Daisy 8.0 Release Notes Daisy Technical Support 888.324.7963 Printed in U.S.A. 2010 Teleflora
Information in this document is subject to change without notice. Companies, names and data used in examples herein are fictitious unless otherwise noted. While reasonable efforts have been taken in the preparation of this document to ensure its accuracy, Teleflora assumes no liability resulting from any errors or omissions, or from the use of the information obtained herein. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Teleflora, LLC. 2010 Teleflora, LLC. All rights reserved. Teleflora, Dove Network, Dove POS and eflorist Program are trademarks of Teleflora, LLC. Microsoft and Windows are registered trademarks of Microsoft Corporation. All other trademarks and service marks are the property of their respective owners. KME June 2010 i
INTRODUCTION... 1 DATA ENCRYPTION KEY (DeK) MANAGEMENT... 2 PASSWORD SECURITY... 2 PURGE CREDIT CARD INFORMATION... 19 SUPPORT MENU... 20 NOTABLE CHANGES... 23 ii
INTRODUCTION Welcome to Daisy 8.0! These notes will help explain new security features within Daisy now required by the PCI Security Standards Council (PCI-SSC) in order to secure payment card data. Daisy 8.0 is going through the certification process to become a validated Payment Application Data Security Standard (PA-DSS) software application. Payment Application Data Security Standard (PA-DSS), developed by PCI-SSC and the payment card industry, are mandatory regulations created to secure payment applications to help merchants and agents mitigate compromises, prevent storage of sensitive cardholder data (i.e. full magnetic strip data, CVV, CVV2 or PIN data) and support overall compliance with the PCI Data Security Standard (PCI-DSS). In addition, these documents also reference another document, the Daisy PA- DSS Implementation Guide that goes into greater detail about the data security requirements for your shop. This document will be available once the system has been validated. Daisy 8.0 Release Notes 1
DATA ENCRYPTION KEY (DeK) MANAGEMENT In order to meet with PA-DSS requirements, Daisy 8.0 has added a Daisy Key Rotation Utility. This function is set up during installation and is in place to help protect your customers credit card data in the event that someone attempts to access your records. PCI DSS requires that you change your data encryption key at least once a year. Managers/Owners should access this utility per the guidelines set in the Daisy PA-DSS Implementation Guide. EXPANDED CODIFICATION The Teleflora Member Directory in Daisy 8.0 will have expanded product codification support for up to 9,999 codified Teleflora products. As part of the expanded codification, codified products will be automatically added to Daisy s product listing as part of the quarterly updates. This will allow users to automatically add Teleflora codified products to their orders that they had to manually enter in previous versions. In addition, in florist directory listings, users can now see the specific product within a Teleflora Quarterly Product Line that a florist purchased, rather than only seeing that they had purchased some products within that line. For example Searching for a shop that not only ordered the MiGi Circus but also ordered it in Pink can be done by selecting the codified product from the list in the Florist Search Criteria screen. PASSWORD SECURITY You will now need to create login and password to allow your employees to access your Daisy system. The Login can be the employee name, first initial and last name. Some examples of Logins: ksamson TonyE katherine Password security is now in place for creating new users in the Linux Operating System. Administrator passwords must be complex passwords with a specific number and type of characters. Complex passwords must be at least 7 characters in length and include at least one of ALL of the following: Uppercase letter Lowercase letter Number Special Characters (@, #, ). Special characters can include a space. Daisy 8.0 Release Notes 2
Some examples of complex passwords: J58ate83 I like D3isy. Cr@bsliveb3ach The br@wn fox runs f3st! NOTE: Teleflora recommends that Owners/Managers only log in using the Administrator login if they have a specific administrative task to accomplish that requires access to the new Support Menu. Installing any program will require the user be logged in as an administrator. Examples of actions requiring administrative access are listed in the Support Menu Outline in this document. For all other functions, all employees should log in with non-administrative logins and passwords. In addition, Teleflora strongly advises that all non-administrator accounts be assigned a user name and strong password, and that passwords should be changed every 90 days. Strong passwords are a minimum of seven characters long and contain both numeric and alphabetic characters These release notes include detailed instructions to create, set and assign passwords. These instructions are also available in the Daisy PA-DSS Implementation Guide. If you have any problems, your installer can help you set up a new complex password as part of the installation process. To add a Daisy Admin user account: 1. Go to the Alt-F12 Support Menu and enter your login. (requires Admin login) Daisy 8.0 Release Notes 3
2. The Support Menu screen appears. Highlight Users Linux Users. 3. Highlight Add User then press Enter Daisy 8.0 Release Notes 4
4. Type your Username then press Enter. 5. Select Enable Admin. Daisy 8.0 Release Notes 5
6. Select the username of the employee that will have admin privileges. 7. Assign a password. Note: The one time temporary password will allow a dictionary word. 8. Select Close. Daisy 8.0 Release Notes 6
9. Select Exit. 10. Select Yes then press Enter to close the Support menu. 11. The newly created user will need to reset the temporary password. Return to the Alt-F12 login prompt. Type the new users Username at the login as: prompt. Daisy 8.0 Release Notes 7
12. You will see a large amount of text on the screen. This information reminds you of the importance of changing your password. To reset your password, type your temporary one-time password at the (current) UNIX password prompt. Daisy 8.0 Release Notes 8
13. Now you need to create a new complex password. Complex passwords must be at least 7 characters in length and include at least one of ALL of the following: Uppercase letter Lowercase letter Number Special Characters (@, #, ). Special characters can include a space. Some examples of complex passwords: J58ate83 I like D3isy. Cr@bsliveb3ach The br@wn fox runs f3st! Type new password at the New UNIX password prompt. Daisy 8.0 Release Notes 9
14. Retype the new password at the Retype new UNIX password prompt. Daisy 8.0 Release Notes 10
To add a Daisy non-admin user account: 1. Go to the Alt-F12 Support Menu and enter your login. 2. The Support Menu screen appears. Highlight Users Linux Users. Daisy 8.0 Release Notes 11
3. Highlight Add User then press Enter 4. The Choose a Username to Add screen will appear. The Username is the same thing as a Login. You will now need to create login and password to allow your employees to access your Daisy system. The Login can be the employee name, first initial and last name. Some examples of Logins: ksamson TonyE katherine Daisy 8.0 Release Notes 12
5. Type your Username then press Enter. 6. Select ResetPW. Daisy 8.0 Release Notes 13
7. Select the UserName of employee. 8. Assign a password. Note: The one time temporary password will allow a dictionary word. Daisy 8.0 Release Notes 14
9. Select Close. 10. Select Exit. Daisy 8.0 Release Notes 15
11. Select Yes then press Enter to close the Support menu. 12. The newly created user will need to reset the temporary password. Return to the Alt-F12 login prompt. Type the new users Username at the login as: prompt. 13. You will see a large amount of text on the screen. This information reminds you of the importance of changing your password. To reset your password, type your temporary one-time password at the (current) UNIX password prompt. Daisy 8.0 Release Notes 16
14. Now you need to create a new complex password. Complex passwords must be at least 7 characters in length and include at least one of ALL of the following: Uppercase letter Lowercase letter Number Special Characters (@, #, ). Special characters can include a space. Some examples of complex passwords: J58ate83 I like D3isy. Cr@bsliveb3ach The br@wn fox runs f3st! Type new password at the New UNIX password prompt. Daisy 8.0 Release Notes 17
15. Retype the new password at the Retype new UNIX password prompt. After logging into the Daisy system, an Admin user will see the Support menu displayed on the screen. The non-admin user will see the POS Menu at login. Daisy 8.0 Release Notes 18
PURGE CREDIT CARD INFORMATION Daisy now allows you to purge sensitive credit card information that is no longer needed, in order to safe-guard against hackers and possible fines. Sensitive information includes the encrypted credit card number, the encrypted credit card expiration date and other private information. Only employees with Daisy Admin rights have the ability to purge this information. This utility is only available on the Support Menu. Daisy 8.0 Release Notes 19
SUPPORT MENU Daisy 8.0 features a new Support Menu. You must be logged in as a Daisy Admin user to have access to this menu. This menu replaces the previous Root/Admin Menu and adds a more user friendly format with many useful links that allow commands to be utilized without exiting to a Command Prompt. Examples are provided of the Support Menu, Daisy Application Menu and User Menu. Support Menu Daisy Daisy Application Users Linux Users Printers Printers Network Network Connectivity Backups System and Data Backup Tools Hardware Hardware Related Items Linux Linux and Operating System Advanced Advanced Tools Exit - Exit Daisy 8.0 Release Notes 20
Daisy Application Menu Stop Daisy Stop all Daisy Programs. Update Software Update Daisy Point-of-Sale Software Update Directory Update Wire Service Directory POS pos as current user POS as User pos as another user Daisy Run daisy as current user Daisy Run daisy as other user Rotate Keys Rotate Encryption Keys CC Purge Purge Expired Credit Cards Permissions Run Permissions on All Daisy Files Close Close This Menu Daisy 8.0 Release Notes 21
User Menu Add User Add User Enable Admin Set User as Administrator Disable Admin Remove Administrative Privileges Remove Remove User Info Get User Info List List all users ResetPW Reset Password Password Generator Suggest New Passwords Login Login as a different user Close Close This Menu Daisy 8.0 Release Notes 22
NOTABLE CHANGES ZIP/Postal Code Lookup Now when a florist enters a ZIP or Postal code in the city field in the recipient information, if there are two or more cities in a ZIP/Postal code, then a pop-up window listing those cities will appear. The user can choose the correct city and it will populate the appropriate recipient fields. If there is only one city in that ZIP/Postal code, then the city and state data will populate the appropriate recipient fields without a pop-up window. Wire Search Directory Screen New updates to the wire search directory screen allow Daisy users to search for florists by a partial shop name, by ZIP/Postal codes in the city fields, search by minimum plus delivery charges, the delivery day, codified product and by facility links. During your upgrade, the installer will setup a Daisy merchandise code with the description of Teleflora. The screen is only an example. The exact code entered into your system depends on what code is available. Daisy 8.0 Release Notes 23
When you enter a wire out order, choose this merchandise code to access the Teleflora s Codified Product List. From this screen the user could press the <F3> function key to search by Item #, Category or Product. In the product field you can enter a keyword, such as happy. Daisy 8.0 Release Notes 24
The user can also sort the listing on the screen alphabetically by pressing any letter A Z or numerically by pressing any number 0 9. The <F2> function key will sort the listing by category. You can navigate the screen by using the arrow keys, page up/page down keys, and the home key. Florist Directory Search Results Screen The new florist search screen layout now shows the Also Served by Types, ZIP/Postal code distance (displays the distance from the shops listed ZIP/Postal code to the ZIP/Postal code criteria), the minimum plus delivery amounts, shop codes (Dove Network Member, open Sunday, etc.), holiday minimums, codified products, owner name and shop schedule. The Search Results Screen also features new sorting logic, so Dove members will appear before non-dove members. In addition, when codified products are in the search criteria, those florists with that product will appear on the top of the list. Shops will be highlighted in yellow if they do not carry that codified product. If the search criterion includes a delivery date, shops closed on that day will be marked with a red X in the shops code field to warn the user. When the shop is highlighted, their schedule will be shown with closed days highlighted in red. Daisy 8.0 Release Notes 25