Securing Communication to EPS Devices by Importing Trusted Certificates

Some EFTLink cores support trusted connections to EPS devices and require a truststore containing the trusted device certificates. Refer to the Oracle Retail EFTLink Core Configuration Guide for the applicable EFTLink cores to determine whether a truststore is required and how it should be configured.

To facilitate truststore creation, EFTLink includes the following scripts:

truststore.bat script for windows environments
truststore.sh script for Linux environments

Refer to PSP vendor documentation for details on obtaining the required EPS device certificate.

From a terminal, run the appropriae truststore script file to import the trusted EPS device certificate chain.

truststore.bat -i <alias> <certificate file>

truststore.sh -i <alias> <certificate file>

For example: truststore.bat -i providername provider_trusted_public_cert.crt
Repeat step 1 for every public trusted certificate or part of the chain that need to be imported.

Table 2-5 Import of Trusted Certificate Parameters

Switch	Parameter	Description	Supported Value
-i	<alias>	Alias for the certificate.	Alphanumeric, must be unique for every imported certificate.
<certificate file>	Public trusted certificate file.	EPS device security certificate chain in PEM format. Consult the payment provider’s instructions to obtain the correct certificate used by the trusted EPS device for production or test environment.

Switch

Parameter

Description

Supported Value

-i

<alias>

Alias for the certificate.

Alphanumeric, must be unique for every imported certificate.

Public trusted certificate file.

EPS device security certificate chain in PEM format.

Consult the payment provider’s instructions to obtain the correct certificate used by the trusted EPS device for production or test environment.

When the first trusted certificate is imported, the following files are created in the EFTLink keys subdirectory:

eftlink.truststore.p12 - the truststore containing the imported trusted certificates. This file must remain on the EFTLink server.

eftlink.truststore.properties - the truststore configuration file. This file must remain on the EFTLink server.

To display a list of all certificates currently imported into the truststore, run:

truststore.bat -l or truststore.sh -l

To remove a certificate from the truststore, run:

truststore.bat -d <alias> or truststore.sh -d <alias>

To display the contents of a certificate file, run:

truststore.bat -p <certificate_file>.crt