INGENICO 9500 PCI PED 1.3

Transcription

1 1 / 50 INTEGRATION GUIDE INGENICO 9500 PCI PED 1.3 Ingenico proprietary. All rights reserved.

2 2 / 50 The scope of this document is to assist 3 rd party integrators when dealing with Ingenico product i9530 and i9550, certified PCI PED 1.3. It offers all information needed for a successful integration of i9500 products into unattended vending devices. Updates table Version Date Nature of modifications Author Visa /12/2007 First Draft S.Farràs /01/2008 Draft. General changes S.Farràs /01/2008 Draft. GPRS, Removal, Groundig & product life S.Farràs /02/2008 First release S.Farràs J. Martinez /05/2008 Updates on : Bezel AFAS Removal alarm S.Farràs J. Martinez /11/2008 Update drawings and text P.Mogas /04/2009 Correct page 36 (length of stud), change to new logo C.Melero P.Mogas /4/2009 Correct mistakes C.Melero P.Mogas /06/2009 Correct date in header P.Mogas 1.6 PSTN suppression ; different precisions and warnings on assembly procedure 3.2 ; Ingetrust Keys Warning F. Nguyen A. Soubirane i9500 V1_6_1.doc

3 3 / 50 Table of contents 1 GENERAL Definition of acronyms Modularity Diagram of i9500 connectivity and communications Example of integration Description of modules i9530: Integrated PINpad with LCD module i9550: Manual hybrid card reader Cables Pinpad-to-reader link cable (RJ11 cable) Ethernet cable Privacy Shield Optional components...12 Power supply PC linking cable Powered cable Powered loading cable Certificate injection cable Frontplate adaptor POWERING, INTERCONNECTION AND FITTING THE SAM AND MMC DEVICES Powering the units Connectivity Interconnectivity between the PIN PAD and the SCR PIN PAD connection ports ETHERNET GPRS Installation of the SAMs AND MMC ASSEMBLY General installation recommendations...27 i9500 V1_6_1.doc

4 4 / Assembly procedure for i9550 manual hybrid card reader Kiosk/ UPT Preparation Installing the Reader i Kiosk design constraint water ingress Assembly procedure for i9530 Integrated PINpad Kiosk/ UPT Preparation Installation of the privacy shield Installation of the i9530 PIN-pad TECHNICAL AND ENVIRONMENTAL SPECIFICATIONS Electrical consumptions Temperature and humidity Environmental specification continued Operating life CLEANING INSTRUCTIONS CERTIFICATIONS RESPONSIBILITY LIMITS Responsibilities Security certifications and approvals Validity of the security approvals Privacy shield REMOVAL DETECTION ALARM SCREEN SHOTS APPENDIX Gasket used for i DIV304252A drawing...50 i9500 V1_6_1.doc

5 5 / 50 1 GENERAL 1.1 DEFINITION OF ACRONYMS EMC EMV EPP GND GPRS GSM HSC LCD OPT PED PIN PSTN RAM RS232 SCR SAM UDRS UPT Electro Magnetic Compatibility Europay, Mastercard, Visa Encryption PINpad Ground General Packet Radio Service Global System for Mobile communications High Security Core Liquid Crystal Display Outdoor Payment Terminal PIN Entry Device Personal Identification Number Public Switched Telephone Network Random Access Memory Recommended Standard 232. A standard for serial binary communications Smart Card Reader Secure Access Module the chips storing the electronic cash register in a stored value scheme such as Moneo, Proton or VISA Cash. Universal Device Removal Sensor, the removal detection mechanism supplied by Storm and fitted to the card reader and keypad Unattended Payment Terminal UNICAPT INGENICO platform USB Universal Serial Bus i9500 V1_6_1.doc

6 6 / MODULARITY The i9500 solution for unattended payment applications (indoor and outdoor) consists on two modules: the i9530 (PINpad) that integrates keyboard and display and the i9550 (card reader). The product is available either as a solution or as individual components. Note: The i9500 has been designed to suit many different unattended payment opportunities with differing printing requirements. As such, no specific printer is offered with the Ingenico i9500. The i9530 and i9550 are the next generation products designed to give a wider and improved functionality offered by the previous i9430 and i9450 payment terminals Diagram of i9500 connectivity and communications Ethernet Power supply 12VDC 1.5A Keypad/ display i9530 (Option) USB slave 2 x RS232 GSM / GPRS Standard Communication Options Main Power supply SCR port PINPAD port Card Reader I9550 RS232 The basic configuration is finished with one of the following communication options: Ethernet or both Ethernet/GPRS. i9500 V1_6_1.doc

7 7 / Example of integration i9500 V1_6_1.doc

8 8 / DESCRIPTION OF MODULES i9530: Integrated PINpad with LCD module Front view Memory: o Rear view Integrated PINpad (i9530) 8 Mb SDRAM and 8 Mb Flash (present version i9530). Multi Media Card supported. Processor : HSC v.3 Platform : UNICAPT 32 Keys : 15 polymer keys (metallic keys are optional) 128 x 64 graphic display Network connectivity: o o o o o Ethernet on request. GSM/GPRS on request USB 2x RS232 MultiDropBus available on request USB Details Power COM2 COM3 SCR ETH/V34 Supply Reader UDRS i9500 V1_6_1.doc

9 9 / i9550: Manual hybrid card reader UDRS Supply input + Pinpad port COM port Bezel Processor : HSC v.3 Platform: Unicapt32 including EMV 4.0 level 1 & 2 Card interface : EMV level 1 and ISO 7816 (read & write) T=0, T=1 and Synchronous cards Magnetic stripe: ISO 1 /2 /3 (read only) i9500 V1_6_1.doc

10 10 / CABLES Pinpad-to-reader link cable (RJ11 cable) The interconnection between the i9530 and the i9550 is provided by an RS232 communication cable CAB425301A. This cable is provided with the i9550. Pin out for the link cable CAB425301A is shown below: Ethernet cable To connect the i9530 to the Ethernet network, an Ethernet cable is required. A standard Ethernet cable can be used for this connection. i9500 V1_6_1.doc

11 11 / PRIVACY SHIELD Designed specifically for the i9530 it is mandatory to assemble it to keep the PCI PED v1.3 certification. This part (BOX425106A) is provided with the i9530. Front view Rear view i9500 V1_6_1.doc

12 12 / OPTIONAL COMPONENTS Power supply The Ingenico reference for the European power supply is ALI0091. Input: Mains voltage supply ranging from 100V to 240V Maximum current of 0.8A Working frequency range between 47Hz and 63Hz Output: Regulated DC voltage 12V 2.6A i9500 V1_6_1.doc

13 13 / PC linking cable This cable (CAB325303A) is used for the interconnection between PIN-pad or Reader and PC through a RS232 serial port. i9500 V1_6_1.doc

14 14 / Powered cable The Ingenico reference for this cable is CAB325704B. This cable (CAB325704B) is used for the interconnection between the Reader or the PIN-pad and a PC. Power can be supplied through this cable. If it is used to communicate the PINpad the power can be provided through this cable or through the DC plug of the i9530 but not through both. i9500 V1_6_1.doc

15 15 / Powered loading cable The Ingenico reference for this cable is CAB325302C. This cable (CAB325302C) is used for the interconnection between the Reader or the PIN-pad and a PC to download software. Power supply can be provided through this cable. To download software to the PINpad the power can be provided through this cable or through the DC plug of the i9530 but not through both. This cable must be only used to load software as it is provided with the pin connected to the LOADSW signal short-circuited to GND. i9500 V1_6_1.doc

16 16 / 50 Note: As shown, this cable is provided with internal short-circuit between GND and LOADSW signal. Use only for load software purposes. CAUTION: Any insertion of this cable to load software causes internal Key erasure. i9500 V1_6_1.doc

17 17 / Certificate injection cable The Ingenico reference for this cable is CAB425822A. This cable is used to inject the IngeTrust certificates into both devices. It has the pin connected to the LOADSW signal connected to GND so it puts the devices in ROM download mode. CAUTION: Any insertion of this cable causes Ingetrust Key erasure. i9500 V1_6_1.doc

18 18 / Front plate adaptor Designed for adapting the front face cut out from i9430 to i9530. The drawing of this part (DIV325108B) is available on request. Rear view Front view i9500 V1_6_1.doc

19 19 / 50 i9500 V1_6_1.doc

20 20 / 50 i9500 V1_6_1.doc

21 21 / 50 2 POWERING, INTERCONNECTION AND FITTING THE SAM AND MMC DEVICES 2.1 POWERING THE UNITS The i9530 (PIN pad unit) is designed to be powered by the power supply ALI0091 (12VDC / 2.6A), through the PWR connector. The i9550 Reader powering input is provided through the interconnection line from SCR port of i9530 (PIN pad) and to the PINPAD port of Reader. No other additional source is needed. Grounding is a must on both units when mounting in a kiosk. Note: It is required to use ESD-protective clothing while handling these units. Main Power supply VAC 50/60Hz Power supply 12VDC 2.6A PIN pad i9530 SCR port PINPAD port Card Reader I9550 i9500 V1_6_1.doc

22 22 / CONNECTIVITY Interconnectivity between the PIN PAD and the SCR Connection between the i9530 (PIN-pad) and i9550 (Manual hybrid card reader) PIN PAD connection ports Name of connector Type of link Description of link PIN-pad Serial link Connects the i9530 to the i9550 RJ11 COM 2 Serial link RS 232 RJ11 COM 3 Serial link RS 232 RJ11 Eth / V34 Ethernet link Connects the i9530 to the Ethernet network V34 not available Type of connector RJ45 USB Serial link USB B-Plug Antenna Radio link GPRS antenna SMA Female i9500 V1_6_1.doc

23 23 / ETHERNET The PIN pad unit can be configured with connectivity to Ethernet (PSTN V34 networks is not available) When the unit is configured with Ethernet support, the connector ETH/V34 will be provided with an RJ-45 connector.. ETHERNET version i9500 V1_6_1.doc

24 24 / GPRS When the PIN pad unit is provided with GPRS functionality (configuration upon request), the external antenna is provided with the unit. In that case, the SIM used for GSM functionality is assigned to SIM1 of the PINpad. Product Features - Dual Band GSM / GPRS module (900 / 1800 MHz) or 800/1900 Band - Class MHz) - Class MHz) GPRS packet Data features - GPRS Class : up to 10 - Support of PBCCH / PCCCH - Coding schemes: CS1 to CS4 GSM Circuit Data/Fax Features - Data asynchronous, transparent up to 14.4 kbps. - Data asynchronous with MNP2, V.42bis. - Automatic fax group 3 (Class 1 and Class 2) Other Features - ME + SIM phone book management - Fixed Dialing Number - SIM Toolkit Class 2 - Real Time Clock - Alarm management Short Messages Services features (GSM or GPRS mode) i9500 V1_6_1.doc

25 25 / 50 Optional external antenna i9500 V1_6_1.doc

26 26 / INSTALLATION OF THE SAMS AND MMC 1) Disconnect the i9530 from the main power supply. 2) Open the SAMs cover untighting the screw. 3) Slide down the metal shutter and put the SAMs (see pictures) 4) Replace the back cover and secure. i9500 V1_6_1.doc

27 27 / 50 3 ASSEMBLY Note: It is required the use of ESD-protective clothing while handling these devices. 3.1 GENERAL INSTALLATION RECOMMENDATIONS 1) Ensure that you have enough free space for installation, operational and maintenance needs. 2) Be aware of the safety regulations. 3) Carefully consider the general and local payment security requirements and any impact they may have on the kiosk 4) Carefully consider the ergonomic aspects and also the local acts or recommendations concerning disabled and visually impaired people. 5) See environmental specification and especially in case of very cold weather, take steps to ensure that the internal temperature is at least -5 C. i9500 V1_6_1.doc

28 28 / ASSEMBLY PROCEDURE FOR I9550 MANUAL HYBRID CARD READER Kiosk/ UPT Preparation 1) The i9550 requires a cut out to the kiosk to the dimensions detailed in the diagram below (all dimensions are in millimetres). 2) Weld the 4 studs. (four 12 mm M6 threaded studs are required) Rear view of kiosk front face in which the i9550 is installed I9550 preparation With the 4x M6 studs i9500 V1_6_1.doc

29 29 / 50 Diagram of the cut-out for the i9550 i9500 V1_6_1.doc

30 30 / Installing the Reader i9550 The i9550 includes a security removal sensor (UDRS) that should be handled carefully during the installation procedure to ensure reliable operation in the field. A M6/M3 adaptor (see pictures) is supplied and should be used to allow the UDRS to be connected to the M6 stud. M3/M6 adaptor Outer sleeve Slotted spacer i9500 V1_6_1.doc

31 31 / 50 CAUTION: Never disassemble the UDRS before assembly: there is a risk of Key erasure if you short circuit the PCB signals. O ring Image 1 The white O ring must never be removed in order to avoid the Jumper to move inside the UDRS and cause Key erasure 1) Put the i9550 card reader gasket on the studs in the inside front face. The gasket used for the i9550 is the DIV304252A (Description of this gasket is in appendix). Image 2 Warning : The use of standard bolt may damage the internal security mesh. If the installation can not use the DIV425334B then a particular care must be taken during the screwing to not damage the Reader. 2) Put the i9550 over the studs. 3) Tight the three closers DIV425334B (see image 2). i9500 V1_6_1.doc

32 32 / 50 Image 3 4) Screw the hex spacer of the adapter onto the M6 stud as shown in image 3 until tight. Image 4 5) Now place the outer sleeve of the adapter over the hex spacer. 6) Place the cover spacer on the top of the hex pillar/ outer sleeve to complete the adaptor assembly as illustrated in image 4. Image 5 i9500 V1_6_1.doc

33 33 / 50 7) Position the open removal sensor over the top of the adapter. 8) Fit the M3 screw (supplied with the adapter) and tighten using a torque screwdriver to a torque setting of 0,25 Nm as shown in image 5. Image 6 9) Close the cover of the removal sensor as shown in image 6. Image 7 10) Include a grounding protection if not available on the M6 studs. 11) Tighten the other M6 closers to firmly secure the card reader to the chassis. i9500 V1_6_1.doc

34 34 / 50 Dimensions of the i9550 i9500 V1_6_1.doc

35 35 / Kiosk design constraint water ingress The i9550 card reader has an IP rating of x4. This means that the device is protected against liquid sprays from all directions - limited ingress permitted. Water ingress is possible due to the card slot. As a result the card reader should not be positioned directly above sensitive electrical equipment if water ingress is a possibility. IP testing of the card reader has demonstrated that small amounts of water do enter the device but do not affect the performance of the card reader. The small amounts of water drain through the slots in the mechanical housing. Therefore card reader positioning and drainage slots located below the card reader should be considered in external positions. i9500 V1_6_1.doc

36 36 / ASSEMBLY PROCEDURE FOR I9530 INTEGRATED PINPAD Kiosk/ UPT Preparation Inside view of the kiosk front face in which is installed the i I9530 preparation With the 6 x 15mm M3 studs 4 (except the stud number 4 that should be 25 mm) 1) Prepare the cut out to the kiosk to the dimensions detailed in the diagram below (all dimensions are in millimetres) 2) Weld the 6 studs. (five 15 mm and one 25mm M3 threaded studs are required) 3) Drill the holes to fix the privacy shield. i9500 V1_6_1.doc

37 37 / 50 Diagram of cut-out for the i Installation of the privacy shield i9500 V1_6_1.doc

38 38 / 50 Important: The privacy shield must be installed before the i9530 Integrated PINpad 1) First, position the privacy shield in the desired orientation and position on the outside face of the kiosk. 2) Now using six M3x12 screws insert the mounting screws from inside the kiosk chassis and screw into the threaded inserts of the privacy shield to secure the privacy shield to the chassis. Privacy shield cut-out: Remark: in case of the i9530 is installed without the shield, remove the i9530, remove the gasket, drill the holes and install the privacy shield. Afterwards, follow the mounting instructions. i9500 V1_6_1.doc

39 39 / Installation of the i9530 PIN-pad CAUTION: Never disassemble the UDSR before assembly: there is a risk of Key erasure if you short circuit the PCB signals. O ring Image 1 The white O ring must never be removed in order to avoid the Jumper to move inside the UDRS and cause Key erasure 1) Position the gasket on the studs in the inside front face of the kiosk. 2) Position the i9530 over the 6 x M3 studs. i9500 V1_6_1.doc

40 40 / 50 3) Position the security removal sensor over one of the M3 studs if equipped. 4) Insert and secure grounding connection to one of these remaining 5 x M3 studs. 5) Secure the removal sensor with an M3 nut (not supplied) tightened to 0,25 Nm. Image1 6) Close over the top housing of the removal sensor assembly as shown in image below. Image2 7) Now tighten the remaining 5x M3 nuts (not supplied) using a nut spinner to a torque of 0,25 Nm. The pin-pad will then be completely fixed on the front face. Dimensions of i9530 i9500 V1_6_1.doc

41 41 / 50 i9500 V1_6_1.doc

42 42 / 50 4 TECHNICAL AND ENVIRONMENTAL SPECIFICATIONS 4.1 ELECTRICAL CONSUMPTIONS Average consumptions: o I9530 Pin-pad < 300 ma o I9550 Reader < 150 ma Maximum average external supply current: o I9530 Pin-pad < 1A o I9550 Reader < 0,5 A Maximum consumption in stand by mode: o I9530 Pin-pad < 75 ma (Ethernet configuration) o I9550 Reader < 15 ma Note: All these values measured at 12 VDC input. 4.2 TEMPERATURE AND HUMIDITY Operating conditions (i9530 and i9550): Relative humidity: 5% - 95%. No condensing. External temperature range: -25 C to 65 C. Internal temperature: minimum -5 C Storage conditions (i9530 and i9550): Relative humidity: 5% - 95%. No condensing. External temperature range: -20 C to 70 C. Thermal Shock: -20 C to 70 C transfer time 30s. (Ingenico process) 4.3 ENVIRONMENTAL SPECIFICATION CONTINUED Natural events: Water and dust resistant (i9530). Resistant against wind-blown (i9550). Petrol resistant (For the keypad and bezel of the i9530 and bezel part of the i9550). Degradation: Vandal resistant. Impact resistant. Certified anti-tamper and attack resistant. i9500 V1_6_1.doc

43 43 / OPERATING LIFE Minimum operating life of 5 years. o o Keyboard key strokes Keytop legends ensure resistance to wear Reader card insertions i9500 V1_6_1.doc

44 44 / 50 5 CLEANING INSTRUCTIONS The external front face of the PINpad should be carefully cleaned in a regular basis. The goal is to keep the display and the keyboard free of dirt and solvents. - A soft non-abrasive detergent can be used if necessary. - Avoid the use of solvents and abrasive methods or materials. - Avoid also the use of pressurized liquids. i9500 V1_6_1.doc

45 45 / 50 6 CERTIFICATIONS Security: PCI PED v1.3 (on-line and off-line) Remark: This device is certified at product level, but other certifications that may be needed must be done locally. Product safety: Standard Levels Comments UL1950/CSA C22.2 No. 950 Including A1, A2, A3, A4, A11 IEC 950 ETL-UL1950 CETL-C22.2 NO.950 GS-DIN EN EMC testing: Standard Levels Comments FCC Part 15 EN / EN55024 EN Class B Class B 3 V/m EN Natural events and degradation: Standard Levels Comments IP 65 IP 34 MIL-STD 810E For i9530 For i Proc II BS EN J i9500 V1_6_1.doc

46 46 / 50 7 RESPONSIBILITY LIMITS 7.1 RESPONSIBILITIES Ingenico declines any responsibility if the instructions and recommendations supplied in the present document are not followed. 7.2 SECURITY CERTIFICATIONS AND APPROVALS Validity of the security approvals The PCI PED v1.3 approval is valid if the following modules and recommendations are implemented: i9530 and i9550 privacy shield recommendations given in this manual Privacy shield In the case of the Privacy Shield is not used, a solution must be found in order to meet the security requirements, and the security approvals must be re-obtained, Ingenico certification becomes obsolete. i9500 V1_6_1.doc

47 47 / 50 8 REMOVAL DETECTION ALARM SCREEN SHOTS The reliable performance of the I9500 is dependant on the correct torque setting of the removal detection circuit. The M3 screws and nuts must be set to a torque of 0,25Nm. Under-tightening or Over-tightening them may result in the removal detection alarm being triggered. In the event the removal detection alarm is triggered, a code reset is required. The default code is This can be set to a different password at the code entry screen as shown below. Note: It is strongly recommended to change this password in the installation to avoid the use of the default one in the field. INITIAL SELF CHECK Every time the unit is powered on, a self check secure link is performed. REMOVAL ALARM ON In case the removal sensor is over or under-tighten, the removal alarm will be triggered, showing on pinpad display the alarm and resetting the unit and showing the following display. PINPAD Alarm Code: Note: Even the unit is not powered on, the removal will activate the alarm if torque is not properly set. In that case, the alarm will be active until the removal is restored and the alarm reset from the pinpad interface. i9500 V1_6_1.doc

48 48 / 50 ALARM RESET To reset the alarm, first screw the removal at a proper torque (0,25Nm). READER REMOVAL PINPAD REMOVAL Insert the security code to restart and unlock the unit (the default code set by manufacturer is ) PINPAD Alarm Code: ******** Default alarm code Resetting alarm Hold down ENTER to change code i9500 V1_6_1.doc

49 49 / 50 CHANGING CODE The code can be modified by keeping pressed the Enter key when resetting the alarm. Enter new code Code: ******** Verify new code Code: ******** Code changed ** Please ensure that you carefully record the new code number if you have changed from the default code. Failure entering the correct code will cause the need to return the unit to INGENICO in order to reset the device. i9500 V1_6_1.doc

50 50 / 50 9 APPENDIX 9.1 GASKET USED FOR I DIV304252A drawing i9500 V1_6_1.doc