NX2200e User Guide
© 2016 ExaDigm, Inc.
Page 14 of 18
Rev. 3/0316
15.2
User Passwords
All user passwords must contain numeric and alpha characters. It must be a minimum of 7 and a
maximum of 20 characters. If the requirement is not met the terminal will display an error message
and the user will be forced to try again.
User passwords expire every 90 days. Upon expiration the terminal will display a message to the
User to change their password. If password has expired the User will be prompted to enter a new
password.
The previous four passwords cannot be used. If a previously used password is entered the terminal
will display an error message requesting the correct password.
Passwords are not stored in the system alone. Data with a combination of password and User ID is
encrypted with SHA1 algorithm and kept in the system.
A user can change their password by following the instructions below:
1. From XXX Payment App
2. Go to Admin
3. Go to User Manager
4. Enter user ID and password
5. Select Change Password
The security manager forces users to change any default password after the first successful login.
The security manager forces users to change any password changed in the user management
menu after the first successful login.
15.3
User Rules
Each user has a unique ID. No duplicate user IDs are allowed, the terminal will display message
that the ID is already used.
After 3 failed login attempts, the user‟s account is locked.
Lock duration is 15 minutes.
Managers can unlock the user from the user management menu in edit user section or the user
needs to wait 15 minutes before trying to log in again.
If terminal is in idle mode for more than 14 minutes, the terminal screen locks. In order to unlock it,
the last log
ged in user‟s authentication is required.
16.0
Data Retention
The ExaDigm payment application is set to purge all cardholder information (all transactions) after
reaching the customer defined retention period. The terminal will warn the user before purging, giving a
chance to settle the transactions to the payment processor.
The parameter to set the retention period is TVO_CHRETENTIONTIME. The field is configurable to any
number of accumulative hours
– for example 720 equals 30 days. The maximum value is 99999.
To set the retention period, follow the instructions below:
1. Go to
Admin
