IDTECH VP8810 NEO 3 Payment Device User Manual

: June 16, 2024
: IDTECH

Table of Contents

IDTECH VP8810 NEO 3 Payment Device
FCC Regulatory Compliance
EU DECLARATION OF CONFORMITY
Getting Started
Features
Specifications
Getting Started
Installing the VP8810
Decommissioning SRED Devices
Troubleshooting and Maintenance
Read User Manual Online (PDF format)
Download This Manual (PDF format)

IDTECH VP8810 NEO 3 Payment Device

ID TECH 10721 Walker Street, Cypress, CA 90630-4720 Tel: 714-761-6368 Fax 714-761-8880 www.idtechproducts.com

Copyright© 2022 by International Technologies and Systems Corporation {ID TECH). All rights reserved. ID TECH 10721 Walker Street Cypress, CA 90630 USA This document, as well as the hardware and software it describes, is furnished under license and may only be used by the terms of such license. The content of this paper is furnished for informational use, subject to change without notice, and not to be construed as a commitment by ID TECH. ID TECH assumes no responsibility or liability for any errors or inaccuracies that may appear in this document. Except as permitted by such license, no part of this publication may be reproduced or transmitted by electronic, mechanical, recorded, or any other method, or translated into another language or language form without the express written consent of ID TECH. ID TECH is a registered trademark of International Technologies and Systems Corporation. ViVOpay and Value through Innovation are trademarks of International Technologies and Systems Corporation. Other trademarks are the property of the respective owner. Warranty Disclaimer: The services and hardware are provided “as is” and “as-available” and the use of these services and hardware are at the user’s own risk. ID TECH does not make, and hereby disclaims, any and all other express or implied warranties, including, but not limited to warranties of merchantability, title, fitness for a particular purpose, and any warranties arising from any course of dealing, usage, or trade practice. ID TECH does not warrant that the services or hardware will be uninterrupted, error-free, nor completely secure.

FCC Regulatory Compliance

FCC warning statement
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. The user manual for an intentional or unintentional radiator shall caution the user that changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment.

Note: The grantee is not responsible for any changes or modifications not expressly approved by the party responsible for compliance. Such modifications could void the user’s authority to operate the equipment.

Note: This equipment has been tested and found to comply with the limits for a Class B digital device, under part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not installed and used per the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna.
Increase the separation between the equipment and the receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.

This device complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. The antenna(s) used for this transmitter must not be co-located or operating in conjunction with any other antenna or transmitter and must be installed to provide a separation distance of at least 20cm from all persons.

Cautions and Warnings

| Caution: The VP8810 should be mounted at least 1 foot (30 cm} away from other VP8810. Can be adjusted based on lane setup.
---|---
| Caution: Danger of Explosion if battery is incorrectly replaced. Replace only with same or

equivalent type recommended by the manufacturer. Discard used batteries according to the manufacturer’s instructions.

| Warning: Avoid close proximity to radio transmitters which may reduce the capability of the reader.

ISED Warning statements
This device complies with Canada’s licence-exempt RSSs. Operation is subject to the following two conditions: (I) This device may not cause interference; and (2) This device must accept any interference, including interference that may cause undesired operation of the device.This equipment complies with IC RSS-102 radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator and any part of your body.

CE Caution: RF Exposure
This equipment complies with CE radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance of 20cm between the radiator and your body.

EU DECLARATION OF CONFORMITY

Hereby, ID TECH declares that the radio equipment type VP8810/VP8810P complies with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following Internet address: https://idtechproducts.com/ The device is restricted to indoor use only when operating in the 5150 to 5350 MHz frequency range.

| AT| BE| BG| HR| CY| CZ| DK
---|---|---|---|---|---|---|---
EE| FI| FR| DE| EL| HU| IE
IT| LV| LT| LU| MT| NL| PL
PT| RO| SK| SI| ES| SE| UK(NI)

Notice for Operating Frequency and Output Power

| Model:

VP8810-0800, VP8810- 8800

| Model:

VP8810- 8830

---|---|---
NFC| <116.7dBuV/m at 3m

(Measured Value)

| <116.7dBuV/m at 3m

(Measured Value)

2.4G WLAN (b/g/n): 2400-2483.5

MHz (EIRP dBm)

| <20| <20
5G WLAN (a/n/ac): 5150-

5250/5250-5350/5470-5725 MHz (EIRP dBm)

|

<20

|

<20

BT-EDR/LE (EIRP dBm)| <10| <10
2G (dBm)| Not Applicable| GSM900: <33

GSM1800: <30

3G (dBm)| Not Applicable| Band I: <24

Band VIII: <24

4G (dBm)

|

Not Applicable

| Band 1/20: <23

Band 3: <23

Band 7: <23

Band 8: <23

Band 28: <23

Revision History

Date	Rev	Changes	Author
10/27/2021	50	Initial VP8810 draft; forked from VPSS00	CB
11/25/2022	51	Modify product spec and features for the following variants.

VP8810-0800 Rev. 56

VP8810-8800 Rev. 54

VP8810-8810 Rev. 54

VP8810-8830 Rev. 54

| EC
11/28/2022| 52| Style and formatting changes.| CB

Getting Started

The VP8810 is an all-in-one card reader that can accommodate contact EMV, magstripe, and contactless (NFC) payments and offers PIN pad (chip-and-PIN) capability and electronic signature capture. It is designed to integrate easily with existing POS systems and requires minimal counter space at checkout stands. The VP8810P is equipped with a thermal printer. The VP8810/VP8810P is a PC-certified, SRED-compliant counter-top reader featuring RS-232 (serial), Ethernet, and USB 2.0 communications to POS systems. The VP8810/VP8810P includes support for the following contactless payment applications:

Support for Apple Pay, including VAS protocol
Support for Google Pay, including Smart Tap
Support for Samsung Pay
Support for Mifare Suite
Support for Payment Card Brands:
- VISA
- MasterCard
- AMEX
- Discover
- Interac
- JCB
- UPI

This document assumes that users are familiar with their host POS systems and all related functions.

Features

The VP8810/VP8810P supports the following features:

3.5-inch color digital display (320 x 480 pixels)
Supports PIN on glass
Built-in Thermal Printer (VP8810P only”)
Concealed contactless antenna
PCI 6.X certified
SRED (Secure Reading and Exchange of Data) compliant, with tamper detection and fulltime encryption*
Connectivity interface – RS-232, USB 2.0 via USB Type C, Ethernet 10/100M, Wi-Fi/BLE, and optional LTE 4G (VP8810P LTE variants only)
Audio Line Out through mini-HDMI port
Camera or 1D/2D scanner
ANSI X.9-24 DUKPT key management
IS014443 type A/B and Mifare based contactless payment transactions
Support Common Contact L2 Kernel
Support for contactless transactions via NFC devices
PIN entry for PIN/debit and chip-and-PIN transactions
Magnetic stripe card transactions
Electronic signature capture
Up to four SAM card slots provided
Two SIM card slots provided (VP8810P LTE variants only*)
One SD card slot provided

Note that for encryption to be enabled, the VP8810/VP8810P must be key- injected. ID TECH is a certified Key Injection Facility. Contact your ID TECH representative for details.

Note: VP8810P models include VP8810-8800, VP8810-8810, and VP8810-8830.
Note: VP8810/VP8810P must be power-cycled to switch between 10M and 100M.
Note: Only VP8810-8810 and VP8810-8830 support LTE.
Note: Only VP8810-8810 and VP8810-8830 support LTE.

Specifications

VP8810 Specifications (applicable for model VP8810-0800)

RF Interface

VP8810P Specifications (applicable for model VP8810-8800, VP8810-8810, and VP8810-8830)

RF Interface

Rating

Paper

| PD160R (OJI Paper CO., LTD.)

Getting Started

Unpacking the VP8810/VP8810P

The VP8810 requires a data cable and, if the cable does not supply power, a 5VDC 2A power supply is needed. The VP8810P requires a data cable and a 9VDC 2A power supply. The cable is not included with the VP8810/VP8810P and must be purchased separately from ID TECH. The VP8810/VP8810P can also use a multi- port cable to connect with the host. The MP cable can bridge out the signals of USB Type C (slave), USB Type A (host), Ethernet, RS232, and Audio Line Out. It requires a power supply from a PD adapter. Verify that you have all the required components for the installation:

You may also need a contactless test card (ViVO Contactless Test Card P/N 241-0015-03).

Data on production and personalization
The device has been loaded with a serial number, MAC address, data encryption key, and PIN encryption key by the factory.

Installing the VP8810

Before connecting and mounting the VP8810, plan the installation to conform to PCI 6.X requirements and minimize radio frequency interference. After determining the location and mounting of the VP8810/VP8810P, connect it to power and the POS terminal. Finally, test the VP8810/VP8810P to make sure the installation is successful.

Site Planning
Two environmental considerations affect VP8810/VP8810P installation. PCI certification has specific restrictions on how the reader is positioned to prevent PIN theft. Also consider objects and devices near the reader that may affect the performance of the contactless radio frequency antenna.

PCI PED Compliance
The VP8810/VP8810 is a PCI 6x certified PIN/Debit payment device. PCI 6.x certification requires that sufficient protection be provided to ensure that entering a PIN number CANNOT be viewed by a third party (such as another customer standing nearby, the cashier, or a security camera). The VP8810/VP8810P has design elements, such as a recessed keypad, that meet some of these requirements. However, to fully implement PCI 6.x, be sure to consider the following:

The VP8810/VP8810P must be in a location that will NOT force a customer to enter a PIN that can be viewed by a third party (for example, a customer must tilt or rotate the device for better accessibility due to objects blocking a card swipe).
If the VP8810/VP8810P is elevated on a mounting stand, shielding must be provided on the mount to prevent a PIN being viewed by a third party.
If the VP8810/VP8810P is mounted on a countertop, additional shielding (which can include other devices such as a cash register as long as conditions in (1) above are met) must be provided to ensure that the PIN cannot be viewed by a third party (including cashier and security camera).

WARNING: PCI requires that the device be mounted so that manual PIN entry cannot be observed by a third party (such as another customer standing in line, the cashier at the counter, or a security camera mounted in the ceiling to observe the cash register area). If the PIN entry can be observed, the store owner may be responsible for any losses incurred by the customer if it can be determined that the customer’s PIN was stolen at this location.

Verifying PCI Compliance
Before completing the installation, verify that the VP8810/VP8810P is positioned so that the PIN entry is not visible to other customers, the cashier behind the counter, or video surveillance cameras. If PIN entry is visible, the VP8810/VP8810P must be repositioned or shielding added until none of the above parties can observe PIN entry.

These tests usually require at least two people one to simulate entering the PIN while the other attempts to view the keypad:

Can Another Customer View the PIN: While one person stands at the VP8810/VP8810P with their hand positioned to enter the PIN, the other tester should try to observe the keypad from behind and beside the first person.
Can the Cashier View the PIN: While one person stands at the VP8810/VP8810P with their hand positioned to enter the PIN, the other tester should stand behind the counter and try to observe the PIN keypad. The second tester should move around a little to see if there is a position where they can observe PIN entry.
Can the Video Camera View the PIN: While one person stands at the VP8810/VP8810P with their hand positioned to enter the PIN, the other tester should observe what is being recorded by any video camera with a view of the VP8810/VP8810P. This may require playing back a recording to see if the PIN entry is visible. If the video camera is moveable, the second person should move the video camera to determine if there is a position where PIN entry can be observed.

Retesting Requirements
If the PIN entry on the VP8810/VP8810P is observable in any of the above tests, reposition the VP8810/VP8810P and completely retest all locations to verify that PIN entry is not visible. Consider placing a display to block observation from that position. Repositioning the VP8810/VP8810P to block observance of PIN entry at one location may expose PIN entry to observation at another location. PCI requires repositioning the VP8810/VP8810P and retesting until PIN entry is secure from observation.

24-Hour Device Reboot
Per PCI Requirements, this device reboots every 24 hours. Please contact your device integrator if you need to check the reboot time for your unit.

Radio Frequency Interference
To perform contactless transactions, the VP8810/VP8810P uses a radio frequency antenna. The range (reading distance) and performance of the reader can be affected by other radio frequency emitters and proximity to metal.

For best performance, adhere to the following guidelines:

Do not position the VP8810/VP88 10P closer than 1 foot (30 cm) to other RF-emitting devices. Some environments may require greater separation distances.
Avoid placing the VP8810/VP8810P near large metal objects.
Do not position the VP8810/VP8810P near radio transmitters.

Installation
This section describes how to install the VP8810/VP8810P. The basic steps are:

Connect to power and POS
Mount if required
Test the installation

Note: The VP8810/VP8810P may take up to 30 seconds to finish booting If the unit fails to power up, try reseating the power connector (or change to a different power outlet). If the unit still fails to power up, try replacing the power supply. If the unit still fails to power up, and the power supply is definitely good, contact your local support representative. For more troubleshooting information, see Troubleshooting and Maintenance below.

Communications
The VP8810/8810P can communicate with a host via serial (RS-232), Wi-Fi, Bluetooth, USB, Ethernet, or LTE 4G connections. The diagram below illustrates the layout of various ports.

Only VP8810-8100 and VP8810-8300 support SIM1.
Only VP8810-8100 and VP8810-8300 support SIM2. For VP8810-8800, it is used as SAM4.

Audio Support
VP8810/8810P is equipped with an internal speaker to host 16 MB. of WAV files and can also connect to an external speaker via Audio Line Out through a mini- HDMI port (An extra direct cable or multi-port cable is needed for the connection).

Bluetooth Connection
When using Bluetooth communication with the host, follow these steps:

Search for the Bluetooth name of VP8810/VP8810P on the mobile host.
Select Pairing.
The VP8810/VP8810P will display a window with a random passkey.
Enter the random passkey on your mobile to set up the link.

Paper Roll Installation for Thermal Printer (VP8810P ONLY) (TBC)

Key Replacement
Cryptographic keys can always be replaced by sending the unit back to the manufacturer if necessary (ID TECH is a certified Key Injection Facility). ID TECH also provides several choices for users who need to rotate or replace a cryptographic key in the field:

PKI-RKI Client utility, which can replace keys in the field. It requires an internet connection and a host computer.
ID TECH’s Universal SDK has the RKI API built in. With proper software, a key can be updated programmatically via API (this also requires an internet connection).
ID TECH can provide PKI-RK| integration instructions; in this case, the integrator implements the ID TECH RKI feature within custom software.

Loss or theft
Report the serial number of any lost or stolen product to the vendor from whom it was obtained.

Testing the Installation
After completing the installation and checking for PCI conformance, run the Onboard Diagnostic program as described in Onboard Diagnostics. Then check that the VP8810/VP8810P and the POS are communicating correctly by performing a sample transaction. The following test assumes that the host POS is already programmed to communicate with the VP8810/VP8810P.

Transaction Test
The exact wording that appears on the VP8810/VP8810P screen will depend on the POS application. Consult the documentation for your POS (or payment app) for details.

LED Behavior
The VP8810/VP8810P uses LEDs and the main LCD to denote its status during transactions and in case of errors. Contactless LED lights appear on the digital display.

To test a transaction
Follow the steps below to test a transaction:

Begin a transaction on the POS. Present a card, fob, or phone near the reader or swipe a magnetic stripe card.
A single beep and LED flash indicate that the card has been validated. The VP8810/VP8810P may display “Processing” or similar wording while the transaction is being processed.
If the POS software requires a PIN entry, the screen displays “Please enter PIN”. Use the keypad to enter the PIN.
If the POS application requires a signature, the screen displays “Please sign below”. Use the stylus to enter a signature on the touch screen.
A receipt is printed by the POS with the purchase amount. The VP8810/VP8810P may show “Thank You” or similar wording for a successful transaction.

Device State and Ul

State Beep LCD Indicating

De-activated| Short beep for

5 seconds

| “Deactivated”| The device is in “Manufactory mode;” no security

functions enabled.

“Self-test Fail”

| The device is activated but not ready for sensitive functions.

The reason should be due to missing working keys, the device is suspended due to a self-test fail

or sensitive limitations, etc.

The device blocks all sensitive functions. There is no

way to recover except to return to the manufacturer.

To test a transaction
Follow the steps below to test a transaction:

Begin a transaction on the POS. Present a card, fob, or phone near the reader or swipe a magnetic stripe card
A single beep and LED flash indicate that the card has been validated. The VP8810/VP8810P may display “Processing” or similar wording while the transaction is being processed.
If the POS software requires a PIN entry, the screen displays “Please enter PIN”. Use the keypad to enter the PIN.
If the POS application requires a signature, the screen displays “Please sign below”. Use the stylus to enter a signature on the touch screen.
A receipt is printed by the POS with the purchase amount. The VP8810/VP8810P may show “Thank You” or similar wording for a successful transaction.

Device State and Ul

State Beep LCD Indicating

De-activated| Short beep for

5 seconds

| “Deactivated”| The device is in “Manufactory mode;” no security

functions enabled.

“Self-test Fail”

| The device is activated but not ready for sensitive functions.

The reason should be due to missing working keys, the device is suspended due to self-test fail

or sensitive limitations, etc.

The device blocks all sensitive functions. There is no

way to recover except to return to the manufacturer.

Tamper and Failed Self-Check Indicators
VP8810/VP8810P displays the following indicators when it has been tampered or has any of the other following internal issues, such as an expired certificate, missing key, or similar fault discovered during a self-check. Note that the Tampered screen also displays configuration information used to diagnose the cause of the issue, similar to the image below on the right:

Other Status Messages
VP8810/VP8810P’s LCD can display the following messages for both regular status and in the event of a failed self-check:

State Speaker LCD Indicating

Tamper triggered| Beeps every 1 second| “Tampered”| Device was tampered by physical, temperature, or voltage attack. All sensitive information is erased or unrecoverable. The reader blocks all sensitive functions. There is no way to

recover the reader except to return it to ID TECH.

Certification check fail| No sound| “Cert Fail”| Certificate tree self-check has failed {example of failure: expiration of certification}.
Firmware integrity check fail| No sound| “MSRFail”| MSR failure, usually caused by the abnormal state of the MSR module.
No sound| “FW/BL Fail”| Firmware self-check has failed
Abnormal Key Status| No sound| “Keys Fail”| Encryption key self-check has failed.
No sound| “Need More Key”

“Self -test Fail”

| The reader is activated but not ready for sensitive functions. The reason is most likely due to missing working keys, the reader being suspended due to self-test failure, sensitive limitation, or similar causes.
Deactivated| Short beep for 5 seconds| “Deactivated”| The reader is in “Manufactory mode;” no security functions are enabled.
Activated| No sound| “Activated”| Manufactory data and certificate are loaded into the reader, but no working keys.
Ready| No sound| “Welcome”| The reader is ready for sensitive functions like transactions, Get PIN ,GET account, and similar commands.

If your VP8810/VP8810P is tampered, contact ID TECH support for assistance.

Decommissioning SRED Devices

All PCI devices require proper decommissioning prior to device disposal to ensure the protection of all sensitive financial card data. For instructions on decommissioning your device, see Decommissioning of SRED Devices on the ID TECH Knowledge Base.

Troubleshooting and Maintenance

The VP8810/VP8810P is designed for reliability and ease of troubleshooting. The components that may require troubleshooting include the power supply, the reader, and the data cable.

Maintenance
The VP8810/VP8810P contains no user-serviceable parts within its enclosure. Do not open the VP8810/VP8810P main enclosure.

WARNING: Attempting to open the VP8810/VP8810P enclosure will trigger PCI security measures and the unit will stop functioning even after reassembly, requiring its return to the factory. It is also possible to upgrade the VP8810/VP8810P firmware if required.

Upgrading Firmware (TBC)
VP8810/VP8810P firmware is upgradable, if required for applications. Upgrade firmware using the ID TECH USDK Demo, which is available for free. Obtain the following from your VP8810/VP8810P distributor:

Firmware for the VP8810/VP8810P
USB Type C cable

Firmware upgrades also require a PC with a USB port. The PC will likely already have the required USB driver HID.DLL file. If not, download that file from Microsoft’s website.

To upgrade the firmware:

Install and run the USDK Demo.
Extract the firmware ZIP file to a directory of your choice.
Connect the USB data cable to the VP8810 and PC (see Connecting the VP8810 above). When the VP8810 powers on it appears under the USB devices in the USDK Demo.
Select the Update Device Firmware command under Commands > Device > Update Device Firmware.
Click Execute Command.
A File Explorer window will open; navigate to the directory where you extracted the firmware ZIP, then open imagesfor VLoader »pisces_signed_r25680.bin.
Wait for the USDK Demo to complete the firmware update.
After the USDK Demo applies the firmware, the VP8810 will reboot and validate the firmware file. Please note that this can take up to five minutes to complete. After restarting, the VP8810/VP8810P will have updated firmware and display its Welcome screen.