Appendix. Teleflora Dove POS 5

The Dove POS 5 is a point-of-sale system designed specifically for florists. It is a comprehensive system that includes features such as order entry, inventory management, customer relationship management, and reporting. The system is easy to use and can be customized to meet the specific needs of your business.

PDF

Document

Teleflora Point of Sales

Appendix

PA-DSS Implementation Guide

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 20

Teleflora Point of Sales PA-DSS Implementation Guide

How to Purge Cardholder Data

PA-DSS 2.1.a

The process of implementation for purging credit cards sensitive information includes the following.

A Menu Item, Tools -> Support Tools -> Purge Credit Cards, is created to access the screen. Refer to the screen shot below.

Employees with Manager/Owner rights (role) only have access to the Menu Item, Tools -> Support

Tools -> Purge Credit Cards.

A form is developed to allow the user to specify the criteria date; all credit card sensitive information older than this date will be purged. Refer to the screen shot below.

The form also includes label that warns the user about losing the data permanently, if he proceeds with purging process. Refer to the screen shot below.

If user selects a criteria date which is less than 90 days in the past, a warning message is shown saying that the minimum criteria date should be at least 90 days in the past. Refer to the screen shot below.

Once user clicks OK button, a warning message is displayed to make sure that the user wants to proceed with the purging process. Refer to the screen shot below.

Once the user proceeds with the purging data, all the eligible credit cards sensitive information which is older than the specified date is purged.

An activity history item mentioning the purge process success is added to the system. Refer to the screen shot below.

User Interface – Menu Item, Tools -> Support Tools -> Purge Credit Cards

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 21

Teleflora Point of Sales

User Interface – Purge Credit Cards Screen

PA-DSS Implementation Guide

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 22

Teleflora Point of Sales PA-DSS Implementation Guide

Dove POS Connectivity Specifications

PA-DSS Executive Summary - Network Diagram

This information is made available for you to confirm incoming connections. Or, in the event that you are providing your own network security configurations, to apply appropriate firewall and modem blocking rules.

The Dove POS firewall device may use the following, modem dial-out capabilities:

PPP Connection to Teleflora dial-backup network.

All remote administration of the Dove POS application will occur via the “Administrator” user.

Your firewall device should be configured to deny all “inbound” internet traffic.

The Dove POS application uses a service located on the server to handle workstation communications using WSE 2.0. The server listens on the following inbound “IP ports” for “Local Area Network”

(LAN) traffic.

Ports:

TCP Port 5050 (Server Service)

TCP Port 8514 (CMC)

TCP Port 1433 (SQL Server)

TCP Port 1434 (SQL Browser Service)

The Dove POS application server requires outbound internet connections to the following destination IP

Ports:

TCP Port 80 (HTTP)

TCP Port 443 (SSL / HTTPS)

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 23

Teleflora Point of Sales PA-DSS Implementation Guide

How to update your Dove POS Server’s Operating System

PA-DSS 10.1

PCI 6.1

Your Dove POS server must be up-to-date with security bulletins. Following are instructions for performing a manual OS update.

Windows XP

Start | Settings | Control Panel | Automatic Updates

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 24

Teleflora Point of Sales PA-DSS Implementation Guide

Select “Automatic”

Update “Every day”, and choose a time during which you know the computer will usually be turned on

(e.g. 2:00 pm)

Click “OK”.

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 25

Teleflora Point of Sales PA-DSS Implementation Guide

How to Update your Dove POS Software (Install Media)

PA-DSS 10.1

Complete this upgrade on the Server before upgrading the workstations. Make sure all the workstations are shut down while upgrading the Server.

NOTE: Make sure there are no other programs running while completing the upgrade. Make sure that this procedure is completed using Administrator access to the computer.

You should be able to simply insert the disk and start the upgrade. But the patch installation will require you to stop the services so please read the Patch Instructions carefully.

Insert the Dove POS Install/Upgrade DVD into the CD/DVD-ROM drive of the computer you are upgrading. If the disk does not auto run, right-click the My Computer icon on the desktop, select

Explore and double-click the CD/DVD-ROM icon. The DovePOS Upgrade Wizard will automatically start.

NOTE: In the above (and following) graphic, “X.X.XXX” represents the build number for the current installed version.

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 26

Teleflora Point of Sales

Press Next to continue. Next you will see the license agreement.

PA-DSS Implementation Guide

Select the "I agree to the terms above" option and press Next. Progress screens will appear while the upgrade is being completed. NOTE: Do NOT attempt to stop this process.

NOTE: In the above graphic, “X.X.XXX” represents the build number for this upgrade.

Press Finish to complete the upgrade.

NOTE: This upgrade must be completed on all terminals before the application is restarted.

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 27

Teleflora Point of Sales PA-DSS Implementation Guide

How to Enable the Customer Service Access using GoToAssist

PA-DSS 10.1

PA-DSS 11.3.b

Dove POS Customer Support is only able to assist you if you enable access via the “GoToAssist” system. By default, GoToAssist access is not available to support representatives. Following are detailed instructions for allowing Teleflora Customer Support to assist you via the GoToAssist system.

Below are instructions for using GoToAssist.

Open your browser, and go to http://www.myteleflora.com/gotoassist.aspx

Enter their Store Name and the Code you receive from the support technican and click Click Here.

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 28

Teleflora Point of Sales PA-DSS Implementation Guide

To close the remote control session, simply close the GoToAssist window and click Yes to confirm exit.

Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 29

Key features

Order entry and processing
Inventory management
Customer relationship management
Reporting and analytics
Integration with Teleflora network
PCI DSS compliance
Secure data encryption
Remote administration capabilities

Frequently asked questions

PA-DSS stands for Payment Application Data Security Standards. It is a set of security standards developed by the Payment Card Industry Security Standards Council (PCI SSC) to protect cardholder data. Compliance with PA-DSS is a requirement for all merchants who accept credit card payments.

Use the Purge Cardholder Data tool located in the Tools > Support Tools menu. This tool will purge data older than your specified retention period.

Insert the Dove POS Install/Upgrade DVD into your computer's CD/DVD-ROM drive. The DovePOS Upgrade Wizard will automatically start and guide you through the update process.

User questions

Patricia I.

What are the data handling requirements for credit card information?

The document emphasizes PCI DSS compliance for merchants processing credit card payments, detailing the definition of 'Cardholder Information'. It provides guidelines on encrypting data, managing encryption keys, securely transmitting data over networks, purging data from the database, securing legacy systems and user authentication and password management for protecting cardholder data.

Patricia I.

What information is provided about payment processors and payment gateways?

While 'payment gateway' and 'processor' aren't explicitly detailed, the document discusses related concepts such as credit card processing, data encryption, secure data transmission. Elavon is mentioned as a network interface for transmitting credit card information, facilitating the secure transmission of credit card swipes, PANs, CVV, and debit PIN blocks, using SSL encryption.