VeriFone DUET Vx810, Справочное руководство

Страница: 88 / 162

F
ILE
A
UTHENTICATION
VeriShield File Signing Tool
88
V X 810 R
EFERENCE
G
UIDE
Command-Line
Mode Syntax
Example
In the following VeriShield File Signing Tool command-line entry example, note
that the syntax used applies to a V
x
810 development device with the factory set of
certificates, and not to a deployment device. There are two differences:
•
The default signer certificate and default signer key file names provided by
VeriFone as part of the V
x
810 SDK are entered on the command line instead
of customer-specific customer signer certificate and customer signer private
key file names.
•
The switch for signer password (
-P password
) is not used, because a
customer signer password is only required to sign and authenticate files for
V
x
810 deployment devices being prepared for deployment.
Please note also how the command-line mode switches are used in this example:
filesign -L -f file.out -s file.p7s -c vxsign.crt -k vxsign.key
•
The
-L
switch indicates to store the application file in the flash ROM file
system instead of the target group’s (default) SRAM file system. (The target
group for the download must be selected from system mode when the
download is performed.)
•
The
-f
switch indicates that the application file “
file.out
” must be signed
by the VeriShield File Signing Tool.
Executable files, such as *.out and *.lib files, must always be signed if they are
to run on the device following a download. Depending on the application’s
logical security requirements, other types of files, such as data files and font
files, may also need to be signed and authenticated on download.
•
The
-s
switch is followed by the name of the signature file to be generated,
file.p7s
.
•
The
-c
switch is followed by the name of the default signer certificate to be
used for file authentication with the development device, “
vxsign.crt
.”
•
The
-k
switch is followed by the name of the default signer private key file,
vxsign.key
. A signer private key is a required input to the file signing
process for development devices and for deployment devices.
Graphical Interface
Mode
When you execute the the VeriShield File Signing Tool file, the FileSign dialog box
is displayed.
The FileSign dialog box has four entry fields, each of which is followed by a “next”
[
... ] selection button. There is one check box, and the OK and CANCEL buttons.
•
Press ALT+C or click the [ ... ] button to the right of the Certificate field to locate
and select the certificate file (*.crt) to be used to sign the file.
•
Press ALT+K or click the [ ... ] button to the right of the Key field to locate and
select the signer private key file (*.key).