone may signal with a buzz or beep.
Note: Some Android phones will only interact if their screen is on, although it does not need to
be unlocked. You may need to enable NFC in the settings for the smartphone.
Note: If local security settings prevent or limit the use of removable storage devices, or the
connection of additional keyboards, an administrator may need to alter those permissions.

2.2 Provide pass reading parameters and keys
If you navigate to the VTAP100 in the computer's file system. It will appear as an attached mass
storage device and list the files contained, including the main config.txt file.
To read any mobile NFC pass, you will need to provide your pass reading parameters. This means a
collector ID or merchant ID and any keys. These allow you to read and decrypt pass data that is held
by your users, on their smartphones.
First, upload any private keys needed to decrypt data, then edit the config.txt file items which
are prefixed either VAS for Apple devices or ST for Google Pay Smart Tap devices.
Step 1: Upload key file(s) to VTAP100
1. Ensure each of the keys you need to use are stored in a file with the name private#.pem,
following the .pem format, where # is replaced with a number from 1 to 6, matching the key slot
you will save it in.
Note: You cannot use more than 6 key files.
2. Load your keys by copying these files onto your VTAP100 mass storage device.
3. When you reboot the device your key will be stored in hardware, and will no longer be listed as
a file on the device.
4. You can confirm key file(s) have been loaded when you Check status in BOOT.TXT
Step 2:Declare Merchant ID(s)/Collector ID(s) in the config.txt file
Add details in the config.txt file to access up to 6 Apple VAS and up to 6 Google Pay Smart Tap
IDs and identify the keys to be used in each case.
Note: Although the VTAP100 supports multiple Smart Tap IDs, Android Phones using Google Pay
expect most users will need only one Smart Tap Collector ID configuration.
VTAP100-USB INSTALLATION GUIDE PAGE 3

VTAP100-USB INSTALLATION GUIDE PAGE 4
Example: Changes to config.txt to interact with particular NFC mobile passes
!VTAPconfig

VAS1MerchantID
VAS1KeySlot=2
;ThisentrywilltriggerfullAppleVAS.Whenacorrespondingpassis
;detectedonanAppleiPhone,thatpasswillbereadanddecryptedusing
;keyfile2.
VAS1MerchantURL
;AwebsiteURLtobevisitedwhenapassoftype#ispresented.
;NotcurrentlysupportedbyiOSforVAS-onlytransactions.
T1CollectorID=97598013
ST1KeySlot=4
ST1KeyVersion=10
;ThisentrywilltriggeraSmartTapinteraction.Whenacorresponding
;passisdetectedonanAndroidphone,thatpasswillbereadand
;decryptedusingkeyfile4,atkeyversion10.
Note: If a VAS#KeySlot or ST#KeySlot is omitted, or set to 0, then authentication (on
Google Pay Smart Tap only) and decryption (on Google Pay Smart Tap and Apple VAS) will not be
performed. In this case, Apple VAS data will be received by the VTAP100, the phone will register a
pass read, but that data will not be decrypted or output. However, Google Pay Smart Tap data will
be received and forwarded by the VTAP100, but only if the pass does not require authentication
by the terminal.
2.3 Check status in BOOT.TXT
If you navigate to the VTAP100 in the computer's file system. It will appear as an attached mass
storage device and list the files contained, including the BOOT.TXT file.
Inspecting BOOT.TXT will give you essential information about your VTAP100 set up, which might
be helpful when troubleshooting.
Figure 2-1 Example BOOT.TXT file
You are most likely to need:

l'ATCA' - the serial number for your VTAP100 unit.
l'Firmware' - the VTAP100 firmware version in use.
l'KeySlots used:' - a useful check that you have uploaded the necessary key files, since these are
deleted when they are uploaded. These two examples show how to read this information:
o'KeySlots used:------' shows that no keys have been uploaded.
o'KeySlots used: 12-4--' shows that key files 1, 2 and 4 have been successfully uploaded.
l'Boot time' - is the internal clock time since the last unit reboot command. If power was removed
to achieve a reboot, the boot time defaults to 1970/00/00 00:00:00.
l'VCP enabled' - indicates that the virtual COM port has been enabled.
l'Status' - should be 0 if operating normally, anything else indicates an error state.
VTAP100-USB INSTALLATION GUIDE PAGE 5

VTAP100-USB INSTALLATION GUIDE PAGE 6
3  Choose a location for your VTAP100
Position the VTAP100-USB so that users can easily tap their smartphone against the label, on top of
the device.
The wallbox for a VTAP100 is 86mm x 86mm and 25.5mm deep.
Figure 3-1 VTAP100-USB
The VTAP100 must be stored and operated under the following conditions:
lAmbient temperature 0 to +50degC
lHumidity 0 to 95% RH non-condensing
lPressure 86-106kPa

4  Design a custom label for the wallbox
You can design and affix your own branded label to the unit. The size of the label recess is 72.33 x
72.33 mm with 4mm radius rounded corners as shown below. If you need help branding units do
contact [e-mail].
Figure 4-1 Dimensions of label recess in wallbox
VTAP100-USB INSTALLATION GUIDE PAGE 7

VTAP100-USB INSTALLATION GUIDE PAGE 8
5  Mount a VTAP100 wallbox
The wallbox has mounting holes in case you want to fix the device in place. The wallbox separates into
two pieces, which clip together around the PCB. The following diagram shows the location of
mounting holes in the wallbox base plate:
Figure 5-1 Mounting holes in wallbox base plate
We recommend that you complete and test your configuration before the VTAP100-USB is mounted.
Detailed help is in the VTAP100 Configuration Guide.
When configuration is complete, you might want to set a Hardware lock to prevent firmware or
configuration change before the VTAP100-USB is mounted.
5.1 Hardware lock to prevent firmware or configuration change
You can lock the VTAP100 so that its firmware and configuration cannot be changed. You can either
do this in software or hardware.
A software lock leaves some files visible. A hardware lock means that the VTAP100 will no longer be
detected as a composite USB device.
Users of a VTAP100-USB will need to open the wallbox to locate the jumper labelled LOCK (close to
the MicroUSB connector) on the PCB.
Connect a jumper across LOCK on the PCB to lock the device, preventing firmware or configuration
changes.

Figure 5-2 Jumper positions on VTAP100 PCB V2
Figure 5-3 Jumper positions on VTAP100 PCB V3a
When you start the VTAP100, the presence of this jumper means the connected PC will not detect a
USB mass storage device. The VTAP100 will only be detected by the PC as a keyboard (or keyboard
and virtual COM port).
At any time you can remove the jumper across LOCK. When you restart the VTAP100 it will be
detected as a USB mass storage device and you will be able to make firmware or configuration
changes again.
VTAP100-USB INSTALLATION GUIDE PAGE 9

VTAP100-USB INSTALLATION GUIDE PAGE 10
6  Disposal
For safety and sustainability, it is the responsibility of the integrator to ensure that when equipment
containing a VTAP100 reaches the end of its life, it is recycled in accordance with WEEE Regulations
within the EU.
VTAP100 (PCB, antenna and cables) should not be disposed of in general waste. If
you wish to discard electrical and electronic equipment (EEE), please contact your
supplier for further information.