MX 900 Series Reference Manual

1 MX 900 SeriesPart Number SPC132-020-01-D, Revision DMX 900 SeriesReference ManualMX 900 Series Reference Manual Part Number SPC132-020-01-D, Revision DMarch 16, 2017 Verifone , Inc. 88 West Plumeria Drive San Jose, CA 95134 Telephone: 408-232-7800 in the United States of America. 2017 by Verifone, part of this publication covered by the copyrights herein may be reproduced or copied in any form or by any means graphic, electronic, or mechanical, including photocopying, taping, or information storage and retrieval systems without written permission of the contents of this document and all features and specifications are subject to change without notice.

2 The information contained herein does not represent a commitment on the part of Verifone, are not stocked at the address given above. Requests for Verifone publications should be made to your Verifone , the Verifone logo, and Ruby SuperSystem are registered trademarks of Verifone, Inc. Sapphire, Topaz, HPV-20, Ruby Manager, Everest, EASY ID, Electronic Journal On-site, Ruby Card, MX 760, MX 880, MX 870, MX 860, MX 850, MX 830, MX 915, MX 925, Omni, Verix, ZONTALK, VeriTalk, VeriShield, TXO, and PAYware Vision Suite are trademarks of Verifone, Inc. in the and/or other countries.

3 All other trademarks or brand names are the properties of their respective WarrantyFor product warranty information, go to: 900 Series Reference Manual Revision HistoryDateRevisionDescriptionSeptember 14, 2012 AInitial Documentation ReleaseFebruary 27, 2015 BChanged PCI requirement to 19, 2015 CRebranded the documentMarch 16, 2017 DAdded warranty blurbMarch 16, 2017 Contents1. Introduction .. 5 Intended Audience .. 5 Document Organization .. 5 Acronyms .. 62. Features .. 9 Overview .. 9 Modular Design .. 9 Display Features .. 10 Features and Benefits.

4 10 Factory Options .. 12 Speakers .. 12 Optional Modules .. 12 Contactless Reader Module.. 12 Applications .. 12 Total Cost of Ownership .. 123. File Authentication .. 13 Overview .. 13 The Verifone Certificate Authority .. 14 Required Files .. 14 How File Authentication Works .. 16 Planning for File Authentication .. 19 Download and Installation .. 19 How Signature Files Authenticate Target Files .. 19 Determine Successful Authentication .. 20 Digital Certificates and the File Authentication Process.. 20 File Signing and Packaging Tools .. 23 VeriShield File Signing Tool (FST).

5 23 Steps to Sign Files .. 23 Packaging Tool .. 24iiMX 900 Series Reference ManualMarch 16, 20174. System Mode .. 25 When to Use System Mode .. 25 Local and Remote Operations .. 25 Verifying Terminal Status .. 26 Entering System Mode .. 26 Exiting System Mode .. 28 System Mode Menus .. 28 System Mode Procedures.. 28 Navigation .. 29 Information Submenu .. 29 Administration Submenu.. 30 Transfer Submenu .. 33 Security Submenu .. 34 Diagnostics Submenu .. 35 Help Submenu .. 365. Performing Downloads.. 37 Requirements .. 37 Direct Downloads.

6 38 DDL Command Line Syntax .. 38 DDL Command Line File.. 39 DDL Example .. 40 Download Procedures .. 40 Downloading without an Onboard Application .. 40 IBM ECR Downloads .. 42 Network Download Utility .. 42 PCLANCNV Utility.. 42 File Signing and Signature Files .. 456. VeriShield Remote Key (VRK) Ready Device .. 47 Check for Valid VRK RSA Keys .. 477. PINpad Security Best Practices.. 51 Introduction.. 51 Administrative Security Activities .. 51 Physical Security Activities.. 52 Wireless Applications - Required Actions, Best Practices.

7 53MX 900 Series Reference Manualiii March 16, 20178. Terminal Specifications .. 55 Terminal Specifications .. 55ivMX 900 Series Reference ManualMarch 16, 2017 March 16, 20171 INTRODUCTIONThis Manual is your primary source of information for MX 900 Series technical AudienceThis Manual is intended for system administrators, application developers, and support OrganizationThe following chapters are included:Chapter 1, Introduction, explains the Reference 2, Features, explains the features of the MX 900 Series 3, File Authentication, discusses usage of the file signing utility, and generating and authenticating the files on the MX 900 Series 4, System Mode, provides information about the usage of System Mode, local and remote operations, and terminal status 5, VRK Ready Device, explains how to check your MX 900 Series terminal for a valid RSA Key 6, Performing Downloads, provides information about requirements, download procedures, and the PCLANCNV 7.

8 PINpad Security Best Practices, details methods for minimizing fraud through education, routine inspection, vendor management, and prompt 8, Terminal Specifications, provides information on power, environment, and dimensions of the 900 Series Reference ManualMarch 16, 2017 AcronymsThe following table describes the common acronyms used:ConventionMeaningACAlternating CurrentADAA mericans with Disabilities Act ATMA utomated Teller MachineBTBluetoothCDMACode Division Multiple AccessCRCheck ReaderCRCC yclic Redundancy CheckCTLSC ontactlessDDLD irect Download UtilityDIND ocument Identification Number DMMD ownload Management ModuleDUKPTD erived Unique Key Per TransactionDTKD eveloper s ToolkitDVD Digital Versatile DiscECRE lectronic Cash RegisterEDRE nhanced Data RateEEElectrical EngineeringEEPROME lectrically Erasable Programmable Read-Only MemoryEMVE uropay MasterCard and VISAFAFile AuthenticationGIDG

9 Roup IdentificationGPIOG eneral Purpose Input/OutputGPRSG eneral Packet Radio ServiceGSMG lobal System for Mobile CommunicationsHWHardwareICCI ntegrated Circuit CardIOInput OutputISMI ndustrial, Scientific, and MedicalLCDL iquid Crystal DisplayMX 900 Series Reference Manual7 March 16, 2017 LEDL ight Emitting DiodeMRAM erchandise Return AuthorizationMSAMM icromodule-Size Security Access ModuleMSRM agnetic Stripe ReaderNANDNot And (electronic logic gate)PCBP rinted Circuit BoardPCIP ayment Card Industry PEDPIN Entry DevicesPINP ersonal Identification NumberPKIP ublic Key InfrastructurePLANPinStripe Local Area NetworkPLLP hase Lock LoopPSPP ayment Service Provider PTIDP ermanent Terminal Identification NumberRAMR andom Access MemoryRGBRed, Green.

10 And BlueRJ45 Registered Jack 45 RSSIR eceive Signal Strength IndicatorRTCReal Time ClockSAMS ecurity Access ModuleSCSmart CardSDKS oftware Development KitSoGSystem-on-ChipSRAMS tatic Random-Access MemoryTIFFT agged Image File FormatUSBU niversal Serial Bus UPFBT SIG Unplug Fest (UPF) Interoperability TestingVPNV erifone Part NumberWEPW ired Equivalent PrivacyWFAWi-Fi AllianceWi-FiWireless FidelityConventionMeaning8MX 900 Series Reference ManualMarch 16, 2017 March 16, 20172 FEATURESThis chapter contains information on the features of the MX 900 Series terminals, the MX 915, and the MX installation procedures, see the MX 900 Series Installation two new MX 900 Series models are the MX 915 and MX 925.