background image

 

 

2.

 

Enabling SSL/TLS Properly 

In this section we will enable TLS 1.2 to secure the ATM against man-in-the-middle attacks on the 
Ethernet line and enable certificate verification to make sure the ATM is verifying the certificate chain. 

a)

 

Open the TCP/IP Type screen using the path listed below, then match up the information to the 
image using the highlighted buttons.

 

ATM Operator Menu > Customer Setup > Select Processor > TCP/IP Type

 

 

NOTE:

 The Hercules modem can use Visa Framed or Standard for the 

Type

Summary of Contents for MoneyMax MX2600SE

Page 1: ......

Page 2: ...Prerequisites 3 Steps 4 1 ATM TCP IP Setup 4 Alternative Static IP Configuration 5 2 Enabling SSL TLS Properly 6 3 Installation of Root Certificate Files rootcert pem 7 4 SSL Host Configuration 10 5...

Page 3: ...the end of the document you will have a securely connected ATM that should be resilient to Man in the Middle MITM attacks involving tampering with the internal link between the ATM and the Hercules mo...

Page 4: ...the ATM are not required if changes are made to the Hercules modem Static IP can be more stable for some older ATMs but requires manual ATM reconfiguration if the Hercules modem is updated to new add...

Page 5: ...f you have switched from Static to DHCP or vice versa you may need to reboot the ATM now or after completing the remaining steps See how to reboot your ATM under Testing SSL below Alternative Static I...

Page 6: ...able certificate verification to make sure the ATM is verifying the certificate chain a Open the TCP IP Type screen using the path listed below then match up the information to the image using the hig...

Page 7: ...dation to be enabled on the ATM for enhanced protection against logical attacks a Download the DPL rootcert pem file or the certificate chain indicated by your payment processor and install it on a US...

Page 8: ...e appropriate port on your Hyosung s control board the green USB drive in our example The Hyosung MoneyMax MX2600SE ports are as seen below USB is on the right when viewing the ATM from behind Hyosung...

Page 9: ...From USB button NOTE If you encounter an error at this stage you either misnamed the rootcert pem file or your USB drive or SD card is not 2GB or less and FAT formatted see previous steps ATM Operator...

Page 10: ...es modem through our secure network to your payment processor Please contact our technical support department to configure the payment processor information for your Hercules modem or log in to the He...

Page 11: ...een of the Diagnostics to test the connection For the purposes of this document the Connect option of the Diagnostics mode will be used a Navigate to the TCP IP screen using the path listed below and...

Page 12: ...all the configuration options from the previous steps If you see Operation Success then congratulations the ATM is now configured correctly Conclusion After completing all the above steps your Hyosung...

Reviews: