VeriFone V200c, Reference Manual

Page: 41 / 66

F
ILE
A
UTHENTICATION
Planning for File Authentication
V200
C
R
EFERENCE
G
UIDE
41
•
If the relationship between the new certificate and an existing higher-level
certificate cannot be verified, the authentication procedure for the new
certificate fails. In this case, the certificate information is not added to the
certificate tree and the failed certificate file (usually ~400 bytes) is not
retained.
Development Devices
A development device is a device that maintains a set of certificates in its
certificate tree. This set of certificates includes a special client certificate called a
development signer certificate.
In the development device, applications must still be signed and authenticated
before they can run on the device. A development device provides additional
application debug capabilities.
Deployment Devices
While the application development process is being completed and while the new
application is being tested on a development device, a sponsor can order specific
sponsor and signer certificates from the Verifone CA to use to logically secure
sponsor and signer privileges when the device is prepared for deployment.
Customer-specific sponsor and signer certificates are usually downloaded to a
device as part of the standard application download procedure performed by a
deployment service. In this operation, the new sponsor and signer certificates
replace the development sponsor certificate that is part of the factory set of
certificates, as shown in
Figure 6 .
When the sponsor and signer certificates are downloaded and successfully
authenticated, the device is ready for deployment.
Ultimately, it is the sponsor decides on how to implement the logical security
provided by FA on a field-deployed device. Additional certificates can be obtained
from the Verifone CA anytime to implement new sponsor and signer relationships
in deployment devices.