VeriFone V200c, Reference Manual

Page: 43 / 66

F
ILE
A
UTHENTICATION
VeriShield File Signing Tool (FST)
V200
C
R
EFERENCE
G
UIDE
43
VeriShield File
Signing Tool
(FST)
The devices are shipped from manufacturer without a development certificate — a
development certificate is not available for download.
For development, like for deployment, customers must obtain VeriShield signer
cards and use the VeriShield File Signing Tool to sign all executable and other file
to be logically protected.
Development and production signer cards must be generated under distinct
sponsor certificates, so that development cards could be distributed, without any
security concern to personnel non-authorized to sign production software.
Signing Files To sign files:
1
Log on as Administrator. Launch The VeriShield File Signing tool. In the
Windows Start menu, it is typically located under
All Programs > Verifone >
VeriShield > File Signing Tool
.
2
Log in. “Dual logon” is required to sign files.
3
Click “Sign File” and follow the wizard.
4
Click “Next” at the Welcome screen.
5
Select “Sign Files with new settings' and click Next at the settings selection
screen.
6
Click “Add” and browse for the file(s) to be signed (DO NOT CHECK the
“flash” box. It is for Verix terminals ONLY and may cause authentication failure
on V200c terminals).
7
Click “Next” once all files to be signed have been added.
8
Select “Secured” and click “Next” at the security level screen (default is not
supported on the V200c terminals).
9
Select the name and location to export the signer certificate file (the sponsor
certificate is always exported as SponsorCert.crt in the same location).
10
Click “Sign File” at the “Summary of Settings” screen.
11
Enter first officer PIN.
12
Enter next officer PIN.
13
Click “Close” at the “results” screen.
If the signing was successful, there should be a new signature file (.
p7s
) for each
of the files that have been signed. Two certificate files (
.crt
) should have been
created in the specified location.