3.1 Front mounting

The Apollo Polar terminals can be directly mounted on the front panel of a machine. The mounting footprint of Figure 2 is applicable for Apollo Polar terminal.

3.2 Mounting option 1: Recommended

The recommended mounting is directly on the machine using the above provided footprint for the Polar terminal. Please ensure the center allows for the connection of the cables, possible placement of SIM card and modem if applicable. Recommended is to use the provided cutout which also allows for reading of the serial number on the rear of the terminal.

Figure 18: Option 1 mounting

Metal environments will influence the performance of the contactless operating field. Please ensure that the Apollo terminals are not completely enclosed in a metal environment otherwise the operating distance will be reduced. An offset of 5 mm along the sides and rear of the terminal will provide enough distance. If you have any questions with regards to the mechanical integration, please contact the Payter support desk.

7.2 Example Payment flow

9.2 EVA mounting

The majority of the vending machines have a provision for installing payment terminals. The dimensions of the Apollo series terminals are based on the European Vending Association (EVA) standard.

9.2.1 Device opening

Mounting an Apollo series terminal requires a device opening that complies with the EVA EPS – standard door model measurements (see Figure 6).

Figure 6: Dimensions of opening and weld studs (in millimeters)

9.2.2 EVA mounting option 1: studs in machine

If the (vending) machine has pre-installed studs (see Figure 6):

1. Position the mounting frame at the rear of the opening.

2. Secure the terminal and frame with the four M4 nuts supplied with the terminal.

For a clean and neat finish of the front, do not forget to place the cover plate at the front of the machine. The cover plate is secured with double-sided adhesive tape for a strong connection.

Figure 7: Section view of mounted Apollo terminal (left) and ApolloMax terminal (right)

Figure 8: ISO view mounting option 1

9.2.3 EVA mounting option 1A: Outdoor

In outdoor environments a recessed placement is required to protect the terminal from rough weather conditions, low temperatures and vandalism, which will extend the longevity of the terminal. For the outdoor placement a deeper frame is available with an identical mounting.

Figure 9: Outdoor mounting setup

10.1 Front mounting

The Apollo Polar terminals can be directly mounted on the front panel of a machine. The mounting footprint of Figure 2 is applicable for Apollo Polar terminal.

Please note:Front Mounting is not ideal outdoor environments, as this makes the terminal more vulnerable to extreme weather conditions (Cold-heat), vandalism and wear and tear. Mounting the terminal recessed or protective by a canopy is recommended.

Figure 16: Mounting footprint with dimensions in millimeters (left)

Make sure that there is an opening in your machine large enough to accommodate the placement of the MDB/power cable and antenna cable or the LAN cable indicated by the orange rectangular in below figure.

Figure 17: Foot print Mounting

10.2 Mounting option 1: Recommended

The recommended mounting is directly on the machine using the above provided footprint for the Polar terminal. Please ensure the center allows for the connection of the cables, possible placement of SIM card and modem if applicable. Recommended is to use the provided cutout which also allows for reading of the serial number on the rear of the terminal.

Figure 18: Option 1 mounting

Ensure the provided rubber gasket (1) is placed between terminal and machine to avoid water ingress.

10.3 Mounting option 2: EVA cutout

The Apollo Polar terminal can also be mounted on a EVA provision by using the Polar mounting plate, similar to the P66, P68 and Apollo terminals. See below figure. An additional rubber gasket is available if required

11.1 Receipt and Storage

Since the terminal will be processing payment transactions and funds you must verify that the terminal you received is the correct one, and hasn't been tampered with. On receipt of the Terminals please follow the following instructions

• Being available to accept delivery of the Payment Terminal at the designated address on the confirmed day of delivery. The risk of loss, theft, damage or destruction of the Payment Terminal passes to the Merchant when the Payment Terminal is offered for delivery at the Merchant designated location as specified in the order form or the RMA request form.
• Verify whether the shipment is complete and according to order.
• Verify whether the serial numbers of the Terminals are listed and match the serial number of the Terminals in the MyPayter Portal.
• Inspect the packaging and Terminals for visible damage to the housing
• Do not use a damaged Terminal, report any damage per described in section Faulty, lost,stolen, or damaged/tampered Terminals.
• Create and maintain an inventory of the Terminals
• Store the Terminals in a secure location prior to deployment and control access to them.

11.2 Deployment

Before deployment please perform the following:

• Install and configure Payment Terminals on site in accordance with the applicable installation and configuration instructions provided for the Payment Terminal. The applicable manual can be retrieved through your distributor.
• Check for visible damage to the housing
• Do not use the Terminal if it is damaged or covered with a non-standard sticker, report any damage/tampering per section 6. For reference images, please check the Payter website, section security policies: ApolloMAX Security Policy , Apollo Security Policy
  • Charge and or connect the Terminal to the Internet.
  • Verify the Payter logo shows up after turning on the terminal.
  • Do not use the Terminal if the logo does not appear, report per section 6.
• Check whether an internet connection is established
• Verify whether the terminal(s) connect to the MyPayter portal; can be verified with the coordinator
• if applicable check whether the amounts are set correctly in the terminal
• After extended storage a test transaction is recommended
• When distributing the Terminals in your organisation update the inventory (list of Terminals) created upon receipt (section 2) with Terminal locations and personnel authorised to operate the Terminals
• Ensure proper training and instruction of all personnel operating the Terminals, enforcing compliance to the responsibilities laid out in this document.

11.3 Transactions and reconciliation

Payter or Distributor does not have access to the Customer’s Merchant Account and that it is therefore the Customer’s responsibility to reconcile the payments being made into the Customer’s Merchant Account with the Transactions processed by the Payment Terminal and PSP Service. In the event that the Customer identifies a discrepancy they must notify Payter as soon as reasonably practical. Payter and the PSP will treat any such notification as a high priority problem.

Payter recommends to check your account and the MyPayter portal for transactions, connectivity of the Terminal and error messages.

11.4 Usage and Management

Merchant must in operating and using the Payment Terminal:

• Ensure that the Payment Terminal is kept and operated in a suitable environment (please check manual), used only for the purposes for which it is designed, and operated in a proper manner;
• Make no alteration to the Payment Terminal and not remove any component(s) from the Payment Terminal without the prior written consent of Payter;
• Not, without the prior written consent of Payter, allow any third party to use the Payment Terminal or submit Transactions via the Payment Terminal on behalf of a third party. The Payment Terminal may only be used by Merchant to submit Transactions to the PSP in its own name and for the business it registered for in the Merchant registration Process;
• Comply with the relevant usage manuals for the Payment Terminals, including in particular when applicable:
  • The manual of the particular type of Payment Terminal;
  • The Installation guide for Payment Terminals to ensure IP connectivity for the Payment Terminals to enable their proper functioning;

11.5 Battery and storage

The Apollo terminals are equipped with Li-Ion batteries to ensure the integrity of the payment terminals even when not powered. To ensure the security during the full life time of the terminals, these batteries need to be recharged at regular intervals (once every three (3) months) to avoid fall back to the back-up battery. When a terminal has not connected to the MyPayter terminal management portal for an extended period of time, the Merchant will receive an alerts through the terminal management system to charge the terminal.

Please note: Failure to charge the batteries at notification drastically reduce the shelf life of a terminal and can result in tampering the terminal. A tampered terminal need to be returned to Payter for analysis, possible replacement of the batteries and key injection.

11.6 Security

For security reasons, Merchants and staff are advised to check Payment Terminal regularly for:

• Visible damage to the housing
• Do not use the Terminal if it is damaged or covered with a non-standard sticker. For reference images, please check the Payter website, section Security policies, : ApolloMAX Security Policy , Apollo Security Policy P6X User manual PTR-40-10-ML-C-0003-03.
• Unusual cables connected anywhere on the terminal
• Verify the Payter logo shows up after turning on the terminal.
• Verify the identity of any third-party persons claiming to be repair or maintenance personnel, prior to granting them access to modify or troubleshoot terminals.
• Do not install, replace, or return Terminals without verification.
• Be aware of suspicious behaviour around Terminals (for example, attempts by unknown persons to unplug or open the terminals).
• Report suspicious behaviour and indications of terminal tampering or substitution to appropriate personnel (for example, to a manager or security officer).

Merchants should use their terminal inventory to ensure that the location of all Terminals is known and to confirm that no Terminals have been lost, stolen or substituted. Payter recommends enforcing procedures to perform visual Terminal integrity inspections on a weekly basis as well as before and after storage of the Terminals.

In case of any doubts, do not use the terminal and contact Payter via the regular escalation channels.

• Follow the Scheme Rules in operating the Payment Terminals to submit point of SaleTransactions

For as far as applicable comply with PCI DSS security requirements imposed by the Card Schemes in handling and using Payment Terminals and on the acquirers’ request fill out Self-Assessment Questionnaires (‘SAQs’) prescribed by the Scheme Owners under applicable PCI DSS regulations to confirm such compliance.

11.7 Faulty, lost, stolen, or damaged/tampered Terminals

In the event of loss, theft, damage, tampering or destruction of a Payment Terminal, Merchant must inform Payter or distributor immediately, and in no event later than 24 hours after discovery of the incident, by sending an email to support@payter.com . The notification must provide a complete description of the details of the incident, summarize all efforts undertaken and planned to investigate the incident and secure the information and terminals at issue, and identify appropriate contacts at Merchant who will be reasonably available to Payter. In the event of a hardware failure, please contact Payters’ or the local distributor to obtain a Return Material Authorization (RMA) number. Merchant must ensure a central contact point manned by trained representatives of Merchant is made available for all end users of Payment Terminals to assist in performing the above tasks which such end users cannot perform themselves without assistance. Only such designated trained key representatives of Merchant may contact Payter or Distributor to receive support with respect to the Payment Terminals and the Services of Payter. For requesting support with respect to Payment Terminals such representative must use the current contact details to submit the support request by email or trouble ticketing tool, following the relevant procedures.

12.1 Model Name and Appearance

12.2 Product Type

The Apollo is a PIN Entry Device (PED) for payment processing in an unattended environment. It provides the ability to conduct contactless transactions. The PCI approval is only valid when using the device as described in this document.

12.3 Identification

Apollo

ApolloMax

12.3.2 Firmware

This document applies to any firmware version as per below.

13.2 Self-Test

The terminal contains a self-test cycle and will restart every 24 hours to perform this self-test. The device will perform the following tests:

• Authentication of all firmware
• Authentication of all application software
• Tests of cryptographic functions

13.3 Passwords and Certificates

All applications have to be signed by Payter following a review of the application, optionally an Acquirer can be issued its own application signing certificate but it is the acquirer’s responsibility to ensure a secure environment to generate the required RSA key pair and associated certificate signing request. Signing must then be performed as per [1] and [2].

13.4 Tamper Response

The device contains mechanisms to detect physical tampering. Any penetration of the device will trigger a tamper detection alarm and the device will delete all its operational key material. The device will immediately restart into an inactive mode and will display a security violation.

13.5 Privacy Shield

The Apollo is designed to be used in an unattended environment, integrated into a larger solution. To avoid disclosing the PIN code from intended or unintended observation the card holder needs to be made aware that they must prevent others from viewing the PIN during PIN entry. The payment application must display a message to notify the card holder to protect his PIN during entry. Such as: "Keep your PIN safe; block the keypad with a free hand or block the view using your body.”

Care must be taken with respect to any video recording equipment that may have a view of the device, such as CCTV or similar equipment that may be installed at the deployment location. The terminal should be placed such that the entered PIN is not visible from any such equipment. Refer to Apollo / ApolloMax Mechanical Integration Guide for details about installation requirements.

13.6 Patching and Updating

The terminal makes use of the Payter central software repository and can as such retrieve any updates it may require. Payter will take the initiative in informing customers if any updates are required.

13.7 Decommissioning

In order to permanently decommission a device all key material should be removed from the device. This can be accomplished by removing the 4 case screws on the back of the device and opening the case. Once assembled the device will boot into a tampered state.

14.2 Signing

The Apollo will only run applications that provide a signature created using a certificate that has been issued by the Payter Root certificate. Applications are signed using RSA 4096 for signature verification and SHA256 calculating data integrity hashes.

During signing a file is generated that contains the SHA256 hash of all the files in the application. This file is then signed using RSA 4096 and a file containing the signature using the Cryptographic Message Syntax is generated. Both the file containing hashes as the signature file are packed into the application, these are verified by Apollo upon starting the application, see [2] for more details. The signing process must be performed offline and under dual control using split knowledge.

14.3 Account-data Protection

The device supports DUKPT 2009 (TDES) and DUKPT 2017 (TDES and AES) for account data protection, the device supports pass-through of clear-text account data for authenticated applications. The device does not support turning off the SRED functionality.

14.4 Algorithms Supported

The device supports the following cryptographic algorithms

• TDES (112 bits and 168 bits)
• AES (128 bits)
• RSA (Signature Verification and Key Exchange 4096 bits)
• HMAC SHA256
• CMAC AES 128

14.5 Key Management

The device supports DUKPT as its key management technique, the technique uses a unique key per transactions as specified in [3] and [4]. The use of the POI with different key management systems will invalidate any PCI approval of this POI.

14.6 Key Loading

Key loading cannot be performed directly on the device, all key loading activities are performed over the air via an online key loading facility that is cryptographically bound to the terminal.

14.7 Key Table

14.8 References

1. Application Developer Guidance
2. Application Signing
3. ANS X9.24-1:2009, Retail Financial Services Symmetric Key Management Part 1: Using Symmetric Techniques
4. ANS X9.24 - 3: 2017, Retail Financial Services Symmetric Key Management Part 1: Unique Key Per Transaction
5. Apollo / ApolloMax Mechanical Integration Guide