Square Reader Authentication and Use
Authentication of the Square Reader
Upon receipt, the operator can connect the Square Reader to the USB hub of the Square
Stand. The Square Reader is cryptographically authenticated to both the Register application
and Square back-end servers. If the Square Reader is valid, it will register as such with the
Square Register application. If the operator has received an unauthorized reader, the Square
Register application will indicate the reader cannot be used with the application. The user
does not have configurable application or Reader settings for the authentication function.
Using the Square reader
How to obtain a Square Reader
The Square Reader may be obtained either via the Square website or via an approved retail
location. The Square Reader is ready for use upon receipt. (The Seller should verify that
Square offers payment processing in their country.) To use, simply remove the Square Reader
from the packaging and connect to a USB port of the Square Stand. The Square Reader
should authenticate itself to the Square Register application and operation can continue.
Attributes of a Square Reader
The Square Reader has the following approval classes: Secure Card Reader (SCR), Secure
Read and Exchange of Data (SRED), Integrated Chip Card Reader (ICCR). The Square Reader
is intended for use in environments with attended payments; it is not intended for use as an
unattended payment terminal (UPT).
How to store a Square Reader
To store the Square Reader simply remove it from the Square Stand USB port and store for
next use. In the event the Seller will not use the Square Reader for more than twelve (12)
months at a time, be sure to charge the Square Reader prior to storage and periodically to
preserve its readiness.
Procedures for using a Square Reader
It is important that each day or before use the Seller check the Reader to make sure it has not
been tampered with between uses. This can be easily done by looking at the chip card slot to
verify there are no foreign objects such as capture devices, card skimmers, extra wires/cables
or other materials.
The Square Register application will convey operational messages from the Reader including
when the device is ready for payment and when a payment data capture is complete. The
Square Reader has no user-configurable security options.
Security Self-Tests
In addition to the continual tamper detection and response, the Square Reader authenticates
the firmware and terminal configurations using RSA 3072/SHA-256 every time it is powered
© 2016 Square Inc. All Rights Reserved.
Version 1.00
5
