IDTECH Spectrum Pro Manuel utilisateur

80141506-001

ID TECH Spectrum Pro

and SmartPIN L100 Pairing

Rev. B

Revised: May 2, 2017

ID TECH

10721 Walker Street, Cypress, CA90630 Voice: (714) 761-6368 Fax: (714) 761-8880

The information contained herein is provided to the user as a convenience. While every effort has been

made to ensure accuracy, ID TECH is not responsible for damages that might occur because of errors or

omissions, including any loss of profit or other commercial damage, nor for any infringements or patents

or other rights of third parties that may result from this information’s use. The specifications described

herein were current at the time of publication, but are subject to change at any time without prior notice.

LIMITED WARRANTY

ID TECH warrants to the original purchaser for a period of 12 months from the date of invoice that this

product is in good working order and free from defects in material and workmanship under normal use

and service. ID TECH’s obligation under this warranty is limited to, at its option, replacing, repairing, or

giving credit for any product that returned to the factory of origin with the warranty period and with

transportation charges and insurance prepaid, and which is, after examination, disclosed to ID TECH’s

satisfaction to be defective. The expense of removal and reinstallation of any item or items of equipment

is not included in this warranty. No person, firm, or corporation is authorized to assume for ID TECH any

other liabilities in connection with the sales of any product. In no event shall ID TECH be liable for any

special, incidental or consequential damages to purchaser or any third party caused by any defective item

of equipment, whether that defect is warranted against or not. Purchaser’s sole and exclusive remedy for

defective equipment, which does not conform to the requirements of sales, is to have such equipment

replaced or repaired by ID TECH. For limited warranty service during the warranty period, please contact

ID TECH to obtain a Return Material Authorization (RMA) number & instructions for returning the

product.

THIS WARRANTY IS IN LIEU OF ALL OTHER WARRANTIES OF MERCHANTABILITY OR

FITNESS FOR PARTICULAR PURPOSE. THERE ARE NO OTHER WARRANTIES OR

GUARANTEES, EXPRESS OR IMPLIED, OTHER THAN THOSE HEREIN STATED. THIS

PRODUCT IS SOLD AS IS. IN NO EVENT SHALL ID TECH BE LIABLE FOR CLAIMS BASED

UPON BREACH OF EXPRESS OR IMPLIED WARRANTY OF NEGLIGENCE OF ANY OTHER

DAMAGES WHETHER DIRECT, IMMEDIATE, FORESEEABLE, CONSEQUENTIAL OR SPECIAL

OR FOR ANY EXPENSE INCURRED BY REASON OF THE USE OR MISUSE, SALE OR

FABRICATIONS OF PRODUCTS WHICH DO NOT CONFORM TO THE TERMS AND

CONDITIONS OF THE CONTRACT.

ID TECH and Value through Innovation are trademarks of International Technologies & Systems

Corporation. USB (Universal Serial Bus) specification is copyright by Compaq Computer Corporation,

Intel Corporation, Microsoft Corporation, and NEC Corporation. Windows is a registered trademark of

Microsoft Corporation.

Revision History

Revision

Description and Reason for Change

Date

First version of document.

5/31/2016

Updated with Theory of Operation and expanded

instructions, including Poll Reader data examples.

9/30/2016

Released version.

Contains shortened Theory of Operation.

Updated the L100 Key Status section. Added advice to

connect L100 to Spectrum Pro and put Spectrum Pro in

Pass-Through Mode.

10/07/2016

2/24/2017

Revision to clarify setup steps and add instructions on

how to put Spectrum Pro in pass-through mode as well

as how to put the reader in Removal Detection mode.

Added verification steps (for producing PIN block),

5/2/2017

Table of Contents

INTRODUCTION ..................................................................................................................................................... 5

1THEORY OF OPERATION................................................................................................................................ 5

2PREREQUISITES............................................................................................................................................. 6

3SETTING UP REMOVAL DETECTION ............................................................................................................... 7

3.1 STEP ONE:SECURE THE PIN PAD'S REMOVAL DETECTION BUTTONS ..................................................................................7

3.2 STEP TWO:SET THE REMOVAL DETECTION PASSWORDS ..................................................................................................8

3.3 STEP THREE:ACTIVATE REMOVAL DETECTION .............................................................................................................10

4PAIRING (HIGH LEVEL OVERVIEW) .............................................................................................................. 11

4.1 VERIFY SPECTRUM PRO KEY STATUS ..........................................................................................................................12

4.2 VERIFY L100 KEY STATUS........................................................................................................................................13

4.3 PAIR THE UNITS .....................................................................................................................................................14

4.4 VERIFY THE PAIRING ...............................................................................................................................................14

4.5 CHECKING FOR ENCRYPTED PIN BLOCK ......................................................................................................................16

5HOW TO DEACTIVATE REMOVAL DETECTION ............................................................................................. 17

5.1 TROUBLESHOOTING TIPS .........................................................................................................................................18

Introduction

ID TECH’s SmartPIN L100 encrypting PIN pad provides a compact, rugged, secure keypad

interface for POS systems in which PIN and/or manual data-entry capability are required. As

such, the L100 is a natural complement to ID TECH’s Spectrum Pro insert reader. Together, the

Spectrum Pro and L100 provide an EMV Level 2 chip-and-PIN solution (suitable for use in

kiosks and other unattended applications), meeting ADA, ANSI, PCI, and ISO standards for PIN

Entry.

This document describes the steps that must be undertaken in order to pair a SmartPIN L100

keypad with a Spectrum Pro card reader.

1Theory of Operation

The SmartPIN L100 is intended to offer a PCI-compliant solution for systems that require

encryption of PIN data. To achieve this goal, the SmartPIN L100 must be paired with a

compatible card reader. Once paired, the L100 encrypts keypad data at the point of entry, and no

clear-text data is ever exchanged between the L100 and the connected reader.

In order for pairing to occur, each device (PIN pad and reader) must be injected, ahead of time,

with a so-called Pairing Key, representing a shared secret. This key is ultimately used to enable

secure sharing of data between reader and PIN pad. The data shared includes both PAN (primary

account number) data and PIN data. Cryptographic keys (and TDES encryption) are used to

protect the PAN and PIN data at all times. Each unit (reader, and PIN pad) must be injected with

the Pairing Key. This key represents a shared secret which unites the two devices such that they

can communicate with each other using encrypted data (hence, the units are "paired").

Once the reader and the PIN pad are in the proper state (see discussion to follow), the pairing

process itself is mostly automatic and out of the operator's control. From a high level, it involves

the following steps:

1. Both units (Spectrum Pro and L100) need to have been injected with Pairing Keys. This

step is not covered in this document. You should start by getting units key-injected, if

they are not already injected. (Contact your ID TECH representative for details. ID

TECH is a certified Key Injection Facility.)

2. The SmartPIN L100 needs to be in Removal Detection Mode in order to undergo the

pairing process. This document describes (in detail) the steps needed to put the PIN pad

into this state. (See Setting Up Removal Detection.)

3. With the units connected to each other, a pairing command (76 46 38 00 00) needs to be

sent to the Spectrum Pro. The Spectrum Pro will then automatically carry out all

necessary communications with the PIN pad, and pairing will be complete. You will be

able to verify this by (for example) conducting an MSR read (Start MSR command)

followed by a Get PIN from MSR, using the Universal Demo program; the latter will

result in a PIN prompt from the L100, and then (after a PIN is entered manually) the

command will allow the L100 to return an encrypted PIN block.

This document tells how to perform all of these steps (except for key injection). Since the

process is somewhat involved, it's recommended that you read this document over, from start to

finish, to familiarize yourself with the overall process, first, before you begin.

2Prerequisites

To complete the pairing process, you will need the following items (see also the photograph

further below):

A SmartPIN L100, injected with Pairing Key

A Spectrum Pro, injected with Pairing Key

RJ-11 to Serial cable, to connect Spectrum Pro's RJ-jack to the L100 serial port

A 5-volt DC power source for the L100

USB cable to connect Spectrum Pro to host

Two large steel binder clips, C-clamps, or other fixture(s) to hold the L100's tamper

buttons down

One large steel clip or C-clamp to depress the Spectrum Pro's removal-detection buttons

Host software that can open a connection with Spectrum Pro and send firmware

commands (e.g., ID TECH Universal SDK Demo app)

3Setting Up Removal Detection

Before the SmartPIN L100 can be paired, it must be placed in Removal Detection Mode. Please

follow the steps below carefully to activate the Removal Detection feature on the PIN pad. It is

highly recommended that you read through the entire procedure, and become thoroughly familiar

with it, before attempting to carry it out.

Note: Removal Detection is a security mechanism to protect the sensitive data in the PIN

pad, such as encryption keys, transaction data, etc. Removal Detection mode requires that

the small buttons on the top and bottom of the frame be depressed. Once the L100 has

been placed into Removal Detection mode, the anti-tamper buttons must not be released

without first deactivating Removal Detection. (See How to Deactivate Removal

Detection.) If you release the removal detection buttons prematurely, any passwords

stored in the L100 will be reset to the factory defaults.

Setting up Removal Detection mode is a 3-step process in which you need to secure the removal-

detection buttons; then set the device's removal-detection passwords; then (finally) put the device

in Removal Detection mode, using the passwords you set in the second step. We'll now talk

about those three steps, one by one.

3.1 Step One: Secure the PIN Pad's Removal Detection Buttons

Removal Detection Mode requires depressing the tamper buttons located at the top and bottom of

the unit's frame, on the front (as shown by the red arrows in the illustration further below). You

can keep these buttons depressed by installing metal strips (screwed in place) along the top and

bottom of the L100's housing; or you may install the unit in a kiosk; or you can temporarily use

stout spring-clips (or C-clamps, etc.) to hold the buttons down. If you use spring clips, take care

that they don't slip off prematurely.

After the buttons are secured, you will need to activate Removal Detection Mode. (You can later

deactivate this mode, then move the unit to a kiosk or other fixture, then reactivate it.) But first,

you need to set the removal detection passwords.

Tamper-detection buttons are at the top and bottom of the front face.

3.2 Step Two: Set the Removal Detection Passwords

The SmartPIN L100 comes with two default Removal Detection passwords that need to be reset

with user-supplied passwords before the Removal Detection feature can be activated. The

following steps will let you set the passwords.

1. Power on the SmartPIN L100 by connecting the device to the computer with the

appropriate cables, using a 5V/1.2-amp power supply. (Do not use more than 5 volts.)

The device will beep once to signify that the device is powered on, and the LCD

screen will illuminate.

2. Immediately press the following sequence of keys: Cancel, Clear, Enter, Blank,

Clear, Enter. (The sequence must be initiated within 5 seconds of the unit beeping after

powering on.) After this, the device will start beeping continuously to signify that the

passwords have not yet been set. Also, the LCD screen will prompt you to enter a

password.

Note: If the device does not beep continuously after the Cancel, Clear, Enter, Blank,

Clear, Enter sequence was entered, it means the passwords have already been set and

you can skip to the next section: Activate Removal Detection.

3. Enter default Password A: 12345678. (Make sure the device beeps after each button is

pressed to ensure that the input was registered.) After the default Password A is entered

correctly, the device will beep twice.

4. Enter a new user-generated Password 1 to replace Password A. (The new Password 1

must be 8 digits. For example: 11111111.) After the new Password 1 is entered, the

device will beep twice to confirm the input of the new password. Keep the new

Password 1 in your records.

5. The device will prompt you to reenter the password. Enter the new Password 1 again

to confirm the setting of the new password. After the new Password 1 is entered for a

second time, the device will beep twice to confirm the successful input of the new

password. If the new Password 1 was entered correctly, the device will beep twice again

to confirm that Password 1 is set.

6. Next enter default Password B: 87654321. Make sure the device beeps after each

button is pressed to ensure that the input was registered. After the default Password B is

entered correctly, the device will beep twice.

7. Enter a new user-generated Password 2 to replace Password B. The new Password 2

must be 8 digits and must be different from Password 1. For example: 22222222. After

the new Password 2 is entered, the device will beep twice to confirm the input of the new

password. Keep the new Password 2 in your records.

8. The device will prompt you to reenter the password. Enter the new Password 2 again

to confirm the setting of the new password. After the new Password 2 is entered for a

second time, the device will beep twice to confirm the input of the new password. If the

new Password 2 is entered correctly, the device will beep twice again to confirm that

Password 2 is set. The SmartPIN L100 Removal Detection passwords are now set. (The

L100 can safely be powered down now. When it is powered back up, it will remember

the passwords. Do not release the removal detection buttons, however. The buttons must

stay down until the unit has been taken out of Removal Detection mode. See How to

Deactivate Removal Detection, further below.)

3.3 Step Three: Activate Removal Detection

Note: The SmartPIN L100 must be installed with the two Removal Detection Pressure

Points (anti-tamper buttons) fully depressed before Removal Detection can be activated.

Once Removal Detection has been activated, unauthorized removal (that is to say:

premature release of the anti-tamper buttons) will result in the PIN pad losing any

passwords that were set.

The following steps describe how to activate Removal Detection. This section assumes that you

have already completed the previous section, which sets up User Passwords.

1. At all times throughout this process, ensure that the Removal Detection Pressure Points

are depressed and held securely in the depressed position. (The buttons must stay down

until the unit has been taken out of Removal Detection mode. See How to Deactivate

Removal Detection, further below.)

2. Unplug and replug (that is, power-cycle) the L100. The device will beep once to signify

that the power is on.

3. Immediately press Cancel, Clear, Enter, Blank, Clear, and Enter (6 keys) to enter

Removal Detection Mode. The unit will prompt you to enter the first User Password

(which was 11111111, in the examples shown earlier). If the password is accepted, you'll

be prompted to enter the second User Password (which was 22222222, in the examples

shown earlier). Make sure the device beeps after each button is pressed to ensure that the

input was properly registered.

4. If the passwords are accepted, you will see a prompt as follows:

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels IDTECH Terminal tactile

IDTECH

IDTECH Kiosk V IDVK-5XX Manuel utilisateur

IDTECH

IDTECH IDFA-3153-IM Manuel utilisateur

IDTECH

IDTECH ViVOpay PISCES Manuel utilisateur

Manuels Terminal tactile populaires d'autres marques

Wincor Nixdorf

Wincor Nixdorf iPOS plus Advanced Manuel utilisateur

Ingenico

Ingenico AXIUM EX4000 Manuel utilisateur

Heisei Electronics

Heisei Electronics Q-POS 815 Manuel utilisateur

Amano

Amano MTX-15 Manuel utilisateur

FLOWBIRD

FLOWBIRD CWT Compact Touch Manuel utilisateur

Demco

Demco SP7 Manuel utilisateur

Lathem

Lathem PC600 Series Manuel utilisateur

Partner

Partner MF-2352 Manuel utilisateur

NCR

NCR RealPOS 7460-2 Manuel

Simrad

Simrad MS50 Instructions de montage

Unitech

Unitech MR350 MKII Guide de démarrage rapide

Jungheinrich

Jungheinrich WMT 210 Manuel utilisateur

Motorola

Motorola MTP850 Manuel utilisateur

YASKAWA

YASKAWA 62H-MDC0 Manuel utilisateur

MVG industries

MVG industries NeptuLink Manuel utilisateur

Price Industries Limited

Price Industries Limited FDC Manuel d'instructions

Honeywell

Honeywell TemaKey Manuel utilisateur

EBN

EBN BPC65-B-A16G Manuel utilisateur