Teleflora Point of Sales PA-DSS Implementation Guide
How to Setup Teleflora’s “Goto My PC Corporate” On Your Dove POS
System
When Managed Services is notified that you have purchased remote access, a Managed
Services technician will perform initial customer setup in the GoToMyPC portal. An email will then be sent to the your email address.
Follow the steps below to configure the Host machine for remote access.
Setting up the Host
1. The customer will need to access their email account from the PC they wish to
control and look for the email sent from GoToMyPC.
2. Login to PC as “Owner” account.
3. Inside, it will have the activation link they will need to click.
4. The customer will need to fill out the information and set their password. a. Note: Password MUST be 8 characters or more and contain both letters and numbers.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 30
Teleflora Point of Sales PA-DSS Implementation Guide
5. Install the GoToMyPC client.
6. Click Download
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 31
Teleflora Point of Sales
7. Click Run on the download dialog box.
PA-DSS Implementation Guide
8. Wait for the progress bar to finish.
9. Click Run on the Installation box.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 32
Teleflora Point of Sales
10. Click Next on the GoToMyPC Installer.
PA-DSS Implementation Guide
11. Choose No or leave as default when asked to choose to restart. a. Click Finish.
12. Authenticate on the machine to be “remote controlled”. a. Enter the email address the account was setup with. b. Enter the password the customer setup previously.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 33
Teleflora Point of Sales PA-DSS Implementation Guide
13. Computer setup a. Enter a Nickname for the computer. This should describe “where or what” this computer is so it can be easily identifiable in the future. b. Enter an Access Code. This code should be different from the password setup previously and only known to the customer. Teleflora will not ever ask you for this password. c. Click OK.
14. Click Next.
15. A dialog box with 2 pieces of information will open. This information needs to be given to the
MSG team to complete setup. a. MAC Address: Ex: 00-0C-29-EE-7C-C9 b. C: Drive Serial Number: Ex: ECBA-9670
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 34
Teleflora Point of Sales PA-DSS Implementation Guide
16. Send an email with the following information to Managed Services at [email protected]
: a. Shop code b. Customers email address c. MAC address and C: drive serial number from step 15.
17. Once the requested information has been received by the MSG team, we will activate the host machine. An email will then be sent to the customer’s email address with instructions on how to setup the client machine that they wish to use for accessing the host machine.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 35
Teleflora Point of Sales PA-DSS Implementation Guide
How to Add a Non-Administrative Windows User Account
PA-DSS 3.1
1. Log on to your computer as “Florist” (Florist has administrative privileges). Click Start, and then click Control Panel.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 36
Teleflora Point of Sales
2. Under Pick a category, click User Accounts.
PA-DSS Implementation Guide
3. Under Pick a task, click Create a new account.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 37
Teleflora Point of Sales PA-DSS Implementation Guide
4. In the User Accounts wizard, on the Name the new account page, type the name for the user. You can use the person's full name, first name, or a nickname. Then click Next.
5. The User Accounts wizard displays the Pick an account type page. Click Limited, and then click
Create Account.
6. To create another account, return to step 3.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 38
Teleflora Point of Sales PA-DSS Implementation Guide
How to Add an Administrative Windows User Account
PA-DSS 3.1
1. Log on to your computer as “Florist” (Florist has administrative privileges). Click Start, and then click Control Panel.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 39
Teleflora Point of Sales
2. Under Pick a category, click User Accounts.
PA-DSS Implementation Guide
3. Under Pick a task, click Create a new account.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 40
Teleflora Point of Sales PA-DSS Implementation Guide
4. In the User Accounts wizard, on the Name the new account page, type the name for the user. You can use the person's full name, first name, or a nickname. Then click Next.
5. The User Accounts wizard displays the Pick an account type page. Click Computer Administrator, and then click Create Account.
6. To create another account, return to step 3.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 41
Teleflora Point of Sales PA-DSS Implementation Guide
How to Remove a Windows Administrative User Account
PA-DSS 3.1
PCI 8.5.4
PCI 8.5.5
1. Log on to your computer as “Florist” (Florist has administrative privileges). Click Start, and then click Control Panel.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 42
Teleflora Point of Sales
2. Under Pick a category, click User Accounts.
PA-DSS Implementation Guide
3. Under Pick a task, click Change an account.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 43
Teleflora Point of Sales PA-DSS Implementation Guide
4. Under Pick an account to change, click the name of the account you want to delete.
5. Click on Delete the account.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 44
Teleflora Point of Sales
6. Click on the Delete Files button.
PA-DSS Implementation Guide
7. Click the Delete Account button.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 45
Teleflora Point of Sales PA-DSS Implementation Guide
How to Remove a Windows Non-Administrative User Account
PA-DSS 3.1
PCI 8.5.4
PCI 8.5.5
1. Log on to your computer as “Florist” (Florist has administrative privileges). Click Start, and then click Control Panel.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 46
Teleflora Point of Sales
2. Under Pick a category, click User Accounts.
PA-DSS Implementation Guide
3. Under Pick a task, click Change an account.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 47
Teleflora Point of Sales PA-DSS Implementation Guide
4. Under Pick an account to change, click the name of the account you want to delete.
5. Click on Delete the account.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 48
Teleflora Point of Sales
6. Click on the Delete Files button.
PA-DSS Implementation Guide
7. Click the Delete Account button.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 49
Teleflora Point of Sales PA-DSS Implementation Guide
How to Add/Remove a Dove POS User Account
PA-DSS 3.1
PCI 8.5.4
PCI 8.5.5
To add an Employee:
1. Access the screen a. Select My Shop from the left-hand navigation menu. The My Shop screen appears. b. Select Employee Setup. The Employee Setup screen appears. This screen lists any employees you have already setup in your system. c. Click the Add New button at the bottom of the Employee Setup Screen.
Or
Select Tools > Employee Setup from the Menu at the top of the screen.
The Add/Modify Employee screen appears.
2. Enter Employee Information.
3. Set up Employee Security:
Dove POS contains 4 security groups. Each group is setup with pre-defined security roles. The level of access a user has in the system is determined by the user group they are associated with.
To set a user's security level, select a checkbox in the Employee Security section. Options are:
Manager/Owner - This is the highest security level and allows access to all areas of the system.
Bookkeeper - This setting is similar to Manager/Owner, except the bookkeeper does not have access to all the System Maintenance screens.
Sales Clerk - This setting has limited or no access to the System Maintenance screens.
Restricted Sales Clerk - This setting has access to the order-related screens only.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 50
Teleflora Point of Sales PA-DSS Implementation Guide
4. Complete the Process:
You have several options when you have completed entering information on the screen. You can:
Save the Profile and Open a New Screen - To save the new employee profile and open a blank
Add/Modify Employee screen, click the Save and New button.
Save the Profile and Close the Screen - To save the new employee profile and close the Add/Modify
Employee screen, click the Save and Close button.
Close the Screen without Saving - To close the screen without saving your changes, click the Close button.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 51
Teleflora Point of Sales PA-DSS Implementation Guide
How to Securely “Wipe” a Hard Drive
PA-DSS 1.4.a
PA-DSS 1.5.c
This document specifies how to securely wipe a hard disk. You would need to do this in a number of events:
• You are retiring a computer which, at some point in time, contained, or otherwise processed, sensitive cardholder data.
• You are installing the Dove POS on a computer which, in the past, was used for other purposes.
• Your Dove POS Server or workstation has experienced a security compromise.
WARNING:
This process permanently formats your hard disk, there is no “undelete”. It is advised that you consult with Teleflora customer service, prior to removing files, to ensure you are following proper, up-to-date procedures.
See:
Appendix: Using the Eraser Tool.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 52
Teleflora Point of Sales PA-DSS Implementation Guide
How to Change your Dove POS Data Encryption Key
PA-DSS 1.5
PCI DSS 3.6
PCI DSS 8.5
The DovePOS Key Rotation Utility is an application provided by Teleflora to rotate the data encryption keys for you. The DovePOS Key Rotation Utility is located in the Dove POS Server directory.
This Utility can only be executed by a Windows Administrator. Widows will display an error if you are not logged in as an administrator.
1. Launch DovePOS Key Rotation Utility and click on Next.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 53
Teleflora Point of Sales PA-DSS Implementation Guide
2. Click Yes to continue with the key rotation.
3. Click Finish to close the application.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 54
Teleflora Point of Sales PA-DSS Implementation Guide
How to Create a “Strong” Password
PCI 8.5
PCI DSS gives specifications as to password strengths required. Following are relevant PCI DSS specifications, as well as some techniques you may use to help generate random passwords.
A PA-DSS compliant password must meet all of the following requirements. Note that you are responsible for ensuring that you use a compliant password:
Minimum of 7 characters long (PCI 8.5.10)
Contains both least numeric and alphabetic characters (PCI 8.5.11)
Different from one of the last four passwords you have used in the past. (PCI 8.5.12)
Password Generator
Password Generator is an application provided with DovePOS to assist you in generating secure passwords. Password Generator is located in the Dove POS Terminal directory.
By default Special Characters, Numeric, and Alpha upper and lower case settings are enabled. And, the password length is set to seven characters long.
To modify the complexity settings of the password:
Click on Configure.
Select or deselect Special Characters and/or Numeric.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 55
Teleflora Point of Sales
Click on Alpha
Select or deselect Lower and/or Upper Case characters.
PA-DSS Implementation Guide
Click on Password length.
Select the desired password length.
To create password:
Click Generate.
To select a different password click generate again.
Clicking the Copy button puts the password on the clipboard.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 56
Teleflora Point of Sales PA-DSS Implementation Guide
How to Verify Password Policies in Windows XP
PCI 8.5
PCI 8.5.x specify a number of password complexity rules which must be in place. Following is how to verify those settings are in place on your windows computer(s).
Start | Run |cmd.exe”
From the “C:” prompt:
Net accounts
Look for:
• “Maximum Password Age” of 90 days or less
• “Minimum Password Length” of 7 or greater
• “Length of Password History” of 4 or greater.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 57
Teleflora Point of Sales PA-DSS Implementation Guide
How to set a Screensaver Lock in Windows XP
PA-DSS 3.1
PCI 8.5.15
In order to be compliant with PA-DSS requirements, each workstation with access to the Dove POS server must have a “locking” screensaver set. The Screensaver must “lock” (thus, require a password to unlock) after fifteen minutes of inactivity.
To ensure that a Screensaver lock is established, do as follows:
1. Log into Windows computer.
2. Right-click the desktop
3. Select the “Screen Saver” tab
4. Put “15” (or less that 15) in the “Wait xx minutes” box.
5. Check the “On resume, password protect” box.
6. Click “OK” button.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 58
Teleflora Point of Sales PA-DSS Implementation Guide
How to Disable Debug Logging
Addresses:
PA-DSS 4.2.b
Your Dove POS system logs various communications information pertaining to credit card transactions at configured or above log level in the hierarchy. The various log levels, in the increasing order of hierarchy, are “Debug”, “Info”, “Warn” and “Error”. It is possible to change the log level through configuration file so that the system logs information at that or above level. Please note, completely disabling logging on your Dove POS may render your system out of PCI compliance; do not disable
Dove POS logging Capabilities.
Following is the procedure you may follow to turn off debug/info logging.
WARNING:
You must take great care while editing configuration files manually. If an error is caused in the configuration file, Dove POS system may not function properly.
For Dove POS Terminal application,
Using Notepad, open logger configuration file located at;
C:\Program Files\Teleflora\Terminal\DovePOSLogging.config
Locate the logger section with the name as “DovePOS”.
To disable debug/info logging, change the “level” element “value” to either “Warn” or “Error” (refer to the figure below).
Save and close the file.
For Dove POS Server application,
Using Notepad, open logger configuration file located at:
C:\Program Files\Teleflora\Server\DovePOSLogging.config
Locate the logger section with the name as “Teleflora.TFO.POS.Server.App”.
To disable debug/info logging, change the “level” element “value” to either “Warn” or “Error” (refer to the figure below).
Save and close the file.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 59
Teleflora Point of Sales PA-DSS Implementation Guide
For Dove POS Scheduler application,
Using Notepad, open logger configuration file located at:
C:\Program Files\Teleflora\Server\DovePOSLogging.config
Locate the logger section with the name as “Teleflora.TFO.POS.Scheduler.App”.
To disable debug/info logging, change the “level” element “value” to either “Warn” or “Error” (refer to the figure below).
Save and close the file.
For Dove POS CMC Host application,
Using Notepad, open logger configuration file located at:
C:\Program Files\Teleflora\Server\DovePOSLogging.config
Locate the logger section with the name as “CMCHost”.
To disable debug/info logging, change the “level” element “value” to either “Warn” or “Error” (refer to the picture below).
Save and close the file.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 60
Teleflora Point of Sales PA-DSS Implementation Guide
For Dove POS Support Tool application,
Using Notepad, open logger configuration file located at;
C:\Program Files\Teleflora\Server\DovePOSLogging.config
Locate the logger section with the name as “DoveSupportTool”.
To disable debug/info logging, change the “level” element “value” to either “Warn” or “Error” (refer to the picture below).
Save and close the file.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 61
Teleflora Point of Sales PA-DSS Implementation Guide
How to Remove Log Files
Addresses:
PA-DSS 1.1.6
Dove POS system uses database and Windows application event log to log events. The database table used to record log events is TU_ActivityLog. Typically, the Windows application event log file is located at C:\Windows\system32\config\AppEvent.Evt.
The information written to the Windows event log and database is valuable in troubleshooting many issues which you may experience in your use of the application. Though Dove POS has been carefully written to never log accountholder’s sensitive data in these logged information, in the event of either unforeseen bugs or the need for “special case” logging, accountholder’s sensitive data could be contained within these logged information.
Remove Dove POS Logging – Windows Event Log
Following is the process you may follow to clear-off (securely over-write) all log events in Windows application event log.
WARNING:
You cannot retrieve records from a cleared event log using an undelete tool.
For details, refer to the information at the following link. http://www.microsoft.com/technet/scriptcenter/guide/sas_log_pcna.mspx?mfr=true
Process:
Log in to your Dove POS Terminal/Server as an administrative account.
Click the Start button.
Click Control Panel.
Click Administrative Tools.
Double-click Event Viewer.
Right click on the Application in the left pane of the Event Viewer.
Click on Clear all Events. You will be asked “Do you want to save “Application” before clearing it?”
Click “No” to clear-off all the events, without saving.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 62
Teleflora Point of Sales PA-DSS Implementation Guide
Setup / Configure the Netgear FVS338 Firewall
To access the router control panel:
1. Open Internet Explorer
2. Enter 192.168.1.1 in for the address. The router login page should display.
3. Enter the admin user name and password. The default user name/password is:
User Name: admin
Password: password
Step 1: Configure the Broadband ISP
1. Does the internet connection require a login?
(a.) If you selected “No” then scroll down and set the IP addresses if necessary; if not, then press
“Apply” and proceed to next step.
(b.) If you selected “Yes” then fill in the ISP information as appropriate. If no “Account Name” was specified by the ISP, then use the same information in this blank as the "Login" blank (copy
& paste works well). Next, scroll down and set the IP address.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 63
Teleflora Point of Sales
Step 3: Set the Password
PA-DSS Implementation Guide
1. In the top menu bar, click "Administration"
2. In the sub menu bar, click "Set Password"
3. The default Old Full Access password is "password". The New Full Access Password must be generated using alphanumeric codes with substitution. The password must be ALL CAPITAL
LETTERS Use the first 4 letters of the state followed by the last 5 of the shop code to generate the base password, then use the substitution chart to change the letters and numbers to the final password.
4. Change the guest password from "password" to "T3l3fl0r4".
5. Click “Apply” to complete the change
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 64
Teleflora Point of Sales
Step 4: The Dialup Connection
1. Go to Network Configuration > WAN Settings > Dial-up ISP Settings
PA-DSS Implementation Guide
A. Account / User Name: SHOPCODE ex: 00070750
B. Password: TWS Password (Same one you use in DovePOS setup)
C. Telephone: 1.800-443-3597 (Remember to input 9 if you need to get an outside line)
D. Set the Serial Line Speed to 57600.
E. Select U.S. Robotics FAX PnP, from the Modem Type Dropdown box.
F. Leave everything else as defaults, click Apply.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 65
Teleflora Point of Sales
Step 5: WAN Mode
Click Network configuration > Wan Settings
PA-DSS Implementation Guide
A. Port Mode: Primary Broadband with Dial up as Backup
B. WAN Failure Detection Method: Failover after 4 failures (Default is 2 change it)
C: Click Apply
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 66
Teleflora Point of Sales
Step 6: Remote Management
PA-DSS Implementation Guide
1. In the top menu bar, click "Administration".
2. In the sub menu bar, click "Remote Management".
3. Check the "Yes" button under "Allow Remote Management".
4. Click "Apply" to complete the change.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 67
Teleflora Point of Sales
Step 7: Groups and Hosts
PA-DSS Implementation Guide
Note: In this section, it is necessary to configure the FVS338 based on how the NICS have been configured. All network cards connected to the FVS338 should be auto-detected on this screen. If not, press “Refresh”. If all adapters still do not show, check the NIC's for functionality.
1. In the top menu bar, select "Network Configuration".
2. Using the drop down menu under "IP Address Type", select "Reserved". a. Reserved – The NIC will be given the same IP via DHCP with each renewal, based on its
MAC Address b. Fixed – You have set the address statically for the NIC. (This removes that address from the
DHCP scope, avoiding potential IP address conflicts.)
3. Select "Reserved".
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 68
Teleflora Point of Sales
Step 8: Block Sites
PA-DSS Implementation Guide
1. In the top menu bar, select "Security".
2. In the sub menu bar, select "Blocked Sites".
3. Leave all settings at default.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 69
Teleflora Point of Sales
Step 9: Rules
PA-DSS Implementation Guide
1. In the top menu bar, select "Security".
2. In the sub menu bar, select "Firewall Rules".
3. Click the tab labeled "Attack Checks".
4. Under the "WAN Security Checks" column, uncheck all rules but “Enable Stealth Mode”. This reduces unfortunate instances where the FVS338 thinks it is being hacked due to high traffic volume
(ex: DovePOS on Mother’s Day) and shuts down the WAN connection
5. Under the VPN Pass through column, enable all three options (IPsec, PPTP, and L2PT).
6. Click on Apply.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 70
Teleflora Point of Sales
Step 10: Schedule
PA-DSS Implementation Guide
1. In the top menu bar, select "Security".
2. In the sub menu bar, select "Schedule".
3. Ensure that 'All Days" is selected unless the shop owner specifies a schedule for workstation internet access.
4. Click "Apply" when finished.
Note: These settings are important for instances where logs must be examined. Time is always a factor.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 71
Teleflora Point of Sales
Step 11: Time Zone
PA-DSS Implementation Guide
1. In the "Date/Time" Box, select the correct time zone.
2. Check "Automatically Adjust for Daylight Savings", (unless you happen to be in one of the two areas of the USA that doesn't follow Daylight Savings Time).
3. Ensure that "Use Default NTP Servers" is selected.
4. Click "Apply" when finished.
Note: These settings are important for instances where the logs must be examined.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 72
Teleflora Point of Sales
Step 12: Logs & Email
PA-DSS Implementation Guide
1. In the top menu bar, select "Monitoring".
2. In the sub menu bar, select "Firewall Logs & E-mail".
3. Enable all logging inclusions, except “Allow Policies”. This is helpful in getting the right information into the logs so technicians can better assist the florist should problems arise.
3. Click "Apply" when finished.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 73
Teleflora Point of Sales
Step 13: Settings Backup
PA-DSS Implementation Guide
Saving the Netgear FVS338 Router Configuration
1. In the top menu bar, select "Administration".
2. In the sub menu bar, select "Settings Backup & Upgrade".
3. Click the "Backup" button.
4. Save the file to the "E:\Hardware\NetGear" folder.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 74
Teleflora Point of Sales PA-DSS Implementation Guide
Step 14: Online Port Test
1. Go to https://www.grc.com/x/ne.dll?bh0bkyd2
2. Click on the "Proceed" button, at the bottom of the screen.
3. Click the button labeled "All Service Ports" this will run a test to determine which ports are open to the Internet.
4. All ports should show up green.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 75
Teleflora Point of Sales PA-DSS Implementation Guide
Using the Eraser Tool
PA-DSS 1.4.a
PA-DSS 1.5.c
There are multiple ways to use the Erase application to securely delete your files. For advanced options or detailed instruction on how to completely wipe a hard drive refer to the Erase application’s help file.
Below is the most basic instruction on how to delete files using this tool.
1. Using Windows Explorer navigate to the file(s) you wish to erase.
2. Right Click on the file; on the pop-up menu select Erase.
3. Click on Yes to delete the file; click no to cancel.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 76
Teleflora Point of Sales PA-DSS Implementation Guide
4. Once the erase process begins you have one last opportunity to cancel the deletion of the file by clicking the Stop button in the progress screen.
5. When the deletion is complete you are given the opportunity to save the deletion report. Click on
Save as to save the report. Click Close to exit the application.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 77
Teleflora Point of Sales PA-DSS Implementation Guide
Dove POS Application Summary
PA-DSS Executive Summary
Software Vendor
Teleflora Contact Information:
Teleflora Mailing Address
Product Name
Product Version
Recommended OS:
Traditional Marketplace:
Teleflora
Dove POS
5
Windows XP Professional
Retail Florist
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 78
Teleflora Point of Sales PA-DSS Implementation Guide
Typical Dove POS Network Topology
PA-DSS Executive Summary
A typical Dove POS shop consists of one store with two or three “terminals”, a network printer, a Dove
POS “server”, and a Firewall to the internet.
Larger implementations may have multiple, physical locations, all interconnected via a VPN. In all cases, Dove POS “Terminals” are used to take purchases, and there is only a single Dove POS “Server” computer.
Dove POS Server
A Dell server running windows. Houses core database of the application. The central point for communications between Terminals and external entities (such as the Dove Network and Elavon). There is only ever one of these servers in a Dove POS “environment”.
Dove POS Terminal
Windows PC running Dove POS software in “Client” mode. “Client” software offers minimal data storage, and connects to the Dove POS “Server” for all data communications and data storage. The Dove
POS terminal is where a “sale” is taken at. Thus, magnetic stripe data, PANs, CVV and pin blocks almost always originate from these computers.
In the case of small shops, both the “Dove POS Server” and “Dove POS Terminal” will reside on the same computer.
Printer
Small business class network printer, usually one per location.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 79
Teleflora Point of Sales PA-DSS Implementation Guide
Firewall
Firewall with built-in VPN and LAN (switch) capabilities. Used to block traffic into and out of each shop, as well as establish VPN connections. One firewall per location. This firewall resides between the
Dove POS LAN and either a “DSL Modem” or “Cable Modem”.
GoToAssist Third party website which Teleflora Customer Service (and the customer) use to establish a remote support session. Customer must initiate these encrypted / password protected sessions. File transfers are possible between Customer network and Teleflora Customer Support.
Dove Network
Teleflora’s set of web services. CC magnetic stripe data, PANs, CVV, and Debit pin blocks all may be transmitted from the Dove POS Server, to the Dove Network via an authenticated, SSL encrypted link.
Only PANs may be transmitted from the Dove Network back to the Dove POS Server. Only Dove POS
Servers communicate with the Dove Network.
Elavon
Elavon “SSL @dvantage” network interface. CC Swipes, PANs, CVV and Debit pin blocks all are transmitted from the Dove POS Server, via an SSL encrypted connection. No CC information is transmitted from Elavon, to the Dove POS server.
Dove_POS_PA-DSS_Implementation_Guide_v1.3.doc – 2011-11-11 Page 80
