Gasboy CFN III Fuel Management System PA-DSS - Manual (Page 15)

MDE-4870A CFN III Fuel Management System PA-DSS Implementation Guide Version 3.6 · June 2010 Page 11
Software Updates Maintenance and Troubleshooting
4 – Maintenance and Troubleshooting
Software Updates
The merchant is responsible for ensuring that all onsite updates to the CFN III are performed
by authorized personnel.
Merchant responsibilities for physical access to equipment are defined in PCI-DSS
requirement 9.
The integrity of software upgrades is guaranteed because only software created by Gasboy
will operate on the CFN III board set. Software created without the unique Gasboy
development system will typically fail checksum. However, in the event that the software
passes that check, the system will still not boot or operate.
CFN III does not support remote Software Updates.
Troubleshooting
Gathering Sensitive Data
CFN III does not require the collection of sensitive data for troubleshooting.
Sensitive information, such as Magnetic Stripe Data, Card Validation Codes, PINs, or PIN
Block Data must:
• Only be collected to solve a specific problem and the data must be limited to only what is
required to resolve the problem.
• Be stored in specific, known locations with limited access.
• Be encrypted while it is stored.
• Be securely deleted immediately upon resolving the issue.
Note: Sensitive information must not be transferred by e-mail.
Backup Password
CFN III supports a one-time backup password for use when the standard passwords have been
lost.
For obtaining and using the Backup password, refer to MDE-4871 CFN III Manager’s Manual
for Windows XP Embedded Version 3.6.