Customer Remote Access. Teleflora Dove POS 5

The Dove POS 5 is a point-of-sale system designed specifically for florists. It is a comprehensive system that includes features such as order entry, inventory management, customer relationship management, and reporting. The system is easy to use and can be customized to meet the specific needs of your business.

PDF

Document

Teleflora Point of Sales PA-DSS Implementation Guide

Customer Remote Access

11.3 Remote access – Teleflora does not recommend the use of any type of remote access into the shop except the usage of GoToAssist. If a shop installs remote access then the florist must use a technology that meets PCI-DSS sections relating to connectivity including :

PCI-DSS V1.1

8.3 Implement two-factor authentication for remote access to the network by employees, administrators, and third parties. Use technologies such as remote authentication and dial-in service (RADIUS) or terminal access controller access control system (TACACS) with tokens; or

VPN (based on SSL/TLS or IPSEC) with individual certificates.

8.4 Encrypt all passwords during transmission and storage on all system components.

8.5 Ensure proper user authentication and password management for non-consumer users and administrators on all system components as follows:

8.5.1 Control addition, deletion, and modification of user IDs, credentials, and other identifier objects

8.5.2 Verify user identity before performing password resets

8.5.3 Set first-time passwords to a unique value for each user and change immediately after the first use

8.5.4 Immediately revoke access for any terminated users

8.5.5 Remove inactive user accounts at least every 90 days

8.5.6 Enable accounts used by vendors for remote maintenance only during the time period needed

8.5.7 Communicate password procedures and policies to all users who have access to cardholder data

8.5.8 Do not use group, shared, or generic accounts and passwords

8.5.9 Change user passwords at least every 90 days

8.5.10 Require a minimum password length of at least seven characters

8.5.11 Use passwords containing both numeric and alphabetic characters

8.5.12 Do not allow an individual to submit a new password that is the same as any of the last four passwords he or she has used

8.5.13 Limit repeated access attempts by locking out the user ID after not more than six attempts

8.5.14 Set the lockout duration to thirty minutes or until administrator enables the user ID

8.5.15 If a session has been idle for more than 15 minutes, require the user to re-enter the password to re-activate the terminal

8.5.16 Authenticate all access to any database containing cardholder data. This includes access by applications, administrators, and all other users.

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 17

Key features

Order entry and processing
Inventory management
Customer relationship management
Reporting and analytics
Integration with Teleflora network
PCI DSS compliance
Secure data encryption
Remote administration capabilities

Frequently asked questions

PA-DSS stands for Payment Application Data Security Standards. It is a set of security standards developed by the Payment Card Industry Security Standards Council (PCI SSC) to protect cardholder data. Compliance with PA-DSS is a requirement for all merchants who accept credit card payments.

Use the Purge Cardholder Data tool located in the Tools > Support Tools menu. This tool will purge data older than your specified retention period.

Insert the Dove POS Install/Upgrade DVD into your computer's CD/DVD-ROM drive. The DovePOS Upgrade Wizard will automatically start and guide you through the update process.

User questions

Patricia I.

What are the data handling requirements for credit card information?

The document emphasizes PCI DSS compliance for merchants processing credit card payments, detailing the definition of 'Cardholder Information'. It provides guidelines on encrypting data, managing encryption keys, securely transmitting data over networks, purging data from the database, securing legacy systems and user authentication and password management for protecting cardholder data.

Patricia I.

What information is provided about payment processors and payment gateways?

While 'payment gateway' and 'processor' aren't explicitly detailed, the document discusses related concepts such as credit card processing, data encryption, secure data transmission. Elavon is mentioned as a network interface for transmitting credit card information, facilitating the secure transmission of credit card swipes, PANs, CVV, and debit PIN blocks, using SSL encryption.