Professional Documents
Culture Documents
3 DES Fix
Installation
&
User Manual
Page 1 of 46
N
C
R
Edition
October, 2005
Copyright Notice
The material in this document is the intellectual property of Pi Systems International,
LP. We take care in the preparation of this document, but no guarantee is given
as to the correctness of its contents. Our products are under continual
improvement and we reserve the right to make changes without notice.
Trademarks
All trademarks used in this manual are the properties of their respective owners.
Diebold is a registered trademark of Diebold, Inc.
NCR is a registered trademark of National Cash Register, Inc.
Fujitsu is a registered trademark of Fujitsu Transaction Solutions, Inc.
Page 2 of 46
3 DES Fix
TABLE OF CONTENTS
Typical Communication Diagram.............................................................................................4
3 DES Fix Communication Diagram........................................................................................5
3 DES Fix Control Module 2....................................................................................................6
Machine Specific Section..........................................................................................................7
Instructions to perform Software Version Update on the control module................................7
3 DES Fix Item Check List for NCR ATMs.............................................................................8
3 DES Fix NCR Encrypting Pinpad........................................................................................9
3 DES Fix NCR 50xx Interface Board.....................................................................................9
3 DES Fix NCR 56xx/58xx Interface Board..........................................................................10
Hi BAPE Board Connection Reference for 3 DES Fix..........................................................11
Installation on NCR 5070.......................................................................................................14
Installation on NCR 5084.......................................................................................................15
Installation on NCR 5085.......................................................................................................17
Installation on NCR 5088.......................................................................................................18
Installation on NCR 5670.......................................................................................................19
Installation on NCR 5674/75..................................................................................................21
Installation on NCR 5674/75 With VAULT BAPE................................................................22
Installation on NCR 5684 & 5685..........................................................................................23
Installation on NCR 5684 & 5685 with VAULT BAPE.........................................................24
Installation on NCR 5688.......................................................................................................25
Installation on NCR 5688 with VAULT BAPE......................................................................26
Installation on NCR 5840.......................................................................................................27
Installation on NCR 5890.......................................................................................................28
3 DES Fix Configuration........................................................................................................29
Your new 3 DES Fix EPP...................................................................................................32
Master Key Security Measures...........................................................................................33
Master Key Entry Instructions............................................................................................34
Single DES vs. Triple DES.................................................................................................39
Pass Thru Procedure......................................................................................................39
For Single DES Encryption in EPP (NOT PASS THRU MODE).............................................39
Technical Appendices..............................................................................................................40
3 DES Fix Technical Support.................................................................................................40
Software Version Update Instructions....................................................................................41
3 DES Fix Messages Displayed on ATM Monitor.................................................................41
Operator Action/ Intervention.................................................................................................42
3 DES Fix Configuration Menu Options................................................................................43
3 DES Fix Control Module Error Code Definition List.........................................................44
Diagnostic Key Codes for 3 DES Fix VISA EPP for 56xx....................................................45
Diagnostic Key Codes for 3 DES Fix VISA EPP for 50xx....................................................46
Page 3 of 46
TELCO - 2 wire
Dialup, 4 wire
Dedicated Line,
CDPD, Frame Relay
etc.
MODEM
DCE
25 Pin Female
25 Pin Male
Comm. Cable
25 Pin Male
25 Pin Female
ATM/DTE
Welcome
Cust.
Kybd
Page 4 of 46
TELCO - 2 wire
Dialup, 4 wire
Dedicated Line,
CDPD, Frame
Relay, etc.
MODEM
DCE
25 Pin Female
25 Pin Male
Comm. Cable
25 Pin Female
25 Pin Male
Comm. Cable
3 DES Fix
CONTROL
MODULE
ATM
9 Pin Serial
25 Pin Male
MODEM
COM
25 Pin Female
ATM/DTE
Welcome
3 DES
PINPAD
Page 5 of 46
CONNECTIONS
ATM Connects to ATMs RS-232 Serial Communication Port via a standard
DB 25 Pin Male to Male straight-thru cable. (Existing Modem cable OK)
MODEM - Connect to Existing Modem (where ATM was previously connected)
COM Connects to the 3 DES Fix EPP at J5 via a Serial Cable. Also carries EPP Power.
POWER Transformer plugs in here.
(Note: power supply is dual voltage)
USB For Software Updates and Logging Functions
STATUS LEDS
POWER Power On Indicator also serves as a Blinking Indicator when
Updating Software via the USB Port
MODEM RD Receive data from the Host Modem to the Control Module
MODEM TD Transmit Data from the Control Module to the Host Modem
ATM DTR Displays the Status of the Data Terminal Ready Signal from the ATM
ATM TD This LED indicates Data Transmitted to the ATM
Page 6 of 46
Attention 3 DES Fix Installer: Please update the control module using the
following steps prior to installation.
Instructions to perform Software Version Update on the control module
1. If the 2 Update Files were emailed to you, save them to your PC first.
2. Format the USB drive (FAT only) before copying the files to it.
NOTE: Click on the icon in the Systray to stop the USB device before disconnecting the
USB drive from the PC.
3. Turn OFF the 3 DES Fix Control Module.
4. INSERT the USB DRIVE containing the Update1 and Update2 Files on it.
5. Power on the 3 DES Fix Control Module.
6. Within 10 Seconds, the Green LED on the box will Come on, Go Off then blink rapidly
for about 6 seconds. Once the Green LED on the Control Module stops blinking, wait 5
seconds, then Power OFF the Control Module.
7. Remove the USB DRIVE.
NOTE: If you are going to leave a Logging Key (USB DRIVE containing Logging Files)
in the Control Module, Insert the USB Logging Key after removal.
8. Power the ATM off, and then power the ATM back on. Allow it to load its internal
software or firmware. Proceed with the next step when ATM becomes idle.
9. When the ATM is idle, power on the 3 DES Fix control module.
10. The ATM should take a download from the host network processor.
NOTE: Within 10 minutes. Call Processor and request Load if the ATM does not take a
load automatically.
11. After the ATM is In Service Perform Several Test Transactions to ensure reliable
performance.
12. Write the new Software Version Number on the Label that is currently on the 3 DES Fix
Control Module.
NOTE: If the ATM was turned off while it was in the Maintenance/Supply Mode, it
may be necessary to cycle the ATM In and Out of Supply Mode to bring the ATM back
in Service.
Page 7 of 46
QTY
DESCRIPTION
CONTROL MODULE
Page 8 of 46
D1
1
J2
J3
GTI
J1
J4
1
P/N: BRD-300-101
Page 9 of 46
J8
1
J1
J7
D1
J2
J4
GTI
56XX Keypad Interface Bd.
J3
1
J6
1
J5
1
Page 10 of 46
J2 - SDC Bus
From ATM or Extension Cable
(Always Used Here)
J8 - Ribbon Cable to J2 or J3
of Pi Keypad Interface
(J2 and J3 are Paralleled)
(Returns Keypad Signals from EPP
and FDSK Keypads to Hi BAPE BD.)
This is a Stranded Cable if a Hi BAPE
Conversion Kit
J4 - Boot
EPP CABLE
To J8 on
HI BAPE
Page 11 of 46
Serial Cable
to Control Module
Page 12 of 46
NCR 50XX
P10/J10
PLUGS On To
J7 of NCR
Interface Bd.
Red or Blue wire
Indicates Pin 1
Page 13 of 46
Call for instructions if the ATM will not take a Load (See Tech Support Page)
NOTE: The ATMs Original Encryption Bd. needs to have some keys loaded in it. If you have
loaded software, pulled the Processor or otherwise caused the loss of A & B Single DES Keys,
Page 14 of 46
30.
Page 15 of 46
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
Lift plate and tighten nuts. Reinstall Glass if removed. Double-check all connections.
Install the DC Power Supply connector into the 3 DES FIX Controller.
Reinstall the Heater under the Keyboard. (if used)
Reinstall the Monitor.
Remount the ATMs left Side Cover and Secure.
Power Up the ATM.
Do not proceed until the ATM has loaded its internal Software.
Connect the 3 DES Power Supply to an AC Receptacle.
The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM.
Wait for Message Waiting for Configuration Mode, then
Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.
Enter the Password 1= 121212 and Password 2 = 343434
The 3 DES Fix Configuration Menu will be displayed.
Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).
Call for instructions if the ATM will not take a Load (See Tech Support Page)
NOTE: The ATMs Original Encryption Bd. needs to have some keys loaded in it.
If you have caused the loss of A & B Single DES Keys, please Enter All
1s or Generic Keys into the A and B Keys.
Page 16 of 46
Page 17 of 46
Page 18 of 46
Page 19 of 46
25. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM.
26. Wait for Message Waiting for Configuration Mode, then
27. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.
28. Enter the Password 1= 121212 and Password 2 = 343434
29. The 3 DES Fix Configuration Menu will be displayed.
30. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this
manual).
5670 Serial Cable Routing
Page 20 of 46
Page 21 of 46
Page 22 of 46
Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this
manual).
Call for instructions if the ATM will not take a Load (See Tech Support Page)
NOTE: The ATMs Original Encryption Bd. needs to have some keys loaded in it. If you
have caused the loss of A & B Single DES Keys, please Enter All 1s or Generic Keys into the
A and B Keys.
Page 23 of 46
Page 24 of 46
Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this
manual).
Call for instructions if the ATM will not take a Load (See Tech Support Page)
NOTE: The ATMs Original Encryption Bd. needs to have some keys loaded in it. If you have caused the
loss of A & B Single DES Keys, please Enter All 1s or Generic Keys into the A and B Keys.
Page 25 of 46
Page 26 of 46
Page 27 of 46
Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this
manual).
Call for instructions if the ATM will not take a Load (See Tech Support Page)
NOTE: The ATMs Original Encryption Bd. needs to have some keys loaded in it. If you have caused the
loss of A & B Single DES Keys, please Enter All 1s or Generic Keys into the A and B Keys.
Page 28 of 46
OUT OF SERVICE
STARTING 3 DES Fix
EPP
v, XXXXXX
v.0.XXX
XX
Page 29 of 46
Wait Until WAITING FOR CONFIGURATION MODE, at this time, type in 7777.
3 DES CONFIGURATION
ENTER
EXIT
Page 30 of 46
ENTER PASSWORD 1:
ACCEPT
EXIT
ENTER PASSWORD 2:
ACCEPT
EXIT
Page 31 of 46
OBSERVE: The 3 DES Fix Configuration Menu will display on the Monitor.
CONFIGURATION MENU
1
2
3
4
5
6
7
8
9
ACCEPT
EXIT
Page 32 of 46
The Pinvelope
This provides security of the EPP from the moment of manufacture. Each EPP is
manufactured under dual control. These pins need to be entered during the Master Key Entry
Process to allow access within the secure part of the EPP.
The Pinvelope must remain under dual control within your organization.
2.
The Comvelope
Your processor provides the Comvelopes under dual control. The Comvelopes
assure security of all ATM transactions across the network.
The Network format of Comvelopes will vary (e.g. four16 digit keys or two 32 digit
keys). Please call Network technical support with any questions on how to construct your
Component 1 and Component 2 Master Keys.
Page 33 of 46
2.
The Next Menu will allow you to choose the Master Key Component that you wish to
enter.
COMPONENT 1
COMPONENT 2
EXIT
3. You will have 2 Pinvelopes that are unique to the EPP. Open your Pinvelope (Part 1 of
2) and Comvelope for Component 1. Choose Component 1 from the Menu. The first
screen will request the Pinvelope Number; the second will be for entry of the
Comvelope Master Key Component.
4. Type in the 6 Digit Pin from the Pinvelope and hit ACCEPT.
PINVELOPE COMPONENT 1
ENTER PINVELOPE VALUE
ACCEPT
CANCEL
(See the important diagram Your new 3 DES Fix EPP in the User Manual showing which
EPP Keys are activated as A-F when Loading Master Key Components.)
5. Enter the 32 Bit Component 1 Master Keys from the Comvelope. On NCR
Machines the Screen will not show all digits. It will show 30 asterisks and will
beep audibly for the last two digits entered.
Page 34 of 46
CHANGE COMPONENT 1
ENTER NEW VALUE
XXXXX
ACCEPT
CANCEL
6. When you have entered Component 1 and hit ACCEPT, the Checksum will be
rendered. Compare to the Checksum provided by the Network who issued the
Comvelope.
Note: If you have entered an incorrect PIN Number for the EPPs Pinvelope, you will
see the previous Checksum from the Old Master Key displayed. During the course of
loading the Master Key Component, if the Keyboard does not beep when you hit an
ALPHA Character, you have entered the wrong PIN. If the ALPHA character you are
attempting to enter happens to be a C(the Cancel Key), Key Loading will abort.
XXXXXX
EXIT
7. If the Checksum you received after loading Component Key 1 is correct, return to Step
2 and proceed with loading Master Key Component 2. Repeat steps above using
Pinvelope 2 and Master Key Component 2.
8. When both Components of the Master Keys have been loaded, and each Check Sum
verified, you may exit to the Select Options Screen
Page 35 of 46
9. If you wish to review the checksums for both Component 1,Component 2 and the
Overall Checksum, Choose # 7 Display Checksums.
XXXXXX
XXXXXX
XXXXXX
EXIT
10. You should exit now, then power fail and reboot the ATM, Control Module and
Modem.
OUT OF SERVICE
STARTING 3 DES Fix
EPP
v, XXXXXX
v.0.XXX
Page 36 of 46
XX
Pauses for about 15 to 20 seconds Displays previous Out of Service screen next diplays
the Out of Service Screen
OUT OF SERVICE
AUTO SYNC COMPLETED
EMU:
NCR
PROTO: BISYNC
PTTYPE SFTW
ADDR: 01
Page 37 of 46
IMPORTANT NOTE
Ensure the ATMs original Encryptor Board has A & B Keys Loaded in it. The keys will not be
used, so just enter any keystroke except zeroes. Any Generic Set of keys is OK. If the ATM had
keys loaded previously you will not have to do this.
Page 38 of 46
This method of eliminating the 3 DES Fix Controller is also a quick way to verify the
operation of the EPP using standard keyboard Diagnostic without the Controller being in the
equation. When the Controller is connected for Triple DES, you can still, of course, run
Standard Keyboard Diagnostics on the EPP.
Reset the ATM and Power Fail the 3 DES Fix Control Module.
Restore Power and Allow the Network to load the ATM normally.
Page 39 of 46
Technical Appendices
3 DES Fix Technical Support
3 DES Fix Installations or related problems - Call 1-800-831-5723
Dave Allen
Ext. 440
dallen@pisystems.com
Star Cross
Ext. 450
scross@pisystems.com
Shipping Manager
Page 40 of 46
Page 41 of 46
OR
Pressing FOUR 7s
Page 42 of 46
Baud Rate
Timing
Display Modem
Config
DEFAULT
6
0
ATM CONFIG
Menu Item Name
1 Baud Rate
2 Timing
3
DEFAULT
1 Sync Protocol
2 Key Delay
3 Local Pin Check
4 Emulation
5 Auto Restore Config
6 DES Mode
7 8 Key, Left Only
8 Default Settings
DEFAULT
Future Use
N/A
Future Use
N/A
Page 43 of 46
0
0
N/A
3
0
N/A
Explanation/ Solution
CODES
3DES ERROR: 001
OUT OF SERVICE
3 DES Fix Error, The
EPP is Offline
OUT OF SERVICE
3 DES Fix Error: 002
(Key Change)
3 DES Fix Error:
EPP Malfunction
3 DES Fix Error: 003
Non-LPV EPP
Page 44 of 46
Diagnostic Key Codes for 3 DES Fix VISA EPP for 56xx
Models 56XX, 55XX, and 58XX Key Codes
This Diagram is only accurate for Models 56XX, 55XX, and 58XX Using the 3 DES Fix EPP
Key Codes that will display when testing the 3 DES Fix EPP Using Standard ATM Diagnostics
07
03
06
02
05
01
04
00
1 = 10
2 = 11
3 = 12
Enter 27
4 = 14
5 = 15
6 = 16
Clear 13
7 = 24
8 = 25
9 = 26
Cancel
17
20
0 = 21
22
23
Page 45 of 46
Diagnostic Key Codes for 3 DES Fix VISA EPP for 50xx
Models 5000 Key Codes
This Diagram is only accurate for 5000 Models using the 3 DES Fix EPP
Key Codes that will display when testing the 3 DES Fix EPP Using Standard ATM Diagnostics
76
07
66
17
56
27
46
37
1 = 04
2 = 14
3 = 24
Enter 75
4 = 44
5 = 54
6 =64
Clear 34
7 = 45
8 = 55
9 = 65
Cancel 74
05
0 = 15
25
35
Page 46 of 46