SEH EPS TSE Server 8 User manual

Fiscal Server
EPS TSE Server 8
Manual
MHAB-UM-TSE8
Version: 1.3 | 2020-12

Overview
This 'Manual' describes the hardware installation, initial setup, administration
and configuration of the EPS TSE Server 8.
Table of contents 1.
Überblick
Dieses 'Handbuch' beschreibt die Hardware-Installation, Inbetriebnahme,
Administration und Konfiguration des EPS TSE Server 8.
Inhaltsverzeichnis 31.

1 [en] Manual
Contents
General Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Purpose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Scope of Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Accessories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Technical Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
LED Display. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Type Plate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Safety Regulations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Hardware Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Software Installation & Finding the IP Address. . . . . . . . . . . . . . . . . . . . . . . . . 9
Locking the Fiscal Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Administering, Configuring and Maintaining the Fiscal Server . . . . . . . . . 12
Administration from the EPS TSE Server Control Center . . . . . . . . . . . . . . . . . . 13
Administration from the SEH Product Manager . . . . . . . . . . . . . . . . . . . . . . . . . . 14
How to Configure User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
How to View Information on the Connected TSE Modules. . . . . . . . . . . . . . . . 16
How to Identify TSE Modules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
How to Remove a Connected TSE Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
How to Specify a Device Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
How to Configure the Device Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
How to Configure Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
How to Use Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
How to Configure Network Authentication (IEEE 802.1X) . . . . . . . . . . . . . . . . . 23
How to Perform a Device Software Update . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
How to Reset Parameters to their Default Values. . . . . . . . . . . . . . . . . . . . . . . . . 27
How to Find Errors (Log File) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
How to Restart the Fiscal Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
How to Switch the Fiscal Server Off. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Regulatory Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Open Source Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Manual [en] 2
General Information
Purpose
The Fiscal Server 'EPS TSE Server 8' integrates an Epson technical security device
(TSE) into a network. The Epson TSE meets the requirements of technical
guideline BSI TR-03153, forming a fundamental element in the implementation
of the German Cash Register Anti-Tampering Ordinance.
The EPS TSE Server 8 is integrated into the network by LAN and allows you to
connect a maximum of 8 Epson TSEs to the available USB ports.
Please contact your Epson partner for information on which Epson TSE can be
used.
Scope of Supply
Check the package contents before getting started:
Fiscal Server EPS TSE Server 8
Key For the lock in the Fiscal Server lid
Manual The 'Manual' describes the installation, initial
setup and maintenance of the EPS TSE Server 8.
(This document)
Power pack External power pack

3 [en] Manual
Accessories
Value-adding accessories for your EPS TSE Server 8 are optionally available from
SEH.
Rack Mount Kit
(EPS TSE Server Rack
Mount) For a perfect and safe storage of your EPS TSE
Server 8, we recommend the 'EPS TSE Server Rack
Mount' kit.
The rack mount kit allows you to install the EPS
TSE Server 8 in 19-inch server racks, providing
convenient access to the device.
Detailed information:
https://www.seh-technology.com/products/rack-
mount-kits.html

Manual [en] 4
Technical Data
Properties Values
Network connector
Logical:
Physical: IEEE 802.3 (1000BaseT, 100BaseTX and 10BaseT)
1 × RJ-45 (STP, Category 5 or better)
Device connection • 4 × USB 3.0 SuperSpeed (USB Ports 1–4)
• 4 × USB 2.0 Hi-Speed (USB Ports 5–8)
Current Input • 240 mA at 12 VDC without load
• max. 700 mA at 12 VDC with full load on the USB
ports
Power consumption • approx. 3.1 W when idle
• typ. approx. 7.5 W when operating 8 TSE mo-
dules on the USB ports
• typ. approx. 66 kWh/year
Operating environment Ambient temperature: 5–40 °C
Relative humidity: 20–80 %
Dimensions Width: 215 mm
Height: 45 mm
Depth: 155 mm
Weight: 1070 g (with housing cover)
Network connector (RJ-45)
(on the back)
Connector for the included
power pack
(on the back)
Activity LED
(yellow)
Status LED
(green)
Restart Reset
Link LED
(green)
Power LED
(green)
USB Ports 1–8
with USB Port LED
8
1

5 [en] Manual
LED Display
The Fiscal Server LEDs provide status information.
Important:
If the network connection is interrupted for more than
13 minutes, the EPS TSE Server 8 switches to standby
mode.
As soon as the network connection is re-established, the
EPS TSE Server 8 switches back to active operation.
LED Action Color Description
Power permanently off
permanently on
–
green
The Fiscal Server is not connected to a
power supply.
The Fiscal Server is connected to a
power supply.
(Operation or standby mode)
Link permanently off
permanently on
–
green
There is no connection to the network.
There is a connection to the
network.
Activity blinks at
irregular
intervals
yellow Indicates the exchange of data
packets.
Status permanently off
blinks 3 times
blinks 2 times
–
green
green
If the activity LED blinks periodically at
the same time, the BIOS mode is
signalized.
Indicates a Zeroconf IP address.
Indicates an IP address from outside
the Zeroconf range.

Manual [en] 6
Type Plate
The type plate gives important product information, such as hardware and
certification information as well as the serial number. The serial number
contains the production date: nnn YYYY MM nnnnn.
This information may be useful e.g. during maintenance, and is necessary for
support requests.
USB Port permanently off
blinking
permanently on
blinking
permanently on
blinking
–
green
green
red
red
green-
red
No TSE module is connected to the
USB port, or a TSE module is
connected but not integrated into an
electronic recording system.
Activation process.
A TSE module is connected to the USB
port and is ready for operation.
A TSE module is connected to the USB
port, but will soon reach end of life.
A TSE module is connected to the USB
port, but has reached end of life and
must be replaced.
TSE module identification mode.
LED Action Color Description

7 [en] Manual
Safety Regulations
Fiscal Servers are network devices for use in business environments. The EPS TSE
Server 8 is designed to integrate TSE modules into TCP/IP networks.
• Read the documentation and make sure that your system meets the require-
ments listed therein.
• Avoid contact with humidity or liquids.
• The device must only be connected and operated if it is in perfect condition.
• Make sure that no-one steps on or stumbles over the cables.
• If the supplied power cord cannot be used in your country, acquire an appro-
priate power cord that suits national provisions. For more information, con-
sult your retailer.
• Do not connect a telephone cable to the RJ-45 connector. The RJ-45 connec-
tor may only be connected to SELV voltages. For the connection to the RJ-45
connector only STP cabling (category 5 or better) may be used. The shielding
must fit flush to the connector.
• Do not open the housing. Unauthorized modifications to the device can af-
fect the product certification and are forbidden.
• Do not put objects on top of the housing.
• The device must not be directly connected to outdoor lines.
• Warning! This is a Class A product. In a domestic environment this product
may cause radio interference in which case the user may be required to take
adequate measures.
• The device must only be operated using the power pack included in the
package.
• Electrostatic discharges (ESD) may impair device performance.
• An interruption of the supply voltage may impair device performance or
cause malfunctions.
• The TSE modules must be connected directly to the Fiscal Server USB ports.
Do not use USB extension cables.
Important:
Before starting the initial setup procedure and during
the operation of the Fiscal Server, note the following
safety regulations. Their purpose is to protect yourself
and others from personal injuries, and avoid damage to
the equipment.

Manual [en] 8
Hardware Installation
1. Connect a TSE module to a USB port of the Fiscal Server.
2. Repeat step 1 to connect more than one TSE module.
3. Connect the network cable (RJ-45) to the Fiscal Server.
4. Connect the power cord to the Fiscal Server.
The Fiscal Server boots and is then ready for use.

9 [en] Manual
Software Installation & Finding the IP
Address
Depending on the hardware installation, the Fiscal Server then checks if it can
receive an IPv4 network configuration (IP address, subnet mask, gateway, DNS -
Domain Name Service) dynamically over DHCP (Dynamic Host Configuration
Protocol). If this is not the case, the Fiscal Server assigns itself an IP address via
Zeroconf from the address range (169.254.0.0/16) which is reserved for
Zeroconf.
The IPv4 address assigned to the Fiscal Server can be found in the SEH Product
Manager software tool.
The software is installed on all clients from which SEH Computertechnik GmbH
devices are to be administrated and managed on the network.
After starting, the SEH Product Manager scans the network for connected SEH
Computertechnik GmbH devices. All found devices are displayed in the 'device
list'. The IP address and other information can be seen.
You can also select and then administer and manage (12) the devices in the
device list.
To use the SEH Product Manager, install the program on a computer with a
Windows or macOS operating system. The SEH Product Manager installer can
be found on the SEH Computertechnik GmbH website:
https://www.seh-technology.com/services/downloads/download-fiscal-
solutions/eps-tse-server-8.html
Windows
The installation file is available as '*.exe' for Windows systems.
Windows 7 or higher
The installation can only be carried out by users with administrative rights.
1. Start the SEH Product Manager installer.
2. Follow the installation routine.
The SEH Product Manager is installed on your client.
macOS:
The installation file is available as '*.pkg' for macOS systems.
macOS 10.12.x or higher
The installation can only be carried out by users with administrative rights.
You know the administrator password.
1. Start the SEH Product Manager installer.

Manual [en] 10
2. Follow the installation routine.
The SEH Product Manager is installed on your client.
Determining the IP Address
The SEH Product Manager is installed on the client.
1. Start the SEH Product Manager.
The device list is displayed.
2. Find the Fiscal Server in the device list. It can be identified by its product type
and MAC address (which can be found on the device type plate).
3. Read the IP address of the Fiscal Server from the device list. Further informa-
tion on configuring the network settings 18.

Manual [en] 12
Administering, Configuring and Maintain-
ing the Fiscal Server
You can administer, configure and maintain the Fiscal Server in a number of
ways: All possible tasks are described below.
• Administration from the EPS TSE Server Control Center 13
• Administration from the SEH Product Manager 14
• How to Configure Network Settings 18
• How to View Information on the Connected TSE Modules 16
• How to Identify TSE Modules 16
• How to Remove a Connected TSE Module 16
• How to Specify a Device Description 17
• How to Configure the Device Time 17
• How to Configure Network Settings 18
• How to Use Certificates 20
• How to Configure Network Authentication (IEEE 802.1X) 23
• How to Perform a Device Software Update 26
• How to Reset Parameters to their Default Values 27
• The parameters are reset. 27
• How to Restart the Fiscal Server 28
• How to Switch the Fiscal Server Off 28

13 [en] Manual
Administration from the EPS TSE Server Control Center
The Fiscal Server has a user interface, the EPS TSE Server Control Center, which
can be opened in an Internet browser.
The EPS TSE Server Control Center can be used to configure, monitor and
maintain the Fiscal Server.
1. Open your browser.
2. Enter the IP address of the Fiscal Server as the URL.
The EPS TSE Server Control Center appears in the browser.
3. Log in using the default user profile.
User name: admin
Password: admin
You now have access to the EPS TSE Server Control Center.
You can also configure additional user accounts.
Detailed information about the configuration of the Fiscal
Server can be found in the Online Help of the EPS TSE Server
Control Center.
To start the Online Help, click the '?' icon.
Important:
If the EPS TSE Server Control Center does not appear,
check if a gateway is configured and the proxy settings
of your browser.
Important:
Change the default password as soon as possible 15!

Manual [en] 14
Administration from the SEH Product Manager
The 'SEH Product Manager' is a software tool developed by SEH
Computertechnik GmbH for the administration and management of SEH
Computertechnik GmbH devices on the network.
The tool was already installed in the software installation 9.
Detailed information on how to use the SEH Product Manager can be found in
the 'SEH Product Manager Online Help'. To start the online help system, go
to the SEH Product Manager and select the Help – Online Help menu item.
How to Configure User Accounts
Access to the EPS TSE Server Control Center is protected. A user name and a
password are required to gain access. The default user profile is:
User name: admin
Password: admin
This administrator user cannot be deleted and the user name cannot be
changed. However, the password for the administrator user profile can be
changed.
You can also create additional user accounts.
Table 1: Values
Important:
Change the default password as soon as possible 15!
Entry Value Description
User name
[user1_name]
max. 64 characters
[a–z, A–Z, 0–9] and
[._-@&:?!]
Defines the user name for the
user account.
password
[user1_pass]
min. 8 characters
max. 64 characters
[all ASCII] except 0x0-
0x1f, 0x7f-0xff
Defines the password for the
user account.
Host name
[sys_name]
max. 64 characters
[a–z, A–Z, 0–9] and
[.-]
Device name as alternative to IP
address. A name allows you to
identify the Fiscal Server on the
network more easily, for
example if you are using several
Fiscal Servers.
Contact
[sys_contact]
max. 64 characters
[a–z, A–Z, 0–9] and
[._-@&:?!"]
Contact person, e.g. device
administrator.

15 [en] Manual
Changing the Administrator Password
1. Start the EPS TSE Server Control Center.
2. Select SETTINGS – Users.
3. In the Users table, click the pencil icon for the admin user.
The Change Password dialog appears.
4. Enter the new password in the Password field of the Create Local User dia-
log.
5. Enter the new password again in the Retype field of the Create Local User
dialog.
6. Click Save to confirm.
The password has been changed.
Creating a Local User
1. Start the EPS TSE Server Control Center.
2. Select SETTINGS – Users.
3. Enter the user name in the Name field of the Create Local User dialog.
4. Enter the password in the Password field of the Create Local User dialog.
5. Enter the password again in the Retype field of the Create Local User dialog.
6. Click Save to confirm.
The user has been created.
Deleting a Local User
1. Start the EPS TSE Server Control Center.
Description
[sys_descr]
max. 64 characters
[a–z, A–Z, 0–9] and
[._-@&:?!"]
Device description, e.g. location
or department.
Password (802.1X
authentication) min. 8 characters
max. 64 characters
[all ASCII] except 0x0-
0x1f, 0x7f-0xff
Defines the password for an
802.1X authentication method
Important:
Observe the value conventions during input 14!
Important:
Observe the value conventions during input 14!
Entry Value Description

Manual [en] 16
2. Select SETTINGS – Users.
3. In the Users table, click the cross icon for the user.
A security query appears.
4. Confirm the security query.
The user has been deleted.
Logging Off
You are logged in as a user.
1. Select the Logout menu item.
You have been signed out.
How to View Information on the Connected TSE Modules
A TSE module is connected to the Fiscal Server.
1. Start the EPS TSE Server Control Center.
2. Select the TSE MODULE menu item.
A table with information on the connected TSE modules is displayed.
Click the Details button to view detailed information on the TSE
module.
How to Identify TSE Modules
You can use the identification function to find out which TSE module displayed
in the EPS TSE Server Control Center is physically connected to which USB port
of the Fiscal Server.
A TSE module is connected to the Fiscal Server.
You can see the Fiscal Server.
1. Start the EPS TSE Server Control Center.
2. Select the TSE MODULE menu item.
A table with information on the connected TSE modules is displayed.
3. Click the Identify button for one of the displayed TSE modules.
The USB port to which the TSE module is connected flashes (5).
How to Remove a Connected TSE Module
A TSE module is connected to the Fiscal Server.
1. Start the EPS TSE Server Control Center.
WARNING
Data loss!
There is a risk of data loss if you remove a TSE module
from the Fiscal Server directly.
Eject the TSE module before you physically remove it
from the Fiscal Server.

17 [en] Manual
2. Select the TSE MODULE menu item.
A table with information on the connected TSE modules is displayed.
3. Click the Eject button for one of the displayed TSE modules.
The TSE module is ejected and can be removed from the Fiscal Server.
How to Specify a Device Description
You can assign freely definable descriptions to the Fiscal Server. This gives you a
better overview of the devices in the network.
1. Start the EPS TSE Server Control Center.
2. Select the SETTINGS – Device menu item.
3. Enter freely defined descriptions in the Host name, Contact and Descrip-
tion fields in the Description dialog Table 1 14.
4. Click Save to confirm.
The settings will be saved.
How to Configure the Device Time
The Fiscal Server has a device time. Correct time information is required for
some network mechanisms, such as authentication for example.
The Fiscal Server device time can be set via an SNTP time server (Simple
Network Time Protocol) in the network. A time server synchronizes the time of
devices within a network.
In general, today's primary time standard 'UTC' (Universal Time Coordinated) is
used. The time zone compensates for location.
The network has a time server.
1. Start the EPS TSE Server Control Center.
2. Select the SETTINGS – Device menu item.
3. Enter the IP address or host name of the time server in the Time server field
of the Date/Time dialog.
(The host name can only be used if a DNS server was configured beforehand 18.)
4. From the Time zone list, select the code for your local time zone.
5. Click Save to confirm.
Important:
Observe the value conventions during input 14!
Important:
If your network is appropriately configured, the Fiscal
Server receives the time server settings automatically
via DHCP (18). A time server assigned in such a
manner always takes precedence over a manually set
time server.

Manual [en] 18
The settings will be saved.
How to Configure Network Settings
During the hardware installation (8) the Fiscal Server is connected to the
network. The Fiscal Server then checks if it receives an IPv4 network
configuration (IP address, subnet, gateway, DNS - Domain Name Service)
dynamically over DHCP (Dynamic Host Configuration Protocol). If this is not the
case, the Fiscal Server assigns itself an IP address via Zeroconf from the address
range (169.254.0.0/16) which is reserved for Zeroconf.
The IPv4 address assigned to the UTN Server can be found in the SEH Product
Manager software tool. This step is usually performed during hardware
installation (8).
As an alternative to automatic configuration via DHCP or Zeroconf, you can
assign a manual (static) IPv4 network configuration to the Fiscal Server.
For DHCP: Your network has a DHCP server.
For DNS: Your network has a DNS server.
1. Start the EPS TSE Server Control Center.
2. Select the SETTINGS – Network menu item.
3. Specify the IPv4 network configuration in the Network dialog Table 2 18.
4. Specify the DNS parameters in the DNS dialog Table 2 18.
5. Click Save to confirm.
The network settings have been saved.
Table 2: Network
Parameters Description
DHCP Enables the DHCP protocol.
If DHCP is enabled in your network, IPv4 network
configuration (IP address, subnet mask, gateway, DNS) is
automatic.
We recommend disabling this option once
an IP address has been assigned to the Fis-
cal Server.
Static Enables the assignment of a static IPv4 network
configuration.
Configure the IP address, subnet and gateway.
IPv4 address
[ip-addr]
IP address of the Fiscal Server.
Subnet
[ip_mask]
Subnet mask of the Fiscal Server.
Subnet masks are used to logically partition big networks
into subnetworks. If you are using the Fiscal Server in a
subnetwork, it requires the subnet mask of the
subnetwork.
Table of contents
Languages:
Other SEH Server manuals