VeriFone MX 900 Series User manual

MX 900 Series
Reference Manual

MX 900 Series Reference Manual
Part Number SPC132-020-01-A, Revision A
September 14, 2012
VeriFone®, Inc.
2099 Gateway Place
Suite 600
San Jose, CA 95110
Telephone: [phone]
http://www.verifone.com
Printed in the United States of America.
© 2012 by VeriFone, Inc.
No part of this publication covered by the copyrights herein may be reproduced or
copied in any form or by any means — graphic, electronic, or mechanical, including
photocopying, taping, or information storage and retrieval systems — without written
permission of the publisher.
The contents of this document and all features and specifications are subject to
change without notice. The information contained herein does not represent a
commitment on the part of VeriFone, Inc.
Publications are not stocked at the address given above. Requests for VeriFone
publications should be made to your VeriFone representative.
VeriFone, the VeriFone logo, and Ruby SuperSystem are registered trademarks of
VeriFone, Inc. Sapphire, Topaz, HPV-20, Ruby Manager, Everest, EASY ID, Electronic
Journal On-site, and Ruby Card are trademarks of VeriFone, Inc. in the U.S. and/or
other countries. All other trademarks or brand names are the properties of their
respective holders.

September 14, 2012
Contents
1. Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . 1
Intended Audience . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Document Organization . . . . . . . . . . . . . . . . . . . . . . . 1
Acronyms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
2. Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Modular Design. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Display Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Factory Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Speakers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Optional Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Contactless Reader Module . . . . . . . . . . . . . . . . . . . . . 8
Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Total Cost of Ownership . . . . . . . . . . . . . . . . . . . . . . . . . 8
3. File Authentication . . . . . . . . . . . . . . . . . . . . . 9
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
The VeriFone Certificate Authority. . . . . . . . . . . . . . . 10
Required Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
How File Authentication Works . . . . . . . . . . . . . . . . . 12
Planning for File Authentication. . . . . . . . . . . . . . . . . . . 15
Download and Installation . . . . . . . . . . . . . . . . . . . . 15
How Signature Files Authenticate Target Files . . . . . . . 15
Determine Successful Authentication . . . . . . . . . . . . . 15
Digital Certificates and the File Authentication Process . 16
File Signing and Packaging Tools . . . . . . . . . . . . . . . . . . 19
VeriShield File Signing Tool (FST). . . . . . . . . . . . . . . . 19
Steps to Sign Files . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Packaging Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

ii MX 900 Series Reference Manual
September 14, 2012
4. System Mode . . . . . . . . . . . . . . . . . . . . . . . . . 21
When to Use System Mode . . . . . . . . . . . . . . . . . . . . . . . 21
Local and Remote Operations . . . . . . . . . . . . . . . . . . . . . 21
Verifying Terminal Status. . . . . . . . . . . . . . . . . . . . . . . . 22
Entering System Mode . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Exiting System Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
System Mode Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
System Mode Procedures . . . . . . . . . . . . . . . . . . . . . . 25
Navigation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Information Submenu . . . . . . . . . . . . . . . . . . . . . . . . 26
Administration Submenu . . . . . . . . . . . . . . . . . . . . . . 27
Transfer Submenu . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Security Submenu . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Diagnostics Submenu . . . . . . . . . . . . . . . . . . . . . . . . 33
Help Submenu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
5. Performing Downloads . . . . . . . . . . . . . . . . . . 37
Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Direct Downloads. . . . . . . . . . . . . . . . . . . . . . . . . . . 38
DDL Command Line Syntax . . . . . . . . . . . . . . . . . . . . 38
DDL Command Line File . . . . . . . . . . . . . . . . . . . . . . 39
DDL Example. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Download Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Downloading without an Onboard Application . . . . . . . . 40
IBM ECR Downloads . . . . . . . . . . . . . . . . . . . . . . . . . 42
Network Download Utility . . . . . . . . . . . . . . . . . . . . . 42
PCLANCNV Utility. . . . . . . . . . . . . . . . . . . . . . . . . . . 42
File Signing and Signature Files . . . . . . . . . . . . . . . . . 45
6. VeriShield Remote Key (VRK) Ready Device . . . . 47
Check for Valid VRK RSA Keys . . . . . . . . . . . . . . . . . . . . . 47
7. PINpad Security Best Practices . . . . . . . . . . . . . 51
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Administrative Security Activities . . . . . . . . . . . . . . . . . . 51
Physical Security Activities. . . . . . . . . . . . . . . . . . . . . . . 52
Wireless Applications - Required Actions, Best Practices . . . 53

MX 900 Series Reference Manual iii
September 14, 2012
8. Terminal Specifications . . . . . . . . . . . . . . . . . . 55
Terminal Specifications . . . . . . . . . . . . . . . . . . . . . . . . 55

iv MX 900 Series Reference Manual
September 14, 2012

September 14, 2012
1 INTRODUCTION
This manual is your primary source of information for MX 900 Series technical
information.
Intended Audience
This manual is intended for system administrators, application developers, and
support personnel.
Document Organization
The following chapters are included:
Chapter 1, Introduction, explains the reference guide.
Chapter 2, Features, explains the features of the MX 900 Series terminals.
Chapter 3, File Authentication, discusses usage of the file signing utility, and
generating and authenticating the files on the MX 900 Series terminals.
Chapter 4, System Mode, provides information about the usage of System Mode,
local and remote operations, and terminal status verification.
Chapter 5, VRK Ready Device, explains how to check your MX 900 Series terminal
for a valid RSA Key Pair.
Chapter 6, Performing Downloads, provides information about requirements,
download procedures, and the PCLANCNV utility.
Chapter 7, PINpad Security Best Practices, details methods for minimizing fraud
through education, routine inspection, vendor management, and prompt action.
Chapter 8, Terminal Specifications, provides information on power,
environment, and dimensions of the hardware.
Acronyms
The following table describes the common acronyms used:
Convention Meaning
AC Alternating Current
ADA Americans with Disabilities Act

2MX 900 Series Reference Manual
September 14, 2012
ATM Automated Teller Machine
BT Bluetooth
CDMA Code Division Multiple Access
CR Check Reader
CRC Cyclic Redundancy Check
CTLS Contactless
DDL Direct Download Utility
DIN Document Identification Number
DMM Download Management Module
DUKPT Derived Unique Key Per Transaction
DTK Developer’s Toolkit
DVD Digital Versatile Disc
ECR Electronic Cash Register
EDR Enhanced Data Rate
EE Electrical Engineering
EEPROM Electrically Erasable Programmable Read-Only Memory
EMV Europay MasterCard and VISA
FA File Authentication
GID Group Identification
GPIO General Purpose Input/Output
GPRS General Packet Radio Service
GSM Global System for Mobile Communications
HW Hardware
ICC Integrated Circuit Card
IO Input Output
ISM Industrial, Scientific, and Medical
LCD Liquid Crystal Display
LED Light Emitting Diode
MRA Merchandise Return Authorization
MSAM Micromodule-Size Security Access Module
MSR Magnetic Stripe Reader
NAND Not And (electronic logic gate)
Convention Meaning