Table of Contents

• Title and Copyright Information
• Preface
• 1 Simphony Security Overview
  • Basic Security Considerations
  • Service-Oriented Architecture (SOA)
  • Simphony on Microsoft Windows with FIPS-mode Enabled
  • Authentication
    • Enterprise Management Console Authentication
    • Simphony Client Authentication
    • Point of Sale User Authentication
    • Running a Workstation Securely with Windows Standard Users
    • Database User Management
    • Oracle MICROS Hardware Support Account
    • Simphony Transaction Services Gen 2 Authentication
  • Understanding the Simphony Environment
  • Recommended Deployment Configurations
  • Operating System Security
  • Database Security
    • Oracle Database
    • Database Engine Not Present on Workstations (Windows-based Workstations only)
    • Database Engine Exists on Workstations (Windows-based Workstations only)
    • Database on Linux for MICROS Workstations
• 2 Performing a Secure Simphony Installation
  • Pre-Installation Configuration
  • Simphony Installation
  • Multi-Factor Authentication
  • Simphony MFA Configuration Prerequisite Requirement
  • Simphony MFA Configuration During the Installation of Simphony
  • Accessing the Simphony EMC Using MFA for the First Time
  • Assigning MFA EMC Access Privileges
  • Enrolling Users MFA Email Addresses and Passwords
  • Post-Installation Configuration
    • Operating System
    • Application
    • Database Platform
    • Passwords Overview
    • Changing Default Passwords
    • Encryption Keys
    • Integrity Keys
    • Changing Database Passwords
• 3 Implementing Simphony Security
  • Encryption
• 4 Appendix A: Simphony Port Numbers
  • Port Numbers
    • Enterprise Ports
    • Property Ports
    • Traffic Note
    • Interface Ports
    • iCare/Loyalty Ports
    • Oracle Component Ports
• 5 Appendix B: Key Manager
  • General Information
    • About the Simphony Encryption Key Manager Module
    • D-Secure Key Practices
    • Key Manager Security Enhancements
    • The Encryption Scheme
    • Operational Considerations
    • Periodic Key Rotation
    • Operating Conditions
      • Authorizations
      • Key Manager Module
      • Changing the Pass Phrase