3-DeS Fix NCR Install-User Manual 12-02-05 (1)

“Your ATM Solutions Provider”

3 DES FixInstallation

&User Manual

NCR

Page 1 of 47

Page 2 of 47

Edition

October, 2005

Copyright Notice

The material in this document is the intellectual property of Pi Systems International, LP. We take care in the preparation of this document, but no guarantee is given as to the correctness of its contents. Our products are under continual improvement and we reserve the right to make changes without notice.

Trademarks

All trademarks used in this manual are the properties of their respective owners.

Diebold is a registered trademark of Diebold, Inc.NCR is a registered trademark of National Cash Register, Inc.Fujitsu is a registered trademark of Fujitsu Transaction Solutions, Inc.

Page 3 of 47

3 DES Fix TABLE OF CONTENTS

Typical Communication Diagram............................................................................................43 DES Fix Communication Diagram........................................................................................53 DES Fix Control Module 2....................................................................................................6Machine Specific Section..........................................................................................................7Instructions to perform Software Version Update on the control module...............................73 DES Fix Item Check List for NCR ATMs............................................................................83 DES Fix NCR Encrypting Pinpad........................................................................................93 DES Fix NCR 50xx Interface Board.....................................................................................93 DES Fix NCR 56xx/58xx Interface Board..........................................................................10Hi BAPE Board Connection Reference for 3 DES Fix..........................................................11Installation on NCR 5070.......................................................................................................14Installation on NCR 5084.......................................................................................................15Installation on NCR 5085.......................................................................................................17Installation on NCR 5088.......................................................................................................18Installation on NCR 5670.......................................................................................................19Installation on NCR 5674/75..................................................................................................21Installation on NCR 5674/75 With VAULT BAPE...............................................................22Installation on NCR 5684 & 5685..........................................................................................23Installation on NCR 5684 & 5685 with VAULT BAPE........................................................24Installation on NCR 5688.......................................................................................................25Installation on NCR 5688 with VAULT BAPE.....................................................................26Installation on NCR 5840.......................................................................................................27Installation on NCR 5890.......................................................................................................283 DES Fix Configuration........................................................................................................29

Your new 3 DES Fix EPP...................................................................................................32Master Key Security Measures...........................................................................................33Master Key Entry Instructions............................................................................................34Single DES vs. Triple DES.................................................................................................39Pass Thru Procedure......................................................................................................39For Single DES Encryption in EPP (NOT PASS THRU MODE).............................................39

Technical Appendices..............................................................................................................403 DES Fix Technical Support.................................................................................................40Software Version Update Instructions....................................................................................413 DES Fix Messages Displayed on ATM Monitor.................................................................41Operator Action/ Intervention................................................................................................423 DES Fix Configuration Menu Options................................................................................433 DES Fix Control Module Error Code Definition List.........................................................44Diagnostic Key Codes for 3 DES Fix VISA EPP for 56xx....................................................45Diagnostic Key Codes for 3 DES Fix VISA EPP for 50xx....................................................46

Page 4 of 47

Typical Communication Diagram

Page 5 of 47

TELCO - 2 wire Dialup, 4 wire

Dedicated Line, CDPD, Frame Relay

etc.

MODEM

DCE25 Pin Female

25 Pin Male

Comm. Cable

25 Pin Male

25 Pin Female

ATM/DTE

Welcome

Cust.Kybd

3 DES Fix Communication Diagram

Page 6 of 47

TELCO - 2 wire Dialup, 4 wire

Dedicated Line, CDPD, Frame

Relay, etc.

MODEM

DCE25 Pin Female

25 Pin Male

Comm. Cable 25 Pin Female MODEM

3 DES Fix CONTROL

25 Pin Male MODULEComm. Cable ATM

9 Pin Serial COM

25 Pin Male ISLAND ATM Special Note

The 3DES Controller will be inserted in the

25 Pin Female Communications line within the ATM.

The 3DES controller should be installed inside of the ATM.

ATM/DTE Ensure that the ATM has a dual AC Receptacle installed

to supply 110 Volt AC Power for the 3 DES FIX System

Welcome

3 DES PINPAD

3 DES Fix Control Module 2

CONNECTIONS

ATM – Connects to ATM’s RS-232 Serial Communication Port via a standard DB 25 Pin Male to Male straight-thru cable. (Existing Modem cable OK) MODEM -– Connect to Existing Modem (where ATM was previously connected) COM – Connects to the 3 DES Fix EPP at J5 via a Serial Cable. Also carries EPP Power. POWER – Transformer plugs in here. (Note: power supply is dual voltage)

USB – For Software Updates and Logging Functions

STATUS LEDS

POWER – Power On Indicator also serves as a Blinking Indicator when Updating Software via the USB Port

MODEM RD – Receive data from the Host Modem to the Control ModuleMODEM TD – Transmit Data from the Control Module to the Host Modem

ATM DTR – Displays the Status of the Data Terminal Ready Signal from the ATMATM TD – This LED indicates Data Transmitted to the ATM

Page 7 of 47

Machine Specific SectionThis section provides specific instructions for NCR ATMs.If specific instructions are not present for the ATM that you are working on, please call the Help Desk 1-800-831-5723 – Technical Support will supply you with updates pertaining to your installation.

Attention 3 DES Fix Installer : Please update the control module using the following steps prior to installation.

Instructions to perform Software Version Update on the control module

1. If the 2 Update Files were emailed to you, save them to your PC first. 2. Format the USB drive (FAT only) before copying the files to it. NOTE: Click on the icon in the Systray to stop the USB device before disconnecting the USB drive from the PC.3. Turn OFF the 3 DES Fix Control Module. 4. INSERT the USB DRIVE containing the Update1 and Update2 Files on it.5. Power on the 3 DES Fix Control Module.6. Within 10 Seconds, the Green LED on the box will Come on, Go Off then blink rapidly

for about 6 seconds. Once the Green LED on the Control Module stops blinking, wait 5 seconds, then Power OFF the Control Module.

7. Remove the USB DRIVE.NOTE: If you are going to leave a Logging Key (USB DRIVE containing Logging Files) in the Control Module, Insert the USB Logging Key after removal. 8. Power the ATM off, and then power the ATM back on. Allow it to load it’s internal

software or firmware. Proceed with the next step when ATM becomes idle.9. When the ATM is idle, power on the 3 DES Fix control module.10. The ATM should take a download from the host network processor.NOTE: Within 10 minutes. Call Processor and request Load if the ATM does not take a load automatically. 11. After the ATM is “In Service” Perform Several Test Transactions to ensure reliable

performance.12. Write the new Software Version Number on the Label that is currently on the 3 DES Fix

Control Module.

NOTE: If the ATM was turned off while it was in the Maintenance/Supply Mode, it may be necessary to cycle the ATM “In and Out” of Supply Mode to bring the ATM back in Service.

Page 8 of 47

3 DES Fix Item Check List for NCR ATMs

Page 9 of 47

Interface Cable dependent on how ATM was reported to be configured

QTY DESCRIPTION

1 3 DES Fix EPP NCR 50xx or 56xx

1 EPP Mounting Bracket (where applicable)

1 Ribbon Cable EPP to Interface Bd.

1 Ribbon Cable from Interface Bd. to Terminal I/O

1 EPP Interface Bd. For NCR 50XX

1 SERIAL CABLE EPP

1 CONTROL MODULE

1 25 PIN M - 25 PIN F COMM CABLE

1 POWER SUPPLY FOR CONTROL MODULE

1 MISC (SCREWS, TIE WRAPS ETC)

3 DES Fix NCR Encrypting Pinpad

For NCR 5000 Connector Reference

3 DES Fix NCR 50xx Interface Board.

Page 10 of 47

D1

1 J2 1 J3

J1

J41

P/N: BRD-300-101

50XX Keypad Interface Bd.

J1 Serial Cable to Control ModuleJ2 EPP Ribbon CableJ3 New Ribbon Cable to J10 on TERMINAL I/O Bd.J4 Original Cable From J10 of TERMINAL I/O Bd.

GTINCR Keypad Interface Bd.

3 DES Fix NCR 56xx/58xx Interface Board.

Page 11 of 47

J8 J7 D1

1 J1 J2

1 J4

J3

1

J6 J51 1


J1 EPP Ribbon CableJ2 Original 30 Pin Cable from J8 on Hi BAPE BD J3 New 26 Pin Ribbon Cable to HI BAPE Bd. at J8J4 Serial Cable to 3 DES Fix Control Module Port Marked COMJ5 Can be used for an SDC ExtensionJ6 Can be used for an SDC ExtensionJ7 Left Function KeyboardJ8 Right Function Keyboard

J1 EPP Ribbon CableJ2 To Hi BAPE Bd. at J8J3 Maintenance Keyboard (if Used)J4 Serial Cable to 3 DES Fix Control Module Port Marked COMJ5 Can be used for an SDC ExtensionJ6 Can be used for an SDC ExtensionJ7 Left Function KeyboardJ8 Right Function Keyboard

Jack Assignment when Converting from a Vault Bape Encryptor


GTI

Jack Assignment when connecting to a Standard Hi Bape Encryptor

Hi BAPE Board Connection Reference for 3 DES Fix

Page 12 of 47

J2 - SDC BusFrom ATM or Extension Cable(Always Used Here)

J8 - Ribbon Cable to J2 or J3 of Pi Keypad Interface (J2 and J3 are Paralleled)(Returns Keypad Signals from EPP and FDSK Keypads to Hi BAPE BD.)This is a Stranded Cable if a Hi BAPEConversion Kit

J4 - Boot Jumper, Part# Pi-110 of 3 DES Fix Kit (Always Used Here)

3 DES Fix NCR Keypad Interface Board

RIGHT FDSK Keyboard LEFT FDSK Keyboard

Flashing RED LED

EPP CABLE Serial Cable to Control Module

To J8 on HI BAPE

Removal of Left Side Cover (5084/5 Only)

Route Cables Down and Out of Left Side Cover

Page 13 of 47

Terminal I/O Board. J10

Page 14 of 47

NCR 50XX Terminal I/O BD. J10

P10/J10

PLUGS On To J7 of NCR

Interface Bd.

Red or Blue wire

Indicates Pin 1

Installation on NCR 5070

Inspect and identify each item shipped with the 3 DES Fix.

1. Power Down the ATM. 2. Open Top Hood to Access the Customer Keyboard.3. Place the 3 DES Fix Controller on the top of the ATM.4. Pop up Plastic Rivets that secure the Customer Keyboard in Place.5. Disconnect the Keyboard Interface Cable from the Customer Keyboard.6. Tape up exposed Pins on original Connector and Tuck away. (No longer used.)7. Remove the Original Customer Keyboard with housing and set aside.8. Connect the new Ribbon cable to the 3 DES Fix EPP9. Route the new KYB Ribbon cable to the Card Cage Near the Terminal I/O BD.10. Access the Card Cage Assy. Locate P10 on the Terminal I/O Bd. (See Photo Page 12)11. Mount the New Keypad Interface Bd. near J10 on the Terminal I/O Bd.12. Plug in the New Ribbon cable that you routed from the Customer Keyboard to J2 on the

Connector Keypad Interface Bd. 13. Disconnect the Cable from P10 on the terminal I/O Bd. and connect it to J4 on the Keypad

Interface Bd. (P/N BRD-300-101).14. Install the new Short Ribbon cable from J3 on the Keypad Interface Bd. to P10 on the Terminal

I/O Bd. in the Card Cage.15. Install the Serial Interface Cable connecting it to the Keypad Interface Bd. at J1, and then route it

to the 3 DES Fix Controller on top of the ATM. 16. Connect the Serial interface cable to THE PORT MARKED COM on the 3 DES Fix

Controller.17. Locate the EPP power plug at the end of the new cable. Plug it into the Power Jack on the 3 DES

Fix controller next to THE PORT MARKED COM (refer to Photo on Page 7) 18. Remove the RS-232 Communications cable from the Existing Modem or Communications

Controller and Connect to the 3 DES Fix Control Module at the port marked ATM 19. Connect New 25 pin Communications Cable (supplied with 3 DES Fix Replacement System Kit)

from the 3 DES Fix Control Module Port marked MODEM to the Existing Modem or Communications Controller. (MODEM to THE PORT MARKED MODEM)

20. Double-check all connections.21. Install the DC Power Supply PLUG into the 3 DES Fix Controller.22. Power Up the ATM. 23. Do not proceed until the ATM has loaded its internal Software.24. Connect the 3 DES Fix Power Supply to a 110v AC Receptacle.25. The Controller will auto sync the Protocol, Poll Address and the Baud rate to the ATM’s pre-

configured settings. 26. Wait for Message “Waiting for Configuration Mode”, then 27. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.28. Enter the Password 1= 121212 and Password 2 = 34343429. The “3 DES Fix Configuration Menu” will be displayed.30. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).

Call for instructions if the ATM will not take a Load (See Tech Support Page)

NOTE: The ATM’s Original Encryption Bd. needs to have some keys loaded in it. If you have loaded software, pulled the Processor or otherwise caused the loss of A & B Single DES Keys, please Enter All 1’s or Generic Keys into the A and B Keys.

Page 15 of 47

Installation on NCR 5084UPDATE WITH - REMOVE FASCIA VERSION

3 DES Fix 4/18/2023Inspect and identify each item shipped with the 3 DES FIX.

1. Power Down the ATM. 2. Remove Left Side Cover of ATM if Possible by loosening 3 Phillips Screws.3. Slide Printer Tray out, and Remove the Monitor, set aside.4. Pull the card reader back.5. Loosen 2 nuts on the plate that holds the Customer Keyboard in Place.6. Remove the Heater under Keyboard if installed, set aside.7. Remove the screws for the Lens retaining bracket.8. Disconnect all the cables and strain relief from the Fascia to the ATM base in order to

remove the fascia.9. Loosen the two Fascia retaining nuts, located left and right center of the Fascia.10. From the front of the ATM remove the Stainless Steel ring from around the Fascia.11. Remove the light lens.12. Remove the four screws at the top front of the ATM, made visible by removing the

light lens.13. Slowly lift out Fascia ensuring all cables were disconnected and strain relief removed.14. Remove Original Customer Keyboard with old gasket, set aside.15. Install gaskets on 3 DES FIX EPP and install in to the fascia. Only tighten mounting

screws finger tight. Adjust EPP for center and ensure snug fit.16. Reinstall Fascia; install four screws removed; replace light lens; replace Stainless Steel

ring. 17. Tighten the two fascia retaining nuts loosened in step 9.18. Reconnect all cables and strain relief removed in step 8.19. Route the new KYB Ribbon cable to the Card Cage Near the terminal I/O Bd.20. Reinstall Heater assembly and tighten down all screws.21. Place the 3 DES FIX Controller on the top of the ATM.22. Access the Card Cage Assy. Locate P10 on the Terminal I/O Bd.23. Mount the 3 DES FIX Keypad Interface Bd. near J10 on the Terminal I/O Bd.24. Plug in the New Ribbon cable that you routed from the EPP to J2 on the Keypad

Interface Bd. 25. Disconnect the Cable from P10 on the terminal I/O Bd. and connect it to J4 on the

Keypad Interface Bd.26. Install the new Short Ribbon cable from J3 on the Keypad Interface Bd. to P10 on the

Terminal I/O Bd. in the Card Cage.27. Install the Serial interface cable connecting it to the Keypad Interface Bd. at J1, and

then route it to the 3 DES FIX Controller on top of the ATM. 28. Connect the Serial interface cable to where marked COM on the 3 DES FIX Control

Module.29. Remove the RS-232 Communications cable from the Existing Modem or

Communications Controller and Connect to the 3 DES Control Module where marked ATM.

30. Connect New 25 pin Communications Cable (supplied with 3 DES Replacement System Kit) from the 3 DES FIX Control Module where marked MODEM to the Existing Modem or Communications Controller.

Page 16 of 47

31. Lift plate and tighten nuts. Reinstall Glass if removed. Double-check all connections.32. Install the DC Power Supply connector into the 3 DES FIX Controller.33. Reinstall the Heater under the Keyboard. (if used)34. Reinstall the Monitor.35. Remount the ATM’s left Side Cover and Secure.36. Power Up the ATM. 37. Do not proceed until the ATM has loaded its internal Software.38. Connect the 3 DES Power Supply to an AC Receptacle.39. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM.40. Wait for Message “Waiting for Configuration Mode”, then41. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.42. Enter the Password 1= 121212 and Password 2 = 34343443. The “3 DES Fix Configuration Menu” will be displayed.44. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).


NOTE: The ATM’s Original Encryption Bd. needs to have some keys loaded in it.If you have caused the loss of A & B Single DES Keys, please Enter All

1’s or Generic Keys into the A and B Keys.

Page 17 of 47

Installation on NCR 5085Inspect and identify each item shipped with the 3 DES Fix.

1. Power Down the ATM. 2. Remove Left Side Cover of ATM if Possible by loosening 3 Phillips Screws.3. Slide Printer Tray out, and Remove the Monitor, set aside.4. Remove the Heater under Keyboard if installed, Set aside5. Place the 3 DES Fix Controller on the top of the ATM.6. Loosen 2 nuts on the plate that holds the Customer Keyboard in Place.7. Disconnect the Keyboard interface cable ONLY from the Customer Keyboard.8. Remove the Original Customer Keyboard and set aside.9. Remove the Original Gasket from the Fascia (if the gasket did not already come out with the

Old Keyboard.)10. Install the 3 DES Fix EPP into fascia. Reinstall heater plate on the EPP and disconnect the

heater power. Route the New ribbon cable to the card cage. Make sure the NEW gasket is seated. Do not Use Old Gasket. *You may need to remove the Glass.

11. Access the Card Cage Assy. Locate P10 on the Terminal I/O Bd.12. Mount the New Connector Junction Bd. near J10 on the Terminal I/O Bd.13. Plug in the New Ribbon cable that you routed from the EPP to J2 on the Connector Junction

Bd. 14. Disconnect the Cable from P10 on the terminal I/O Bd. and connect it to J4 on the Junction Bd.15. Install the new Short Ribbon cable from J3 on the Junction Bd. to P10 on the Terminal I/O Bd. 16. Install the Serial interface cable connecting it to the Junction Bd. at J1, and then route it to the 3

DES Fix Controller on top of the ATM. 17. Connect the Serial interface cable to THE PORT MARKED COM on the 3 DES Fix

Controller.18. Remove the RS-232 Communications cable from the Existing Modem or Communications

Controller and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM to COM1)

19. Connect New 25 pin Communications Cable (supplied with 3 DES Replacement System Kit) from the 3 DES Fix Control Module Port marked MODEM to the Existing Modem or Communications Controller. (MODEM to CM PORT MARKED MODEM)

20. Lift plate and tighten nuts. Reinstall Glass if removed. Double-check all connections.21. Install the DC Power Supply connector into the 3 DES Fix Control Module.22. Reinstall the Heater under the Keyboard. (if used)23. Reinstall the Monitor.24. Remount the ATM’s left Side Cover and Secure.25. Power Up the ATM. 26. Do not proceed until the ATM has loaded its internal Software.27. Connect the 3 DES Fix Power Supply to a 110v AC Receptacle.28. The Controller will auto sync the Protocol, Poll Address and the Baud rate to the ATM. 29. Wait for Message “Waiting for Configuration Mode”, then 30. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.31. Enter the Password 1= 121212 and Password 2 = 34343432. The “3 DES Fix Configuration Menu” will be displayed.33. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).

Call for instructions if the ATM will not take a Load (See Tech Support Page) NOTE: The ATM’s Original Encryption Bd. needs to have some keys loaded in it. If you have loaded software, pulled the Processor or otherwise caused the loss of A &

B Single DES Keys, please Enter All 1’s or Generic Keys into the A and B Keys.

Page 18 of 47


1. Power Down the ATM. 2. Disconnect Receipt transport and set aside.3. Disconnect and remove the Card Reader and its base housing.4. Disconnect and remove Monitor.5. Remove the Heater under Keyboard if installed, Set aside6. Place the 3 DES Fix Controller on the top of the ATM.7. Loosen 2 nuts that hold the Customer Keyboard in Place.8. Disconnect the Keyboard interface cable only from the Customer Keyboard.9. Remove the Original Customer Keyboard and set aside.10. Remove the Original Gasket from the Fascia (if the gasket did not already come out with the Old

Keyboard.)11. Connect the NEW Ribbon cable to the 3 DES Fix EPP and install into fascia. Make sure the

NEW gasket is seated. Do not Use Old Gasket.12. Route the new KYB Ribbon cable to the Card Cage Near the Terminal I/O Bd.13. Access the Card Cage Assy. Locate P10 on the Terminal I/O Bd.14. Mount the New Connector Junction Bd. near J10 on the Terminal I/O Bd.15. Plug in the New Ribbon cable from the EPP to J2 on the NCR Interface Bd. 16. Disconnect the Cable from J10 on the Term. I/O Bd, connect it to J4 on the Junction Bd.17. Connect the new Ribbon cable from J3 on the Junction Bd. to J10 on the Terminal I/O Bd. 18. Install the Serial Interface Cable connecting it to the Junction Bd. at J1, then route it to 3 DES

Fix Control Module on top of the ATM. 19. Connect the Serial interface cable to THE PORT MARKED COM on the 3 DES Fix Control

Module.20. Remove the RS-232 Communications cable from the Existing Modem or Communications

Controller and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM) 21. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module Port marked MODEM

(Modem) to the Existing Modem or Communications Controller.22. Double-check all connections.23. Install the DC Power Supply connector into the 3 DES Fix Control Module.24. Reinstall the Heater under the Keyboard (if used)25. Reinstall the Monitor.26. Reinstall the Card Reader and housing.27. Reinstall the Receipt Transport.28. Power Up the ATM. 29. Do not proceed until the ATM has loaded its internal Software.30. Connect the 3 DES Fix Power Supply to a 110v AC Receptacle.31. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 32. Wait for Message “Waiting for Configuration Mode”, then 33. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.34. Enter the Password 1= 121212 and Password 2 = 34343435. The “3 DES Fix Configuration Menu” will be displayed.36. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).Call for instructions if the ATM will not take a Load (See Tech Support Page)NOTE: The ATM’s Original Encryption Bd. needs to have some keys loaded in it. If you have loaded software, pulled the Processor or otherwise caused the loss of A & B Single DES Keys, please Enter All 1’s or Generic Keys into the A and B Keys.

Page 19 of 47

Installation on NCR 5670PRELIMINARY 5/23/2005


1. Power Down the ATM.2. Remove the Original Customer Keyboard assembly.3. Remove the back plate from the Original Keyboard assembly.4. Mount the 3 DES Fix EPP in the 3 DES Fix Bezel.5. Route EPP cable through the bezel by fan folding the cable and have 16”extended out

of the bezel prior to installing the back plate removed in step 3.6. Remount keyboard assembly with the 3 DES Fix EPP installed.7. Install jumper plug in J4 on the BAPE board. Orientate pin 1 of the jumper with pin 1

or 2 of J4 connector of the BAPE Bd. Install BAPE cover with standoffs provided with the 3 DES Fix Kit.

8. Relocate the BAPE Board under the receipt printer. Use the pre-existing SDC Bus connection for motorized reader, if reader is not present.

9. Mount 3 DES Fix Keypad Interface Board to the swipe reader controller using the standoffs provided.

10. Connect the NEW Ribbon cable attached to the 3 DES Fix EPP to the 3 DES Fix Keypad Interface Board to (J1).

11. Connect the Original 30 pin cable from the BAPE board to the 3 DES Fix Keypad Interface Board to (J2) 26 pin connector, lining up pins 3 & 4 on the Original cable with pins 1 & 2 on the interface board.

12. Connect the 26 pin ribbon cable (PI-108) to the keypad interface board (J3) and to the BAPE J8.

13. Route and connect the Function Key Cables (PI-106) to the keypad interface board and the function keypads. Left function to (J7) and the Right to (J8).

14. Route through the back of the ATM and connect the EPP serial interface cable (PI-001B) to the keypad interface board (J4). See pictorial next page for example.

15. The 3 DES Fix Control Module placement depends on where the Modem is located. The Control Module needs to be located in close proximity of the Modem. Preferably on top of or beside Modem depending on Modem location.

16. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix Control Module.

17. Remove the RS-232 Communications cable from the Existing Modem or Communications Controller and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM).

18. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module port marked MODEM (Modem) to the Existing Modem or Communications Controller.

19. Double-check all connections.20. Install the DC Power Supply connector into the 3 DES Fix Control Module.21. Power Up the ATM. 22. Do not proceed until the ATM has loaded its internal Software.23. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle.24. Power on the 3 DES Fix Control Module. Power switch opposite side from all the

connectors.

Page 20 of 47

25. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 26. Wait for Message “Waiting for Configuration Mode”, then 27. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.28. Enter the Password 1= 121212 and Password 2 = 34343429. The “3 DES Fix Configuration Menu” will be displayed.30. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this

manual).

Page 21 of 47

5670 Serial Cable Routing

Loosen Brace Screw and Insert the EPP end of the Serial Cable thru the Corner Opening.

Installation on NCR 5674/75 PRELIMINARY 5/25/2005


1. Power Down the ATM.2. Remove the dispenser shutter assembly.3. Remove the Original Customer Keyboard assembly.4. Remove the back plate from the Original Keyboard assembly.5. Mount the 3 DES Fix EPP in the 3 DES Fix Bezel.6. Route EPP cable through the bezel by fan folding the cable and have 16”extended out of the bezel prior

to installing the back plate removed in step 4.7. Remount keyboard assembly with the 3 DES Fix EPP installed.8. Install jumper plug in J4 on the BAPE board. Orientate pin 1 of the jumper with pin 1 of J4 connector of

the BAPE Bd. Install BAPE cover with standoffs provided with the 3 DES Fix Kit.9. Mount the BAPE Board on the back of the customer keypad bracket.10. Mount 3 DES Fix Keypad Interface Board on the back of the customer keypad bracket, left of the BAPE

Bd. using the standoffs provided.11. Connect SDC Bus connector in the ATM cable harness to the BAPE Bd. At J2.12. Connect the NEW Ribbon cable attached to the 3 DES Fix EPP to the 3 DES Fix Keypad Interface

Board to (J1).13. Route and connect the Function Key Cables (PI-106) to the keypad interface board and the function

keypads. Left function to (J7) and the Right to (J8).14. Route and connect the EPP serial interface cable (PI-001B) to the keypad interface board (J4). 15. The 3 DES Fix Control Module placement depends on where the Modem is located. The Control

Module needs to be located in close proximity of the Modem. Preferably on top of or beside Modem depending on Modem location.

16. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix Control Module.17. Remove the RS-232 Communications cable from the Existing Modem or Communications Controller

and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM). 18. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module port marked MODEM

(Modem) to the Existing Modem or Communications Controller.19. Double-check all connections.20. Install the DC Power Supply connector into the 3 DES Fix Control Module.21. Power Up the ATM. 22. Do not proceed until the ATM has loaded its internal Software.23. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle.24. Power on the 3 DES Fix Control Module. Power switch opposite side from all the connectors. 25. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 26. Wait for Message “Waiting for Configuration Mode”, then 27. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.28. Enter the Password 1= 121212 and Password 2 = 34343429. The “3 DES Fix Configuration Menu” will be displayed.30. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).

NOTE: The BAPE may need to have generic master keys loaded prior to loading the Triple DES Master Keys

Page 22 of 47

Installation on NCR 5674/75 With VAULT BAPEPRELIMINARY 5/25/2005

NOTE: If the Original BAPE Bd. is located in the Vault, you must perform the BAPE Conversion prior to installing the 3 DES Fix Kit. Instructions highlighted in yellow pertain to the Vault BAPE Conversion.


1. Power Down the ATM.2. Remove the dispenser shutter assembly.3. Remove the Original Customer Keyboard assembly.4. Remove the back plate from the Original Keyboard assembly.5. Remove the 40 Pin “Y” cable connector from the Original Keyboard assembly.6. Place the cable connector removed in previous step in the 3 DES Fix Bezel.7. Connect cable (PI-111) to 40 pin “Y” connector.8. Mount the 3 DES Fix EPP in the 3 DES Fix Bezel.9. Route EPP cable through the bezel by fan folding the cable and have 16”extended out of the bezel prior

to installing the back plate removed in step 4.10. Remount keyboard assembly with the 3 DES Fix EPP installed.11. Install jumper plug in J4 on the NEW BAPE board. Orientate pin 1 of the jumper with pin 1 of J4

connector of the BAPE Bd. Install BAPE cover with standoffs provided with the 3 DES Fix Kit.12. Mount the BAPE Board on the back of the customer keypad bracket.13. Mount 3 DES Fix Keypad Interface Board on the back of the customer keypad bracket, left of the BAPE

Bd. using the standoffs provided.14. Connect SDC Bus connector in the ATM cable harness to the NEW BAPE Bd. At J2.15. Connect the NEW Ribbon cable attached to the 3 DES Fix EPP to the 3 DES Fix Keypad Interface

Board to (J1).16. Connect the cable, (PI-112) the end with no pins in position 1 & 2 to the 3 DES Fix Keypad Interface

Board at (J2) (26 pin connector).17. Connect the cable from the “Y” connector (PI-111) from step 7 to the keypad interface board (J3).18. Route and connect the Function Key Cables (PI-106) to the keypad interface board and the function

keypads. Left function to (J7) and the Right to (J8).19. Route and connect the EPP serial interface cable (PI-001B) to the keypad interface board (J4). 20. The 3 DES Fix Control Module placement depends on where the Modem is located. The Control

Module needs to be located in close proximity of the Modem. Preferably on top of or beside Modem depending on Modem location.

21. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix Control Module.22. Remove the RS-232 Communications cable from the Existing Modem or Communications Controller

and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM). 23. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module port marked MODEM

(Modem) to the Existing Modem or Communications Controller.24. Disconnect Vault BAPE power and SDC Bus connections.25. Double-check all connections.26. Install the DC Power Supply connector into the 3 DES Fix Control Module.27. Power Up the ATM. 28. Do not proceed until the ATM has loaded its internal Software.29. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle.30. Power on the 3 DES Fix Control Module. Power switch opposite side from all the connectors. 31. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 32. Wait for Message “Waiting for Configuration Mode”, then 33. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.34. Enter the Password 1= 121212 and Password 2 = 34343435. The “3 DES Fix Configuration Menu” will be displayed.36. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).

NOTE: The new HIGH BAPE will need to have generic master keys loaded prior to loading the Triple DES Master Keys

Page 23 of 47

Installation on NCR 5684 & 5685PRELIMINARY 3/22/2005Inspect and identify each item shipped with the 3 DES Fix.

1. Power Down the ATM.2. Dismount maintenance panel.3. Remove ATM hood.4. Remove the Original Customer Keyboard assembly.5. Remove the back plate from the Original Keyboard assembly.6. Mount the 3 DES Fix EPP in the 3 DES Fix bezel.7. Install New gasket to the EPP on the outside of the bezel. 8. Relocate BAPE Board to the 3 DES Fix bezel. 9. Install jumper plug in J4 on the BAPE board.10. Route EPP cable through the bezel prior to installing the back plate removed in step 5.11. Mount 3 DES Fix Keypad interface board to the (find a suitable location).12. Connect the NEW Ribbon cable from the 3 DES Fix EPP to the 3 DES Fix Keypad interface board to

(J1).13. Connect the Original 30 pin cable from the BAPE board to the 3 DES Fix Keypad interface board to (J2)

26 pin connector, lining up pins 3 & 4 on the Original cable with pins 1 & 2 on the interface board.14. Connect the Original SDC Bus connector to the BAPE board.15. Connect the 26 pin ribbon cable to the keypad interface board (J3) and to the BAPE J8.16. Remount keyboard assembly with the 3 DES Fix EPP installed.17. Place the 3 DES Fix Controller in the ATM on top of the Vault.18. Route and connect the Function key cables to the keypad interface board and the function keypads. Left

function to (J7) and the Right to (J8)19. Route and connect the EPP serial interface cable to the keypad interface board (J4).20. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix Control Module.21. Remove the RS-232 Communications cable from the Existing Modem or Communications Controller

and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM) 22. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module port marked MODEM

(Modem) to the Existing Modem or Communications Controller.23. Remount the ATM hood and maintenance panel.24. Double-check all connections.25. Install the DC Power Supply connector into the 3 DES Fix Control Module.26. Power Up the ATM. 27. Do not proceed until the ATM has loaded its internal Software.28. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle.29. Power on the 3 DES Fix Control Module. (The Power Switch is on the opposite side from all the

connectors.) 30. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 31. Wait for Message “Waiting for Configuration Mode”, then 32. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.33. Enter the Password 1= 121212 and Password 2 = 34343434. The “3 DES Fix Configuration Menu” will be displayed.35. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this

manual).


NOTE: The ATM’s Original Encryption Bd. needs to have some keys loaded in it. If you have caused the loss of A & B Single DES Keys, please Enter All 1’s or Generic Keys into the A and B Keys.

Page 24 of 47

Installation on NCR 5684 & 5685 with VAULT BAPE



1. Power Down the ATM.2. Dismount maintenance panel.3. Remove ATM hood.4. Remove the Original Customer Keyboard assembly.5. Remove the back plate from the Original Keyboard assembly. 6. Mount the 3 DES Fix EPP in the 3 DES Fix bezel. Utilizing the hardware provided in the miscellaneous

hardware kit.7. Install new gasket to the EPP on the outside of the bezel. 8. Relocate NEW BAPE Board to the 3 DES Fix bezel. 9. Install jumper plug in J4 on the BAPE board.10. Route EPP cable through the bezel prior to installing the back plate removed in step 5.11. Mount 3 DES Fix Keypad interface board to the (Find Location).12. Connect the NEW Ribbon cable from the 3 DES Fix EPP to the 3 DES Fix Keypad interface board to

(J1).13. Connect the closest SDC Bus connector to the NEW BAPE board. If none available use the SDC Bus

extension cable (PI-109).14. Connect the cable, (PI-112) the end with no pins in position 1 & 2 to the 3 DES Fix Keypad Interface

Board at (J2) (26 pin connector).15. Remount keyboard assembly with the 3 DES Fix EPP installed.16. Connect the two-position connector off of J8 of the BAPE BD to a 5-volt source in the ATM.17. Route and connect the Function key cables to the keypad interface board and the function keypads. Left

function to (J7) and the Right to (J8).18. Route and connect the EPP serial interface cable to the keypad interface board (J4).19. Place the 3 DES Fix Controller in the ATM on top of the Vault.20. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix Control Module.21. Remove the RS-232 Communications cable from the Existing Modem or Communications Controller

and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM) 22. Connect New 25-pin Comm. Cable from the 3 DES Fix Control Module port marked MODEM

(Modem) to the Existing Modem or Communications Controller.23. Disconnect Vault BAPE power and SDC Bus connections.24. Remount the ATM hood and maintenance panel.25. Double-check all connections.26. Install the DC Power Supply connector into the 3 DES Fix Control Module.27. Power Up the ATM. 28. Do not proceed until the ATM has loaded its internal Software.29. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle.30. Power on the 3 DES Fix Control Module. Power switch opposite side from all the connectors. 31. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 32. Wait for Message “Waiting for Configuration Mode”, then 33. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.34. Enter the Password 1= 121212 and Password 2 = 34343435. The “3 DES Fix Configuration Menu” will be displayed.36. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).


Page 25 of 47

Installation on NCR 5688PRELIMINARY 3/22/2005Inspect and identify each item shipped with the 3 DES Fix.

1. Power Down the ATM.2. Dismount maintenance panel.3. Remove ATM hood.4. Remove the Original Customer Keyboard assembly.5. Remove the back plate from the Original Keyboard assembly.6. Mount the 3 DES Fix EPP in the 3 DES Fix bezel.7. Install new gasket to the EPP on the outside of the bezel. 8. Relocate BAPE Board to the 3 DES Fix bezel. 9. Install jumper plug in J4 on the BAPE board.10. Route EPP cable through the bezel prior to installing the back plate removed in step 5.11. Mount 3 DES Fix Keypad interface board to the (find a suitable location).12. Connect the NEW Ribbon cable from the 3 DES Fix EPP to the 3 DES Fix Keypad interface board to

(J1).13. Connect the Original 30 pin cable from the BAPE board to the 3 DES Fix Keypad interface board to (J2)

26 pin connector, lining up pins 3 & 4 on the Original cable with pins 1 & 2 on the interface board.14. Connect the Original SDC Bus connector to the BAPE board.15. Connect the 26 pin ribbon cable to the keypad interface board (J3) and to the BAPE J8.16. Remount keyboard assembly with the 3 DES Fix EPP installed.17. Place the 3 DES Fix Controller in the ATM on top of the Vault.18. Route and connect the Function key cables to the keypad interface board and the function keypads. Left

function to (J7) and the Right to (J8).19. Route and connect the EPP serial interface cable to the keypad interface board (J4).20. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix Control Module.21. Remove the RS-232 Communications cable from the Existing Modem or Communications Controller

and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM) 22. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module Port marked MODEM

(Modem) to the Existing Modem or Communications Controller.23. Remount the ATM hood and maintenance panel.24. Double-check all connections.25. Install the DC Power Supply connector into the 3 DES Fix Control Module.26. Power Up the ATM. 27. Do not proceed until the ATM has loaded its internal Software.28. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle.29. Power on the 3 DES Fix Control Module. Power switch opposite side from all the connectors. 30. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 31. Wait for Message “Waiting for Configuration Mode”, then 32. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.33. Enter the Password 1= 121212 and Password 2 = 34343434. The “3 DES Fix Configuration Menu” will be displayed.35. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this

manual).



Page 26 of 47

Installation on NCR 5688 with VAULT BAPE


Inspect and identify each item shipped with the 3 DES Fix.1. Power Down the ATM.2. Dismount maintenance panel.3. Remove ATM hood.4. Remove the Original Customer Keyboard assembly.5. Remove the back plate from the Original Keyboard assembly. 6. Mount the 3 DES Fix EPP in the 3 DES Fix bezel. Utilizing the hardware provided in the miscellaneous

hardware kit.7. Install new gasket to the EPP on the outside of the bezel. 8. Relocate NEW BAPE Board to the 3 DES Fix bezel. 9. Install jumper plug in J4 on the BAPE board.10. Route EPP cable through the bezel prior to installing the back plate removed in step 5.11. Mount 3 DES Fix Keypad interface board to the (Find Location).12. Connect the NEW Ribbon cable from the 3 DES Fix EPP to the 3 DES Fix Keypad interface board to

(J1).13. Connect the closest SDC Bus connector to the NEW BAPE board. If none available use the SDC Bus

extension cable (PI-109).14. Connect the cable, (PI-112) the end with no pins in position 1 & 2 to the 3 DES Fix Keypad Interface

Board at (J2) (26 pin connector) and the other end with the pins in pos 1 & 2 to the BAPE BD J8.15. Remount keyboard assembly with the 3 DES Fix EPP installed.16. Connect the two-position connector off of J8 of the BAPE BD to a 5-volt source in the ATM. 17. Route and connect the Function key cables to the keypad interface board and the function keypads. Left

function to (J7) and the Right to (J8).18. Route and connect the EPP serial interface cable to the keypad interface board (J4).19. Place the 3 DES Fix Controller in the ATM on top of the Vault.20. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix Control Module.21. Remove the RS-232 Communications cable from the Existing Modem or Communications Controller

and Connect to the 3 DES Fix Control Module at The port marked ATM (ATM) 22. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module Port marked MODEM

(Modem) to the Existing Modem or Communications Controller.23. Disconnect Vault BAPE power and SDC Bus connections.24. Remount the ATM hood and maintenance panel.25. Double-check all connections.26. Install the DC Power Supply connector into the 3 DES Fix Control Module.27. Power Up the ATM. 28. Do not proceed until the ATM has loaded its internal Software.29. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle.30. Power on the 3 DES Fix Control Module. Power switch opposite side from all the connectors. 31. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 32. Wait for Message “Waiting for Configuration Mode”, then 33. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.34. Enter the Password 1= 121212 and Password 2 = 34343435. The “3 DES Fix Configuration Menu” will be displayed.36. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this manual).


Page 27 of 47

Installation on NCR 5840


31. Power Down the ATM.32. Remove the Original Customer Keyboard assembly.33. Remove the back plate from the Original Keyboard assembly.34. Mount the 3 DES Fix EPP in the 3 DES Fix Bezel.35. Route EPP cable through the bezel by fan folding the cable and have 16”extended out

of the bezel prior to installing the back plate removed in step 3.36. Remount keyboard assembly with the 3 DES Fix EPP installed.37. Install jumper plug in J4 on the BAPE board. Install BAPE cover with standoffs

provided with the 3 DES Fix Kit.38. Relocate the BAPE Board. Reconnect the SDC Bus connection for the BAPE Board.39. Mount 3 DES Fix Keypad Interface Board by the BAPE Board using the standoffs

provided.40. Connect the NEW Ribbon cable attached to the 3 DES Fix EPP to the 3 DES Fix

Keypad Interface Board to (J1).41. Connect the Original 30 pin cable from the BAPE board to the 3 DES Fix Keypad

Interface Board to (J2) 26 pin connector, lining up pins 3 & 4 on the Original cable with pins 1 & 2 on the interface board.

42. Connect the 26 pin ribbon cable (PI-108) to the keypad interface board (J3) and to the BAPE J8.

43. Route and connect the Function Key Cables (PI-106) to the keypad interface board and the function keypads. Left function to (J7) and the Right to (J8).

44. Route the EPP serial interface cable (PI-001B) to the keypad interface board (J4). 45. Locate the 3 DES Fix Control Module in the pedestal of the ATM.46. Connect the Serial interface cable to the port marked COM (com) on the 3 DES Fix

Control Module.47. Remove the Communications cable from the Existing Communications Controller and

Connect to the 3 DES Fix Control Module. 48. Connect the Communications Cable from the 3 DES Fix Control Module to the

existing Communications Controller.49. Double-check all connections.50. Install the DC Power Supply connector into the 3 DES Fix Control Module. Connect

the 3 DES Fix Power Supply to an 110v AC Receptacle.51. Power Up the ATM. 52. Do not proceed until the ATM has loaded its internal Software.53. Power on the 3 DES Fix Control Module. Power switch opposite side from all the

connectors. 54. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 55. Wait for Message “Waiting for Configuration Mode”, then 56. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.57. Enter the Password 1= 121212 and Password 2 = 34343458. The “3 DES Fix Configuration Menu” will be displayed.59. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this

manual).

Page 28 of 47


1. Power Down the ATM. 2. Place the 3 DES Fix Controller on the top of the ATM’s process.3. Remove the RS-232 Communications cable from the ATM processor and Connect to the 3 DES Fix

Control Module at The port marked MODEM (Modem).4. Connect New 25 pin Comm. Cable from the 3 DES Fix Control Module Port marked ATM (ATM) to

the ATM processor Communications Port.5. Connect the Serial interface cable to THE PORT MARKED COM on the 3 DES Fix Control Module.6. Route EPP serial cable up to the keypad location.7. Install the DC Power Supply connector into the 3 DES Fix Control Module.8. Connect the 3 DES Fix Power Supply to an 110v AC Receptacle. Make sure the Control Module is

powered off.9. Remove rain gutter. Loosen 2 screws.10. Remove dispenser exit shutter. Remove 4 screws and a cable.11. Remove Customer keypad assembly. Remove 5 screws and two cables.12. Remove the display bracket. Remove 10 screws and loosen 3.13. Mount the 3 DES Fix EPP in the new bezel with the hardware provided and install new gasket to outside

of the bezel.14. Mount the Keypad Interface board on the EPP bezel to the right.15. Connect the ribbon cable from the 3 DES Fix EPP to the Keypad Interface board at J1. 16. Connect the two function key cables to the Keypad Interface board. Noting the positions. J7 is for the

Left function keys and J8 is for the Right function keys.17. Connect the 26 pin ribbon cable to J3 on the Keypad Interface board. Pin 1 to pin 1.18. Connect the 10 pin ribbon cable to J5 on the Keypad Interface board. Pin 1 to pin 1.19. Remove the back bracket from the original customer keypad assembly. Set aside.20. Connect the 6 pin EPP serial interface cable to J4.21. Connect the Original 30 pin cable from the BAPE board to the 3 DES Fix Keypad interface board to (J2)

26 pin connector, lining up pins 3 & 4 on the Original cable with pins 1 & 2 on the interface board.22. Connect the Original SDC Bus connector to J6.23. Install the 3 DES Fix EPP bezel to the bracket removed in step 19 and install assembly in the ATM.24. Route the Function keys cables to the function keypads. Noting the cable connected to J7 is for the Left

keys and J8 is for the Right keys. 25. Connect the appropriate cable to the function keypad. J7 to the Left and J8 to the right. 26. Replace the display bracket removed in step 12.27. Remove the BAPE board from the original customer keypad assembly.28. Install 40 pin Jumper plug on BAPE board where the original customer keypad was connected.29. Mount the BAPE board in an impression 8.5 in. to the right of the customer keypad assembly.30. Connect the SDC Bus (10 pin) cable and the 26 pin ribbon cable to the BAPE board.31. Double-check all connections.32. Reinstall the dispenser exit shutter removed in step 10.33. Reinstall the rain gutter removed in step 9.34. Power Up the ATM. 35. Do not proceed until the ATM has loaded its internal Software.36. Power Up the 3 DES Fix Control Module.37. The Controller will auto sync the Protocol, Poll Address and the Baud rate of ATM. 38. Wait for Message “Waiting for Configuration Mode”, then 39. Type 7777 on the EPP to access the 3 DES Fix CONFIGURATION MENU.40. Enter the Password 1= 121212 and Password 2 = 34343441. The “3 DES Fix Configuration Menu” will be displayed.42. Load the Master Keys via the 3 DES Fix EPP (See DES Key Loading Section of this

manual).



Page 29 of 47

3 DES Fix Configuration

1. For Diebold Firmware based ATMs only - Change the Screen size on the ATM Monitor by changing the Device Installation Table (DIT) CRT Option 1 needs = 001 for 40 X 20. Don’t forget to change this DIT setting back to the appropriate value after the Master Keys are loaded.

2. Power Fail ATM and allow it to load up its operating system. 3. When the ATM is Idle, Power Fail the 3 DES Fix Control Module. Go to and watch

the front Monitor on the ATM.)4. The Control Module will “AUTO SYNC” to the ATM and Display the ATM’s Poll

Code.

Page 30 of 47

OUT OF SERVICESTARTING 3 DES Fix v, XXXXXX

EPP v.0.XXX

AUTO SYNC COMPLETED: XX

Please review any inserts and special instructions delivered with your 3 DES Fix kit. Configuration and Master Key entry processes may have additional changes or

enhancements not included in this printing of the user manual

1 Wait Until “WAITING FOR CONFIGURATION MODE”, at this time, type in 7777.

2 Within 30 seconds the following screen should be displayed.

Page 31 of 47

WAITING FOR CONFIG MODE

RECEIVING 3DES CONFIGURATION

3 DES CONFIGURATION

ENTER

EXIT

3 Choose “ENTER”, the First Password Entry Screen will be displayed.

4 Enter Password 1 = 121212 then Choose “ACCEPT” The Password 2 Screen will be displayed

5 Enter Password 2 = 343434 then Choose “ ACCEPT”

Note: If “INVALID PASSWORD” is displayed, Press EXIT and try again.

Page 32 of 47

ENTER PASSWORD 1:

ACCEPT

EXIT

ENTER PASSWORD 2:

ACCEPT

EXIT

OBSERVE: The “3 DES Fix Configuration Menu” will display on the Monitor.

Other options are not for use at this time.

Your new 3 DES Fix EPP

The EPP will activate the Alpha Keys A thru F Only in the Master Key Entry Mode.

Page 33 of 47

1 2 3 A

4 5 6 B

7 8 9 C

F 0 E D

CONFIGURATION MENU

1 CHANGE MASTER KEY2 RESERVED ACCEPT3 MISC CONFIG4 TCP/IP CONFIG5 CHANGE PASSWORD 16 CHANGE PASSWORD 27 DISPLAY CHECK SUMS8 MODEM CONFIG9 ATM CONFIG7

EXIT

Master Key Security Measures

There are two security elements to your new 3 DES Fix EPP based on the MasterCard/VISA Triple DES Mandate:

1. The “Pinvelope” This provides security of the EPP from the moment of manufacture. Each EPP is

manufactured under dual control. These pins need to be entered during the “Master Key Entry Process” to allow access within the secure part of the EPP.

The “Pinvelope” must remain under dual control within your organization.

2. The “Comvelope” Your processor provides the Comvelopes under dual control. The Comvelopes

assure security of all ATM transactions across the network. The Network format of Comvelopes will vary (e.g. four16 digit keys or two 32 digit

keys). Please call Network technical support with any questions on how to construct your Component 1 and Component 2 Master Keys.

Page 34 of 47

Master Key Entry Instructions

1. Choose Menu Item 1 and hit Accept

2. The Next Menu will allow you to choose the Master Key Component that you wish to enter.

3. You will have 2 Pinvelopes that are unique to the EPP. Open your Pinvelope (Part 1 of 2) and Comvelope for Component 1. Choose Component 1 from the Menu. The first screen will request the Pinvelope Number; the second will be for entry of the Comvelope Master Key Component.

4. Type in the 6 Digit Pin from the Pinvelope and hit ACCEPT.

(See the important diagram Your new 3 DES Fix EPP in the User Manual showing which EPP Keys are activated as A-F when Loading Master Key Components.)

5. Enter the 32 Bit Component 1 Master Keys from the Comvelope. – On NCR Machines the Screen will not show all digits. It will show 30 asterisks and will beep audibly for the last two digits entered.

Page 35 of 47

ENTER MASTER KEYS

SELECT OPTIONACCEPT

1 COMPONENT 12 COMPONENT 2

EXIT

PINVELOPE COMPONENT 1

ENTER PINVELOPE VALUE

ACCEPT

CANCEL

6. When you have entered Component 1 and hit ACCEPT, the Checksum will be rendered. Compare to the Checksum provided by the Network who issued the Comvelope.Note: If you have entered an incorrect PIN Number for the EPP’s Pinvelope, you will see the previous Checksum from the Old Master Key displayed. During the course of loading the Master Key Component, if the Keyboard does not beep when you hit an ALPHA Character, you have entered the wrong PIN. If the ALPHA character you are attempting to enter happens to be a “C”(the Cancel Key), Key Loading will abort.

7. If the Checksum you received after loading Component Key 1 is correct, return to Step 2 and proceed with loading Master Key Component 2. Repeat steps above using Pinvelope 2 and Master Key Component 2.

8. When both Components of the Master Keys have been loaded, and each Check Sum verified, you may exit to the Select Options Screen

Page 36 of 47

CKSM FOR COMPONENT 1 : XXXXXX

EXIT

CHANGE COMPONENT 1

ENTER NEW VALUE

XXXXX

ACCEPT

CANCEL

9. If you wish to review the checksums for both Component 1,Component 2 and the Overall Checksum, Choose # 7 Display Checksums.

10. You should exit now, then power fail and reboot the ATM, Control Module and Modem.

Page 37 of 47

MASTER KEY CHECKSUMS:

COMPONENT 1: XXXXXXCOMPONENT 2: XXXXXXOVERALL 1 / 2: XXXXXX

EXIT

RECEIVING ATM CONFIGURATION

OUT OF SERVICESTARTING 3 DES Fix v, XXXXXX

EPP v.0.XXX

Pauses for about 15 to 20 seconds – Displays previous “Out of Service” screen – next diplays the “Out of Service” Screen

Page 38 of 47

AUTO SYNC COMPLETED: XX

OUT OF SERVICE

AUTO SYNC COMPLETED

EMU: NCR PTTYPE SFTWPROTO: BISYNC ADDR: 01

WAITING FOR CONFIG MODE

IMPORTANT NOTE – Ensure the ATM’s original Encryptor Board has A & B Keys Loaded in it. The keys will not be used, so just enter any keystroke except zeroes. Any Generic Set of keys is OK. If the ATM had keys loaded previously you will not have to do this.

Page 39 of 47

RECEIVING ATM CONFIGURATION

(IN SERVICE SCREEN)

CUSTOM SCREEN PROVIDED BY LOAD

Single DES vs. Triple DES

Why run the 3 DES Fix in Pass Thru Mode USING SINGLE DES?

Network is not ready to run Triple DES yet. Can’t get terminal changed over to the A98 System (Triple DES System) at the

Network Processor and you’ve already installed the 3 DES Fix Kit. Performing the Physical Installs first before switching the ATMs over to Triple

DES. Controller malfunction, and can’t leave ATM down while Replacement Controller

is being shipped “Overnight Delivery”.

Pass Thru Procedure (Using ATM Encryptor with new EPP)

Leave the Power connected to the Controller and have EPP connected to the Controller via the 9 Pin Serial Interface Cable at COM3.

Make sure the COM Cables are such that the ATM is directly connected to the Modem. (Controller is Bypassed) (Connecting the 2 COM Cables from the Controller is OK.)

Use the Old method of loading keys if you need to load any. Note: Your Single DES Keys are likely still loaded in the ATM unless you had to get new keys.

This method of eliminating the 3 DES Fix Controller is also a quick way to verify the operation of the EPP using standard keyboard Diagnostic without the Controller being in the equation. When the Controller is connected for Triple DES, you can still, of course, run Standard Keyboard Diagnostics on the EPP.

For Single DES Encryption in EPP (NOT PASS THRU MODE)

Note: You may also Load Single DES Encryption Keys into the EPP to run Single DES. Controller must be connected between ATM and Modem.

See Master Key Entry - Follow the steps #3 through 6 in the Master Key Entry section above. With the following changes:

Use BOTH Comvelopes entering the 16 Digit Comvelope Part A and the 16 digit Comvelope Part B ALL in “COMPONENT 1”

Use 32 zeros “0” ALL in “COMPONENT 2” Finish Master Key entry steps.

Important: Because the Master Key Setup Screen may be slightly different from this guide, press the number corresponding to the MASTER Key Part in which you desire to enter. Then press

ACCEPT

Reset the ATM and Power Fail the 3 DES Fix Control Module. Restore Power and Allow the Network to load the ATM normally.

Page 40 of 47

Technical Appendices

3 DES Fix Technical Support

3 DES Fix Installations or related problems - Call 1-800-831-5723

Dave Allen Ext. 440 Diebold Specialist, 3 DES Fix Tech Support and [email protected]

Doug Dewey Ext. 420 NCR Specialist, 3 DES Fix Tech Support and [email protected]

Star Cross Ext. 450 Master Key Loading, Processor Liaison [email protected] Product Support Manager

David Reyero Ext. 550 Shipping [email protected]

Page 41 of 47

mailto:[email protected]




Software Version Update Instructions

INSTRUCTIONS to Perform SOFTWARE VERSION UPDATEon the 3 DES Fix CONTROL MODULE

1. If the 2 Update Files were emailed to you, save them to your PC first. 2. Format the USB Drive (FAT only) before copying the Files to it.

Very Important - Click on the icon in the Systray to Stop the USB Device before Disconnecting the USB Drive from the PC.

3. Turn OFF the 3 DES Fix Control Module. 4. INSERT the USB DRIVE containing the Update1 and Update2 Files on it.5. Power on the 3 DES Fix Control Module.6. Within 10 Seconds, the Green LED on the box will Come on, Go Off then blink

rapidly for about 6 seconds. Once the Green LED on the Control Module stops blinking, wait 5 seconds, then Power OFF the Control Module.

7. Remove the USB DRIVE.8. If you are going to leave a Logging Key (USB DRIVE containing the Log.cfg file)

in the Control Module, Insert the USB Logging Key now. Otherwise skip this step.9. Power the ATM "Off then On". Allow it to load it's Internal Software or firmware.

Proceed with next step when ATM becomes Idle.10. When the ATM is Idle, "Power On" the 3 DES Fix Control Module.11. The ATM should take a Download from the Host Network Processor within 10

minutes. Call Processor and request Load if the ATM does not take a Load automatically.

12. After the ATM is "In Service" Perform Several Test Transactions to ensure reliable performance.

13. Write the new Software Version Number on the Label that is currently on the 3 DES Fix Control Module.

Note: If the ATM was turned off while it was in the Maintenance/Supply Mode, it may be necessary to cycle the ATM "In and Out" of Supply Mode to bring the ATM back in Service.

3 DES Fix Messages Displayed on ATM Monitor

Control Module Software 5.0 and Above“Off Line”“Out of Service”“Out Of Service” – “Starting 3 DES Fix” Displays the Thor Ver. and EPP Version“Out of Service”“Out Of service” – “AutoSync Completed, XX”

(Poll Adx of ATM is Displayed)

“Waiting for Configuration Mode” (1 Min. wait to enter Master Key Menu)

Page 42 of 47

Operator Action/ Intervention

If no valid keys Pressed OR Pressing FOUR 7’s

(Do Not Press a Key if you want the ATM to take a Host Download now.)

“Receiving ATM Configuration” Until ATM is Up and Online

“Receiving 3 DES Configuration”Loads 3 DES Fix Configuration Menu and Prompts for 2 Passwords.

“3 DES Fix Configuration Menu”“Miscellaneous Configuration”

Menu Item 6 Default =1Set = 0 for Software Based ATM

Menu Item 7 Default = 0 8 Function Key ABCD on Right

FGHI on Left Set = 1 For 4 Left Keys Only

“Change Master Keys” Component 1 = 1A and 1B (32 Bytes)Component 2 = 2A and 2B (32 Bytes)

“Display Checksums” Component 1 ChecksumComponent 2 ChecksumOverall Checksum of 1 and 2

“Exit”“Please Reboot Control Module Modem and ATM”

Page 43 of 47

3 DES Fix Configuration Menu Options

MODEM CONFIGITEM Menu Item Name DEFAULT

1 Baud Rate - 0=110, 1=150, 2=300, 3=600, 4= 1200, 5=2400, 6=4800, 7=9600

6

2 Timing - Future Use - Do not Change 0

3 Display Modem Config - Displays Current Settings

ATM CONFIGMenu Item Name DEFAULT

1 Baud Rate - 0=110, 1=150, 2=300, 3=600, 4= 1200, 5=2400, 6=4800, 7=9600

6

2 Timing - Future Use - Do not Change -3 Display ATM Config - Displays Current Settings

MISCELLANEOUS CONFIG MENUITEM

Menu Item Name DEFAULT

1 Sync Protocol - Future Use N/A

2 Key Delay - Future Use N/A

3 Local Pin Check - Local Pin Verification (Self Processing) 0 = Off, 1 = On

0

4 Emulation - 0 = 911, 1 = 912, 2 = NCR, 3 = Fujitsu 0

5 Auto Restore Config - Future Use N/A

6 DES Mode - 1 = Single DES, 2 = Detect Both Single or Triple DES, 3 = Triple DES

3

7 8 Key, Left Only - 8 Function Keys Using only the Left 4 Keys, 0 = Off, 1 = On

0

8 Default Settings - Future Use - Reset all options to Default Values N/A

Page 44 of 47

3 DES Fix Control Module Error Code Definition List

Note: Error Codes Are Displayed on the ATM’s Consumer Monitor

ERROR CODES

Explanation/ Solution

3DES ERROR: 001Will Reject Key Exchange / Dummy Single DES Encryption Keys need to loaded into the ATM’s Old Single DES Encryption System. ZEROs are not valid – use all “1”s for A&B in ATM

OUT OF SERVICE3 DES Fix Error, The EPP is Offline

This error will occur if the CM is Reset and the EPP Locked Up. 1. On firmware based ATM, Resetting the ATM and Control

Module is the quickest way to bring the EPP back On-line. 2. On software based ATM’s, where resetting the ATM is

undesirable because it takes a long time to reload, disconnect the EPP Power Plug and the Serial Cable from the Control Module, reset.

OUT OF SERVICE 3 DES Fix Error: 002

(Key Change)

Set Options in Config. Menu for Proper DES Mode1. Ensure Network is sending proper DES Key Exchange

3 DES Fix Error: EPP Malfunction

VISA EPP is dead – must replace (will occur on startup_

3 DES Fix Error: 003Non-LPV EPP

Attempting to use a NON-Local Pin Verification EPP to verify PIN at ATM

Page 45 of 47

Diagnostic Key Codes for 3 DES Fix VISA EPP for 56xx

Page 46 of 47

This Diagram is only accurate for Models 56XX, 55XX, and 58XX Using the 3 DES Fix EPP

Key Codes that will display when testing the 3 DES Fix EPP Using Standard ATM Diagnostics

07 03

06 02

05 01

04 00

1 = 10 2 = 11 3 = 12 Enter 27

4 = 14 5 = 15 6 = 16 Clear 13

7 = 24 8 = 25 9 = 26

Cancel 17

20 0 = 21 22 23

Models 56XX, 55XX, and 58XX Key Codes

Diagnostic Key Codes for 3 DES Fix VISA EPP for 50xx

Page 47 of 47

This Diagram is only accurate for 5000 Models using the 3 DES Fix EPPKey Codes that will display when testing the 3 DES Fix EPP Using Standard ATM Diagnostics

76 07

66 17

56 27

46 37

1 = 04 2 = 14 3 = 24 Enter 75

4 = 44 5 = 54 6 =64 Clear 34

7 = 45 8 = 55 9 = 65 Cancel 74

05 0 = 15 25 35

Models 5000 Key Codes

Documents

3-DeS Fix NCR Install-User Manual 12-02-05 (1)